$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8634b5a-b3e0-3b35-8b83-6677c76461a3.roa File: b8634b5a-b3e0-3b35-8b83-6677c76461a3.roa (raw, json) Hash identifier: dAD7N6y42NexHEgy2UAQ06GVtOLw4jQK/Z7+zMYjK3Y= Subject key identifier: 01:3A:82:A4:43:26:8C:36:95:F1:ED:4C:54:B9:6D:BA:1F:0B:C2:1B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636279B972CAA86B00D1F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8634b5a-b3e0-3b35-8b83-6677c76461a3.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.192.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:27:9b:97:2c:aa:86:b0:0d:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=8e4527fa-4392-46bb-97a6-aa0c8da9e33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:de:31:3f:2d:11:55:34:2b:1a:e0:48:40: 91:bc:0b:52:f3:4c:af:90:13:d7:17:78:5f:99:91: ae:69:a4:ed:25:cb:82:f3:fc:d5:f2:de:c6:52:91: ac:23:32:b8:01:8a:60:ca:51:54:74:2c:d2:79:73: 9e:e4:1d:83:51:ea:37:c9:34:82:51:cd:88:23:62: 39:f6:5c:a1:54:fc:1b:15:6b:d7:63:14:d8:a8:69: 25:0e:84:8a:e2:21:49:65:2b:01:40:e5:8b:23:f1: fd:32:9f:d0:37:0e:cc:15:49:31:e1:27:55:5a:1c: 78:23:67:b4:cf:dc:bf:fe:90:c5:69:bd:66:3b:c5: 15:8e:00:c7:5f:c6:4d:94:1d:3f:9f:34:bd:6b:e2: 20:7c:66:d0:fb:e8:5b:f7:ad:c1:13:f6:79:0a:ab: 44:47:fc:19:13:ee:dd:2b:65:14:c0:75:b5:d3:82: 78:8c:63:03:b1:45:5b:6a:26:ba:f9:12:42:3c:8b: f2:4c:2f:a2:e6:c0:5f:ef:9d:8a:fa:bb:97:f3:67: 2a:43:66:e3:f7:c6:25:84:80:38:3b:f6:da:e9:22: 0f:6f:dc:1c:37:f2:cd:84:a1:88:4d:51:5d:64:ed: 35:e1:42:ae:31:d6:5b:f3:1d:ec:44:80:8c:b1:09: 67:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3A:82:A4:43:26:8C:36:95:F1:ED:4C:54:B9:6D:BA:1F:0B:C2:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8634b5a-b3e0-3b35-8b83-6677c76461a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:9a:15:f2:f4:a4:4a:f5:b6:89:9f:fe:0f:2e:a6:84:c3:2a: 0f:27:63:65:04:59:13:dc:5c:36:13:3d:9c:e4:f7:4a:02:df: 16:03:c1:ab:58:bd:0d:4c:0e:6d:b4:10:5f:92:11:ef:1d:58: 5b:f1:c8:99:9f:19:22:b1:c7:d3:82:8c:a5:bc:83:b4:79:cf: 8b:42:88:c1:a3:00:bb:22:0e:0e:d8:b4:98:4b:1e:e1:b1:9f: bf:b7:69:64:93:06:b5:03:aa:b9:69:90:e5:60:58:8e:8d:7a: 77:b3:41:c2:04:16:a7:94:07:4e:bf:ef:14:68:79:d0:fb:06: 11:67:71:3a:30:1e:5e:52:cf:eb:aa:21:8e:dc:61:2d:d3:58: 6b:73:a4:29:13:f6:40:ae:36:22:22:b5:4c:64:64:5e:16:b1: 63:6e:d0:e4:41:0f:82:b3:ae:d1:2f:5d:d0:2c:2a:0a:4f:f5: a3:e6:b6:f8:e0:c3:24:a1:89:ac:d1:83:6d:50:ff:cf:b5:ce: 2d:fa:03:49:9d:c8:9d:4b:c9:75:8c:25:2a:37:e1:0c:e9:45: 07:ed:1d:bb:a2:b8:fd:35:6d:b4:bc:f8:51:5d:7b:aa:00:8c: 82:a2:f0:46:50:c5:f1:de:c5:f3:57:5f:de:68:c4:bd:3d:8c: a1:26:1b:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNieblyyqhrANHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OGU0NTI3ZmEtNDM5Mi00NmJiLTk3YTYtYWEwYzhkYTllMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXXeMT8tEVU0KxrgSECRvAtS80yvkBPXF3hf mZGuaaTtJcuC8/zV8t7GUpGsIzK4AYpgylFUdCzSeXOe5B2DUeo3yTSCUc2II2I5 9lyhVPwbFWvXYxTYqGklDoSK4iFJZSsBQOWLI/H9Mp/QNw7MFUkx4SdVWhx4I2e0 z9y//pDFab1mO8UVjgDHX8ZNlB0/nzS9a+IgfGbQ++hb963BE/Z5CqtER/wZE+7d K2UUwHW104J4jGMDsUVbaia6+RJCPIvyTC+i5sBf752K+ruX82cqQ2bj98YlhIA4 O/ba6SIPb9wcN/LNhKGITVFdZO014UKuMdZb8x3sRICMsQlndQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAE6gqRDJow2lfHtTFS5bbofC8IbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjg2MzRiNWEtYjNlMC0z YjM1LThiODMtNjY3N2M3NjQ2MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeaFfL0pEr1tomf/g8upoTDKg8nY2UEWRPcXDYTPZzk90oC3xYDwatY vQ1MDm20EF+SEe8dWFvxyJmfGSKxx9OCjKW8g7R5z4tCiMGjALsiDg7YtJhLHuGx n7+3aWSTBrUDqrlpkOVgWI6NenezQcIEFqeUB06/7xRoedD7BhFncTowHl5Sz+uq IY7cYS3TWGtzpCkT9kCuNiIitUxkZF4WsWNu0ORBD4KzrtEvXdAsKgpP9aPmtvjg wyShiazRg21Q/8+1zi36A0mdyJ1LyXWMJSo34QzpRQftHbuiuP01bbS8+FFde6oA jIKi8EZQxfHexfNXX95oxL09jKEmGw0= -----END CERTIFICATE-----Generated at Wed Aug 6 13:18:23 2025 by rpki-client