$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/046e8ed8-db94-360d-8428-42828b54bf1a.roa File: 046e8ed8-db94-360d-8428-42828b54bf1a.roa (raw, json) Hash identifier: EFs1o6jFYjWsFv4gPwPB71KoWvQgpqpMuqILrCG05D0= Subject key identifier: 7E:CC:9C:5D:3D:36:05:C5:B5:B5:9D:3B:F3:D8:A3:37:9B:BE:A5:A9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AADF1317CC758F2BBFED0C100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/046e8ed8-db94-360d-8428-42828b54bf1a.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 22773 IP address blocks: 72.192.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:31:7c:c7:58:f2:bb:fe:d0:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=8a5af1b9-bf29-4d5c-8d13-fb1130c3b6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8b:26:b2:41:82:f5:07:ec:f2:13:86:67:0a: 4b:af:a2:5b:37:59:a7:99:60:39:f8:bd:d5:c9:74: 96:ed:e7:f9:19:fb:74:53:85:f4:76:03:b2:32:ee: ba:d2:8c:cb:da:e6:8f:8f:19:13:bc:7a:76:bf:fa: 0e:45:89:f2:27:24:c3:26:ae:33:e5:24:a0:df:6b: ed:00:bd:31:24:2e:b3:c9:90:30:ec:8e:02:26:ba: 4a:90:32:4b:b5:d1:8b:f9:1e:0d:b4:14:7a:fd:72: 53:33:05:7c:92:83:87:1f:0e:aa:d4:0a:6c:5e:50: a2:50:26:91:46:84:ce:3c:60:e7:07:fa:81:96:7f: e2:4b:ed:c8:40:91:6d:c5:89:a7:ae:73:22:70:9b: d6:32:13:d1:dd:00:d5:8d:b8:5d:05:e5:cc:6d:c9: bb:ba:08:1b:cf:86:b8:60:a4:0c:f4:10:02:be:8a: fa:09:1a:11:8d:54:89:cc:e6:77:20:9e:df:48:f8: 8d:68:9d:79:f1:9e:4e:46:39:9b:79:f1:ae:35:ca: 0e:db:bc:60:93:19:00:fd:ff:9f:b1:10:3e:04:0f: 0f:d7:a8:66:be:85:e8:b7:e2:a5:42:8c:c6:62:e7: bc:cf:d0:36:38:f4:1e:8a:9c:e2:c5:ce:1a:cf:d3: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CC:9C:5D:3D:36:05:C5:B5:B5:9D:3B:F3:D8:A3:37:9B:BE:A5:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/046e8ed8-db94-360d-8428-42828b54bf1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:37:12:c9:a4:36:18:54:fe:f2:a9:09:d3:48:dc:0d:bd:88: 14:be:43:3b:4f:6b:96:70:e5:a1:e8:a0:99:bd:9f:d2:e0:0d: a5:3a:47:39:f2:1e:dd:1e:2d:55:c3:85:2e:db:18:61:1c:2d: 68:3a:2e:a6:70:a5:fe:4c:58:a3:b0:31:6a:96:e9:3c:e5:94: 18:9c:0a:ea:1c:e4:9f:dd:a6:ae:90:9d:ea:66:48:2f:cc:ea: be:d8:5e:f3:3a:d4:c5:c5:15:76:9a:7d:8d:00:fd:d2:55:82: 91:8d:c5:e4:0d:92:34:37:6c:44:57:e2:47:0a:8c:c2:23:63: f7:0c:ef:b2:29:d8:1b:54:76:97:5e:4a:34:9d:48:f0:6d:95: 0d:94:0f:03:34:11:05:50:52:01:7f:5f:e0:e8:00:85:86:3f: d3:c0:c9:c2:3a:19:48:87:f8:42:e0:55:46:ec:ad:c7:81:f6: 00:b9:a9:86:fc:48:c9:5f:16:45:98:a5:26:4a:bb:80:1d:7e: fc:d7:41:5a:59:a2:b3:b4:a6:9f:5c:44:88:31:8b:8b:68:e1: d0:fe:8d:50:1e:ba:b5:8e:36:dd:66:d9:00:8a:79:5f:07:9b: 23:3c:64:82:8f:5e:93:04:2a:9b:db:44:42:69:dc:bd:be:13: 95:57:94:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8TF8x1jyu/7QwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk OGE1YWYxYjktYmYyOS00ZDVjLThkMTMtZmIxMTMwYzNiNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYsmskGC9Qfs8hOGZwpLr6JbN1mnmWA5+L3V yXSW7ef5Gft0U4X0dgOyMu660ozL2uaPjxkTvHp2v/oORYnyJyTDJq4z5SSg32vt AL0xJC6zyZAw7I4CJrpKkDJLtdGL+R4NtBR6/XJTMwV8koOHHw6q1ApsXlCiUCaR RoTOPGDnB/qBln/iS+3IQJFtxYmnrnMicJvWMhPR3QDVjbhdBeXMbcm7uggbz4a4 YKQM9BACvor6CRoRjVSJzOZ3IJ7fSPiNaJ158Z5ORjmbefGuNcoO27xgkxkA/f+f sRA+BA8P16hmvoXot+KlQozGYue8z9A2OPQeipzixc4az9NS5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7MnF09NgXFtbWdO/PYozebvqWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDQ2ZThlZDgtZGI5NC0z NjBkLTg0MjgtNDI4MjhiNTRiZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU3EsmkNhhU/vKpCdNI3A29iBS+QztPa5Zw5aHooJm9n9LgDaU6Rzny Ht0eLVXDhS7bGGEcLWg6LqZwpf5MWKOwMWqW6TzllBicCuoc5J/dpq6QnepmSC/M 6r7YXvM61MXFFXaafY0A/dJVgpGNxeQNkjQ3bERX4kcKjMIjY/cM77Ip2BtUdpde SjSdSPBtlQ2UDwM0EQVQUgF/X+DoAIWGP9PAycI6GUiH+ELgVUbsrceB9gC5qYb8 SMlfFkWYpSZKu4AdfvzXQVpZorO0pp9cRIgxi4to4dD+jVAeurWONt1m2QCKeV8H myM8ZIKPXpMEKpvbREJp3L2+E5VXlE8= -----END CERTIFICATE-----Generated at Wed Aug 6 13:06:06 2025 by rpki-client