$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ffe589d3-5c63-3277-a12e-edfbd92b695a.roa File: ffe589d3-5c63-3277-a12e-edfbd92b695a.roa (raw, json) Hash identifier: Xcm3zcGUL8Ba1uSkrn3kytHGhEDDG+lwv6NgkpXYUYs= Subject key identifier: FC:CA:64:CF:F0:0A:24:FD:0C:7C:32:52:55:57:53:71:79:D7:53:8D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963670EEE2F3938E493B5350 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ffe589d3-5c63-3277-a12e-edfbd92b695a.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.199.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:70:ee:e2:f3:93:8e:49:3b:53:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=75ebcee1-860c-41d9-913e-e80bba597b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:e3:8e:21:06:47:fe:75:df:51:85:1e:fb: a1:36:90:51:6a:d9:5a:50:35:89:91:d9:d8:bb:a8: a0:92:2f:47:5d:dd:ad:69:11:a1:61:34:64:2b:85: db:68:43:4e:72:ad:6b:79:16:58:e5:51:dd:b7:7b: 2e:b6:e1:78:a3:51:79:54:96:8a:d9:9d:4e:47:19: 8d:eb:e4:29:c1:38:32:ed:69:5d:1a:a3:df:b6:16: 99:e6:94:aa:b0:a6:3c:d1:b6:68:0f:2f:0d:57:56: 65:08:a2:e0:44:9c:ff:f5:3a:81:90:b6:fd:c4:f6: d5:0e:53:a7:fa:58:6f:eb:cc:0f:de:47:e9:41:12: 1e:40:75:98:f2:d2:14:41:76:8f:6e:bc:06:41:7b: 35:cb:45:c6:31:3d:8b:8f:1f:32:37:71:24:e6:f6: 5d:76:d9:33:72:d6:a3:b0:a8:10:8c:87:fe:55:8a: 47:21:90:2c:6b:27:ac:81:fe:37:45:ad:c9:ae:1b: da:8d:d5:8f:0d:c2:ef:2e:a6:17:67:5e:4c:cb:ba: 97:80:0b:0e:9a:f4:80:39:db:46:93:8b:de:3d:a6: bc:00:a4:9b:e3:20:74:6b:2f:cf:fb:18:4c:c3:49: a7:bd:ea:c9:0e:e5:c7:9b:d6:2e:19:a6:03:f3:68: c3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CA:64:CF:F0:0A:24:FD:0C:7C:32:52:55:57:53:71:79:D7:53:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ffe589d3-5c63-3277-a12e-edfbd92b695a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e2:38:c1:7b:1b:c8:55:bb:d3:35:77:57:b9:a2:8c:0e:93: 43:c8:12:e1:e7:30:97:08:30:61:11:a5:46:98:04:a7:b9:a6: 86:03:e8:51:d9:51:92:ec:91:bc:24:19:6c:2d:e5:f5:ca:78: e0:2f:fc:b5:a9:ce:2f:c3:76:11:df:26:fc:59:9d:7b:a2:64: b8:81:e1:7a:19:04:89:73:90:53:35:52:4d:95:04:7d:41:67: 24:1f:58:1a:b9:e9:e9:27:06:fe:a1:18:41:4f:1c:9c:fb:64: de:ef:03:14:4f:f7:e5:0f:a0:29:8e:d5:cf:ed:ab:a9:fc:1f: c2:49:52:04:95:04:19:a9:ee:2c:e2:9f:5e:b9:ab:c7:de:51: aa:88:66:f0:df:3f:99:e2:08:7a:bc:91:b8:33:9c:d9:86:34: 7c:27:4a:69:9c:fb:41:62:51:69:34:f7:2f:c6:7c:ba:ac:db: 93:5c:99:97:16:25:28:41:5c:9d:f6:b0:de:f4:db:8e:45:21: 45:4a:a9:1e:d4:14:b0:b3:be:c0:b3:db:87:3f:c1:35:c2:c7: 82:51:40:4d:14:ac:d1:23:b4:f5:07:95:9a:20:7f:91:c5:1c: c3:92:3f:63:43:65:d1:96:68:70:86:ac:e4:5f:05:ce:56:d8: fc:a7:38:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnDu4vOTjkk7U1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NzVlYmNlZTEtODYwYy00MWQ5LTkxM2UtZTgwYmJhNTk3YjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYnjjiEGR/5131GFHvuhNpBRatlaUDWJkdnY u6igki9HXd2taRGhYTRkK4XbaENOcq1reRZY5VHdt3sutuF4o1F5VJaK2Z1ORxmN 6+QpwTgy7WldGqPfthaZ5pSqsKY80bZoDy8NV1ZlCKLgRJz/9TqBkLb9xPbVDlOn +lhv68wP3kfpQRIeQHWY8tIUQXaPbrwGQXs1y0XGMT2Ljx8yN3Ek5vZddtkzctaj sKgQjIf+VYpHIZAsayesgf43Ra3JrhvajdWPDcLvLqYXZ15My7qXgAsOmvSAOdtG k4vePaa8AKSb4yB0ay/P+xhMw0mnverJDuXHm9YuGaYD82jDjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzKZM/wCiT9DHwyUlVXU3F511ONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmZlNTg5ZDMtNWM2My0z Mjc3LWExMmUtZWRmYmQ5MmI2OTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIziOMF7G8hVu9M1d1e5oowOk0PIEuHnMJcIMGERpUaYBKe5poYD6FHZ UZLskbwkGWwt5fXKeOAv/LWpzi/DdhHfJvxZnXuiZLiB4XoZBIlzkFM1Uk2VBH1B ZyQfWBq56eknBv6hGEFPHJz7ZN7vAxRP9+UPoCmO1c/tq6n8H8JJUgSVBBmp7izi n165q8feUaqIZvDfP5niCHq8kbgznNmGNHwnSmmc+0FiUWk09y/GfLqs25NcmZcW JShBXJ32sN70245FIUVKqR7UFLCzvsCz24c/wTXCx4JRQE0UrNEjtPUHlZogf5HF HMOSP2NDZdGWaHCGrORfBc5W2PynOAI= -----END CERTIFICATE-----Generated at Sun Aug 24 00:33:58 2025 by rpki-client