$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a92c5102-4ece-320d-95f6-146a44b98c1e.roa File: a92c5102-4ece-320d-95f6-146a44b98c1e.roa (raw, json) Hash identifier: SXtwCjOT5AjpNmQcG3/5GMSyk+fANyMog76HyZ4dtJw= Subject key identifier: C4:28:6D:4C:68:D5:2A:DA:BC:88:C5:D5:4E:65:1A:78:85:9B:A0:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367C5C190C1D3186AC7D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a92c5102-4ece-320d-95f6-146a44b98c1e.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 174.65.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:7c:5c:19:0c:1d:31:86:ac:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=431de22a-3f4b-4e99-be51-84ccf605bdb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:88:e5:13:86:90:e2:86:ec:d0:ef:b0:97: c9:98:2f:f3:c9:22:57:d2:6f:a8:a0:f5:2c:d6:dd: 7e:63:e8:87:32:f0:07:db:fe:80:94:14:0d:05:bb: 25:e2:04:58:80:54:b8:d5:5c:5b:cd:c5:ab:ff:1d: bd:6b:ce:50:39:b2:2b:91:30:fe:61:4f:44:cd:7b: b5:3a:7c:c7:b6:d7:4a:3e:ac:76:62:ef:d1:62:9a: a6:03:ae:41:9d:49:b4:ef:6a:30:04:89:fc:53:13: e0:4e:64:63:19:8f:47:79:98:89:f5:2c:0c:aa:43: 39:14:12:54:45:2c:a9:69:1f:a9:a8:e8:ef:9b:9d: ba:94:3f:c7:78:5e:26:3c:6e:c8:64:26:29:26:c2: f3:f9:49:12:66:08:ad:c5:d7:87:91:da:d1:b4:71: 54:6e:a4:68:d8:10:d9:38:74:42:19:ff:fe:bc:9a: 57:71:fd:d3:22:43:5f:40:f1:41:36:60:75:cd:83: f0:10:8b:6a:5b:b5:b2:31:42:07:3a:19:d7:8a:d2: b2:77:9e:94:25:ff:51:ab:67:38:d6:3e:a9:74:2a: 6d:30:60:e4:09:e8:43:29:56:2a:0a:e3:bc:64:aa: 42:b8:2f:1c:03:0b:20:43:cb:7f:e5:22:45:c8:8d: 47:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:28:6D:4C:68:D5:2A:DA:BC:88:C5:D5:4E:65:1A:78:85:9B:A0:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a92c5102-4ece-320d-95f6-146a44b98c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d1:e4:21:00:9e:f4:ce:8f:98:ea:b5:45:14:df:86:cb:57: ff:33:2e:03:c7:9d:7a:3d:4c:0b:4b:55:b5:b4:c5:b5:c2:70: a6:62:15:5e:5f:f0:83:02:e0:c9:6f:95:3c:40:d3:c3:d3:4a: d8:52:b7:0c:ea:9b:c8:fd:05:4c:57:7b:36:81:c7:0a:a2:fe: cb:18:fb:e9:81:a0:44:6e:8c:5c:f5:d7:f1:5e:40:01:d1:02: ab:ac:52:68:62:79:2a:f2:bc:84:b4:d7:63:ba:80:4b:e6:0c: fb:0e:1b:56:a0:5c:7e:c5:45:29:a1:19:2b:aa:10:4d:88:9d: 63:e5:bb:5e:c7:a0:34:f3:df:63:3d:df:78:0a:8f:87:55:77: 92:db:ce:df:2b:13:86:42:4e:b1:c6:63:ba:1d:bf:d0:83:ce: 52:2e:72:a0:3f:b7:f9:73:dc:9c:ef:24:7c:37:08:49:9c:01: 01:e9:77:5e:3a:fa:02:d4:f4:8c:40:da:53:31:3a:b2:5f:f4: 0d:7f:15:7a:ec:47:96:fe:b2:07:01:3a:c2:4f:78:1e:ec:2e: d8:84:d7:c8:9a:d4:b5:d1:fd:df:e0:3b:60:97:e1:17:2c:03: 6a:ae:32:12:67:a1:2d:69:92:0f:72:76:c4:31:d2:71:a8:9a: ce:ed:97:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnxcGQwdMYasfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NDMxZGUyMmEtM2Y0Yi00ZTk5LWJlNTEtODRjY2Y2MDViZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsaI5ROGkOKG7NDvsJfJmC/zySJX0m+ooPUs 1t1+Y+iHMvAH2/6AlBQNBbsl4gRYgFS41VxbzcWr/x29a85QObIrkTD+YU9EzXu1 OnzHttdKPqx2Yu/RYpqmA65BnUm072owBIn8UxPgTmRjGY9HeZiJ9SwMqkM5FBJU RSypaR+pqOjvm526lD/HeF4mPG7IZCYpJsLz+UkSZgitxdeHkdrRtHFUbqRo2BDZ OHRCGf/+vJpXcf3TIkNfQPFBNmB1zYPwEItqW7WyMUIHOhnXitKyd56UJf9Rq2c4 1j6pdCptMGDkCehDKVYqCuO8ZKpCuC8cAwsgQ8t/5SJFyI1HqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQobUxo1SravIjF1U5lGniFm6CgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTkyYzUxMDItNGVjZS0z MjBkLTk1ZjYtMTQ2YTQ0Yjk4YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzR5CEAnvTOj5jqtUUU34bLV/8zLgPHnXo9TAtLVbW0xbXCcKZiFV5f 8IMC4MlvlTxA08PTSthStwzqm8j9BUxXezaBxwqi/ssY++mBoERujFz11/FeQAHR AqusUmhieSryvIS012O6gEvmDPsOG1agXH7FRSmhGSuqEE2InWPlu17HoDTz32M9 33gKj4dVd5Lbzt8rE4ZCTrHGY7odv9CDzlIucqA/t/lz3JzvJHw3CEmcAQHpd146 +gLU9IxA2lMxOrJf9A1/FXrsR5b+sgcBOsJPeB7sLtiE18ia1LXR/d/gO2CX4Rcs A2quMhJnoS1pkg9ydsQx0nGoms7tl2Q= -----END CERTIFICATE-----Generated at Wed Aug 6 11:22:43 2025 by rpki-client