$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/53a67372-4cfc-31b4-bf9b-9302a2af70d2.roa File: 53a67372-4cfc-31b4-bf9b-9302a2af70d2.roa (raw, json) Hash identifier: CcFQw9b6ielGcgZ2SpPKfQ1bOkiwcQxsDUWn/8WifWY= Subject key identifier: 1E:7E:5D:B8:C6:C4:3C:28:78:72:3C:9D:33:00:AB:7A:8A:34:F1:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963668C747DD64EA9DE02700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/53a67372-4cfc-31b4-bf9b-9302a2af70d2.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.192.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:68:c7:47:dd:64:ea:9d:e0:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=774cbeaf-e21a-4208-9208-ce3b1aca4e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:17:79:2d:94:e6:cc:01:0f:ad:ae:b0:74: 90:e2:18:9d:f9:c7:bd:e7:a5:0f:8c:84:f4:d8:2f: b8:1d:b7:ca:1e:4c:b1:dc:cc:37:3c:cb:4d:14:fe: 65:d7:a5:c2:12:c8:fd:13:06:2b:2e:15:3d:e7:93: 4c:58:6e:5b:7d:e2:7f:b1:96:f5:e0:01:f8:2c:62: 95:0f:46:14:09:c3:53:f4:ac:87:db:1e:f9:70:6a: 45:40:65:22:3f:38:81:29:ae:39:5a:90:57:37:92: bc:04:dd:ce:c0:76:f1:e0:8b:90:e4:bb:88:6f:fd: 68:a5:fb:63:b3:b7:a7:ad:80:5b:e7:86:d1:a8:b1: 1e:bc:10:cc:aa:02:15:1d:32:ca:52:ee:5a:0a:d3: 2d:db:3e:64:3c:15:7f:13:32:c8:30:a5:92:49:7d: 45:47:d5:95:03:d3:de:17:20:8f:48:3b:e6:2d:50: f4:58:08:b8:c8:5d:5e:8c:35:37:62:aa:19:81:11: f2:fe:fa:9f:40:bd:0c:16:ed:80:ff:e3:56:f5:72: 17:2a:8b:12:7c:00:f4:59:36:93:f6:44:75:fe:ab: 9b:6d:6f:db:88:41:bf:d4:7b:a7:4d:96:c3:95:23: 39:5b:29:89:93:30:b1:93:88:06:53:a0:aa:1a:48: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7E:5D:B8:C6:C4:3C:28:78:72:3C:9D:33:00:AB:7A:8A:34:F1:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/53a67372-4cfc-31b4-bf9b-9302a2af70d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:3c:8b:f7:d7:36:d4:a8:0f:1f:21:83:4f:48:a2:1a:91:28: 96:0e:27:7b:ff:8e:28:fc:cb:a7:81:bc:33:79:6c:dc:f8:b4: ed:3a:52:11:8f:c8:78:2e:73:08:f3:b1:42:c4:0f:ff:a5:9b: 14:34:56:9b:b6:1e:34:9f:0c:bd:ef:38:8d:e9:57:d6:51:e7: 05:34:4e:5b:9b:f7:35:c7:e0:48:4f:0c:87:bc:fc:ec:23:ba: 24:2e:a7:04:b3:93:f5:9f:79:5a:57:2f:85:12:7f:26:1b:84: ee:07:f1:46:87:e7:9e:12:2a:0e:11:da:32:08:52:02:bc:42: a6:5e:7f:f0:0e:69:4f:9c:60:5d:ab:cc:0b:54:59:22:15:7c: b3:a5:a0:fe:8a:8d:a2:4c:4c:9b:ed:f3:43:66:ad:b4:d4:74: 8b:12:ca:80:7d:2d:ee:b8:8b:e3:34:10:31:18:2d:65:80:d8: d8:cb:a5:3c:0c:19:1c:c7:32:e8:c9:b5:47:e9:06:79:d3:89: 79:7c:27:10:1a:27:94:ac:50:39:11:eb:61:d4:a3:0c:5d:9e: ce:97:a0:83:d8:3f:a1:a4:af:52:c4:b9:b7:7f:d5:82:6d:d2: 83:30:e5:f6:ac:52:1d:00:13:74:5b:11:5d:26:6e:bb:2a:ac: 7e:88:01:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmjHR91k6p3gJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk Nzc0Y2JlYWYtZTIxYS00MjA4LTkyMDgtY2UzYjFhY2E0ZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1QXeS2U5swBD62usHSQ4hid+ce956UPjIT0 2C+4HbfKHkyx3Mw3PMtNFP5l16XCEsj9EwYrLhU955NMWG5bfeJ/sZb14AH4LGKV D0YUCcNT9KyH2x75cGpFQGUiPziBKa45WpBXN5K8BN3OwHbx4IuQ5LuIb/1opftj s7enrYBb54bRqLEevBDMqgIVHTLKUu5aCtMt2z5kPBV/EzLIMKWSSX1FR9WVA9Pe FyCPSDvmLVD0WAi4yF1ejDU3YqoZgRHy/vqfQL0MFu2A/+NW9XIXKosSfAD0WTaT 9kR1/qubbW/biEG/1HunTZbDlSM5WymJkzCxk4gGU6CqGkjeXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5+XbjGxDwoeHI8nTMAq3qKNPGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTNhNjczNzItNGNmYy0z MWI0LWJmOWItOTMwMmEyYWY3MGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw8i/fXNtSoDx8hg09IohqRKJYOJ3v/jij8y6eBvDN5bNz4tO06UhGP yHgucwjzsULED/+lmxQ0Vpu2HjSfDL3vOI3pV9ZR5wU0Tlub9zXH4EhPDIe8/Owj uiQupwSzk/WfeVpXL4USfyYbhO4H8UaH554SKg4R2jIIUgK8QqZef/AOaU+cYF2r zAtUWSIVfLOloP6KjaJMTJvt80NmrbTUdIsSyoB9Le64i+M0EDEYLWWA2NjLpTwM GRzHMujJtUfpBnnTiXl8JxAaJ5SsUDkR62HUowxdns6XoIPYP6Gkr1LEubd/1YJt 0oMw5fasUh0AE3RbEV0mbrsqrH6IAdU= -----END CERTIFICATE-----Generated at Wed Aug 6 13:09:24 2025 by rpki-client