$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9fddfbe3-da29-381a-b985-5a5580e424a3.roa File: 9fddfbe3-da29-381a-b985-5a5580e424a3.roa (raw, json) Hash identifier: nJtWzM9YbH0/oiXMoab1xJcWKXBOQXAH28UqOJQz/M8= Subject key identifier: 2A:58:2D:B0:23:09:A4:C6:6D:8F:2F:93:68:48:72:5D:45:77:5A:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636697DF719E2AAB86F9EC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9fddfbe3-da29-381a-b985-5a5580e424a3.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.192.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:69:7d:f7:19:e2:aa:b8:6f:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=2e6cbd07-793c-4571-a870-bd451b805f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:3b:5a:e4:20:be:46:2d:2d:81:3e:f1:79: d7:82:ed:a4:ea:6c:ee:ae:50:9b:5b:79:a5:1d:7a: 5c:02:8b:11:97:d0:60:e4:b2:b1:aa:98:3b:05:0e: 4d:2e:4f:6d:e4:4f:62:01:34:95:35:08:f9:df:e2: c6:6c:5e:67:d9:6f:81:72:69:5a:14:34:e6:85:79: 2e:2f:c7:47:8a:ed:10:c9:56:52:1f:dd:65:90:0e: 3f:09:ab:09:88:89:2e:e5:ef:47:90:0c:67:4a:63: d2:e8:ce:81:85:b6:73:8e:f3:a3:71:9f:94:9c:28: 52:7c:29:4c:ca:97:c4:c1:32:a3:ea:30:65:9e:de: b3:14:74:01:f6:34:1c:9f:3c:92:7a:e3:8f:c9:c4: d7:f1:ff:17:35:d1:07:f3:33:84:ce:f2:8f:4f:12: c3:51:8b:c1:bd:6e:d6:73:5c:43:17:20:22:7b:6d: 1f:06:a7:dd:2f:a2:67:0a:6a:34:52:aa:3e:00:ad: 0d:a4:c5:e4:70:50:86:06:de:60:c9:4f:06:ba:81: e7:67:ed:13:31:aa:b0:2c:8d:83:9b:b0:b7:d9:15: 39:3b:67:41:d4:e7:7b:be:99:0d:41:86:f5:45:36: ce:85:b5:eb:eb:c0:c2:9b:b9:bf:d5:bb:b6:ed:af: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:58:2D:B0:23:09:A4:C6:6D:8F:2F:93:68:48:72:5D:45:77:5A:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9fddfbe3-da29-381a-b985-5a5580e424a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:56:ba:6d:1f:11:a7:bb:79:48:eb:27:0e:9e:0a:21:f3:89: 67:f2:41:be:0a:fe:61:84:cc:11:af:b8:c4:3f:dd:53:d0:21: 63:e0:9d:13:92:4f:3d:5e:d5:8e:91:4d:5a:06:b6:6d:33:3f: 0e:c2:f6:96:7a:ba:84:2e:ef:f7:39:b0:a3:c5:76:92:53:af: 48:f9:bf:2a:27:24:fe:29:1f:14:ae:62:25:03:74:22:a6:aa: 80:68:cf:1b:50:85:f6:c4:f4:c2:32:c6:06:32:39:d7:81:ab: ed:d0:d0:75:31:8a:e7:20:22:b7:87:c2:ae:09:07:ec:9b:10: 10:d7:3a:42:52:48:78:66:fd:10:cc:66:e9:76:bd:a0:7f:28: 7d:41:4b:02:9e:2c:45:e3:bf:44:0a:e0:cc:67:a6:96:2d:ff: 43:88:48:02:c9:27:60:a2:26:62:75:8d:bc:54:e3:e5:32:5c: 81:d5:06:4a:22:05:61:2d:03:41:30:de:c5:b5:fd:18:3f:3b: 4a:69:a3:7f:eb:5e:dd:6f:25:91:77:cf:61:69:ee:a4:ac:82: 7d:11:02:cd:1c:9f:f6:d7:92:d0:de:5d:e0:f8:a1:b0:af:b5: 36:84:9c:9f:11:44:d9:23:41:8f:24:ee:2d:7a:2d:28:85:d1: 6d:d7:42:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNml99xniqrhvnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MmU2Y2JkMDctNzkzYy00NTcxLWE4NzAtYmQ0NTFiODA1Zjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDc7WuQgvkYtLYE+8XnXgu2k6mzurlCbW3ml HXpcAosRl9Bg5LKxqpg7BQ5NLk9t5E9iATSVNQj53+LGbF5n2W+BcmlaFDTmhXku L8dHiu0QyVZSH91lkA4/CasJiIku5e9HkAxnSmPS6M6BhbZzjvOjcZ+UnChSfClM ypfEwTKj6jBlnt6zFHQB9jQcnzySeuOPycTX8f8XNdEH8zOEzvKPTxLDUYvBvW7W c1xDFyAie20fBqfdL6JnCmo0Uqo+AK0NpMXkcFCGBt5gyU8GuoHnZ+0TMaqwLI2D m7C32RU5O2dB1Od7vpkNQYb1RTbOhbXr68DCm7m/1bu27a+aAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpYLbAjCaTGbY8vk2hIcl1Fd1osMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWZkZGZiZTMtZGEyOS0z ODFhLWI5ODUtNWE1NTgwZTQyNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpWum0fEae7eUjrJw6eCiHziWfyQb4K/mGEzBGvuMQ/3VPQIWPgnROS Tz1e1Y6RTVoGtm0zPw7C9pZ6uoQu7/c5sKPFdpJTr0j5vyonJP4pHxSuYiUDdCKm qoBozxtQhfbE9MIyxgYyOdeBq+3Q0HUxiucgIreHwq4JB+ybEBDXOkJSSHhm/RDM Zul2vaB/KH1BSwKeLEXjv0QK4MxnppYt/0OISALJJ2CiJmJ1jbxU4+UyXIHVBkoi BWEtA0Ew3sW1/Rg/O0ppo3/rXt1vJZF3z2Fp7qSsgn0RAs0cn/bXktDeXeD4obCv tTaEnJ8RRNkjQY8k7i16LSiF0W3XQkA= -----END CERTIFICATE-----Generated at Sat Aug 9 15:09:58 2025 by rpki-client