$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e420e81-dddf-3b39-84ca-87347f93ee1e.roa File: 8e420e81-dddf-3b39-84ca-87347f93ee1e.roa (raw, json) Hash identifier: 5dpvg/agVPHNpNhCYsAgXoqjgONP0NcfHlXGIoAxyj4= Subject key identifier: FE:12:F6:3A:D2:B4:6B:91:CC:64:1A:41:D9:B0:25:10:09:87:15:D7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963668B8A532BF56943FFF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e420e81-dddf-3b39-84ca-87347f93ee1e.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.192.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:68:b8:a5:32:bf:56:94:3f:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=7644410a-c8f6-4131-9d3e-f6a368412dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:84:ae:27:5c:70:db:cb:2b:43:62:73:20:e3: 4f:1f:3c:17:43:a9:38:35:84:20:76:1f:4b:34:38: ed:95:5a:46:6c:91:72:37:16:bb:3c:d6:ca:9d:c4: ea:c5:7b:3a:ca:dd:d7:00:16:c1:0a:54:36:b8:ca: 0e:06:cb:d0:b6:47:96:61:4d:3f:fe:e4:32:57:d0: 2c:5d:e7:49:3f:8b:6a:23:fa:0b:dd:31:41:19:3b: e6:82:eb:86:f3:03:20:15:a4:67:a8:d1:50:7a:d1: 70:db:86:1e:af:dd:7a:9b:4b:92:ec:ef:7e:8d:09: 27:98:57:16:3f:23:16:15:59:ec:38:89:8e:30:62: 87:fe:71:d8:8e:ae:33:a2:8e:b0:18:57:ca:0d:2c: 33:26:dc:de:90:c0:ec:5c:0e:8a:d3:c5:95:db:77: a0:5d:dd:4c:31:8b:42:8e:ff:c6:3b:1b:f7:9a:5a: 21:cc:80:a6:47:e8:e2:6c:72:c9:45:10:5e:52:64: ff:dd:ef:2c:66:16:09:10:19:16:30:cb:0e:40:89: 22:a4:54:68:50:42:11:6b:42:1e:38:20:c7:74:9a: 41:60:73:74:d0:e1:ac:dc:59:bd:21:a9:2b:7e:14: 98:a7:40:02:e9:7f:00:93:74:5a:dc:26:a1:8f:2e: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:12:F6:3A:D2:B4:6B:91:CC:64:1A:41:D9:B0:25:10:09:87:15:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e420e81-dddf-3b39-84ca-87347f93ee1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:29:d9:04:cd:74:63:15:5b:89:4f:77:e3:2d:bc:67:ba:42: 45:6e:66:72:78:69:42:1f:51:0e:a4:0c:df:22:40:15:4a:52: 64:11:65:08:78:94:0b:08:c1:72:e4:c4:e2:6a:54:46:a3:00: 31:a9:31:81:80:a5:c5:1b:48:2a:0d:b8:77:e9:64:bc:88:3a: 7f:ce:2c:c7:0b:c8:d1:85:db:67:09:c5:60:c9:4d:e3:ec:da: f7:34:b1:47:9a:92:f3:9c:67:76:a9:88:ff:f1:53:e7:b5:80: d3:ff:51:cc:71:f5:7d:94:15:f3:9a:73:d0:9b:e8:19:60:38: 99:01:3b:ba:d2:75:c9:08:71:d2:ee:61:46:5e:0b:45:d2:2a: 7c:e1:27:65:d3:44:25:4e:e8:aa:2b:ce:69:e9:19:8f:b4:51: 65:2b:81:bf:2f:f7:a2:b4:ea:f0:86:1a:2e:5c:af:2b:59:fb: 85:7f:65:0a:ce:fe:16:49:08:2d:82:c2:a6:c9:aa:62:6f:3e: d6:e6:91:ba:39:2a:e2:ff:1b:c1:c8:7f:f5:c3:8d:52:08:d3: 9f:21:08:37:77:22:de:2f:46:fe:30:95:db:38:82:fe:57:4c: 82:d8:79:41:68:d2:90:67:38:60:5e:b1:a2:a4:95:d3:fb:21: 32:2a:19:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmi4pTK/VpQ//4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NzY0NDQxMGEtYzhmNi00MTMxLTlkM2UtZjZhMzY4NDEyZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoSuJ1xw28srQ2JzIONPHzwXQ6k4NYQgdh9L NDjtlVpGbJFyNxa7PNbKncTqxXs6yt3XABbBClQ2uMoOBsvQtkeWYU0//uQyV9As XedJP4tqI/oL3TFBGTvmguuG8wMgFaRnqNFQetFw24Yer916m0uS7O9+jQknmFcW PyMWFVnsOImOMGKH/nHYjq4zoo6wGFfKDSwzJtzekMDsXA6K08WV23egXd1MMYtC jv/GOxv3mlohzICmR+jibHLJRRBeUmT/3e8sZhYJEBkWMMsOQIkipFRoUEIRa0Ie OCDHdJpBYHN00OGs3Fm9IakrfhSYp0AC6X8Ak3Ra3Cahjy7jNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4S9jrStGuRzGQaQdmwJRAJhxXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGU0MjBlODEtZGRkZi0z YjM5LTg0Y2EtODczNDdmOTNlZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQp2QTNdGMVW4lPd+MtvGe6QkVuZnJ4aUIfUQ6kDN8iQBVKUmQRZQh4 lAsIwXLkxOJqVEajADGpMYGApcUbSCoNuHfpZLyIOn/OLMcLyNGF22cJxWDJTePs 2vc0sUeakvOcZ3apiP/xU+e1gNP/Ucxx9X2UFfOac9Cb6BlgOJkBO7rSdckIcdLu YUZeC0XSKnzhJ2XTRCVO6KorzmnpGY+0UWUrgb8v96K06vCGGi5crytZ+4V/ZQrO /hZJCC2CwqbJqmJvPtbmkbo5KuL/G8HIf/XDjVII058hCDd3It4vRv4wlds4gv5X TILYeUFo0pBnOGBesaKkldP7ITIqGdE= -----END CERTIFICATE-----Generated at Fri Aug 8 00:48:25 2025 by rpki-client