$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc8f9da3-8244-312c-8086-d65ecc1fde4e.roa File: bc8f9da3-8244-312c-8086-d65ecc1fde4e.roa (raw, json) Hash identifier: kBJIH0LpvvVVBmR12iO18HNKYH7ZOwzNbOxfOrBiJA8= Subject key identifier: 06:21:83:92:1B:68:40:2A:6E:6F:03:CA:B7:A9:28:42:C0:0D:A2:3D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B95A95660C6C999360AFF7980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc8f9da3-8244-312c-8086-d65ecc1fde4e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.192.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:56:60:c6:c9:99:36:0a:ff:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2940c89f-2df9-4508-bc97-82832a730aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d1:8c:a3:eb:ff:ac:b8:32:99:15:2f:81:6b: 67:32:79:47:de:ec:e8:d8:75:77:36:07:38:09:90: 24:f3:cd:7d:bb:3e:a7:21:fb:51:5c:3e:9f:84:e8: ca:62:15:dd:fc:72:b9:5e:2e:81:20:95:44:1b:7a: c8:ba:50:b9:88:19:06:3e:26:97:3a:39:31:47:b4: cc:d3:8d:0a:a9:ee:90:f1:a7:25:30:0f:36:b2:3f: 8f:87:88:b8:4a:89:50:88:27:31:a5:75:14:8f:83: 10:6d:00:9a:78:50:4c:65:2b:34:d6:e0:6e:f7:b8: c8:49:ed:ee:1a:67:f1:5b:e9:e8:ac:8b:9a:2f:b1: a3:7a:57:49:fb:a0:7d:74:32:1a:5e:d1:28:39:3a: 37:3c:5a:1c:a9:36:08:e6:00:68:46:20:fd:de:a6: 9a:f6:f5:e7:64:43:63:1d:ff:7a:5e:18:27:1c:30: 24:8e:4d:f1:84:3f:09:ed:2a:73:0c:92:96:80:a0: 51:bc:4c:41:53:90:95:79:a7:c5:5d:31:94:fb:02: d8:e7:81:81:06:6b:43:2f:7c:9b:24:f5:5f:55:21: 2e:f6:05:59:07:5b:2b:c1:3d:45:6d:08:5f:ff:d8: 78:a6:de:24:9f:f3:c9:7d:83:e4:cd:a9:58:b7:4a: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:21:83:92:1B:68:40:2A:6E:6F:03:CA:B7:A9:28:42:C0:0D:A2:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc8f9da3-8244-312c-8086-d65ecc1fde4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ce:03:b7:33:c9:1d:54:0a:c5:f5:5f:0a:9d:6f:4a:d3:fe: 68:c5:af:81:02:b2:87:5f:7e:6a:6c:1c:30:77:05:a6:4c:c6: ea:24:9b:dd:13:79:5b:91:71:8d:99:07:e1:52:0b:c9:f3:8a: 69:7a:fd:24:17:59:cc:7c:31:11:87:bd:30:f0:90:ea:c7:0c: ec:65:3b:21:09:c5:d0:74:ca:fc:3f:32:d2:8a:24:c5:64:6c: 96:f7:7e:ca:ab:9e:08:7b:a0:26:4b:9c:b2:f1:cc:86:f7:a1: 03:56:fb:6f:4e:8c:06:ed:e4:15:ff:e9:fd:69:3c:1d:9b:1a: 7d:fc:68:b2:d8:d8:b4:1a:b5:4a:2e:56:97:3d:d7:48:30:03: a5:de:5b:60:0c:19:53:8f:77:d4:7d:cd:60:a1:6a:67:8d:1a: 89:d0:35:c6:d8:e6:78:e6:59:c0:27:ac:a7:c8:f8:72:da:df: 8c:6e:62:7a:35:b4:44:26:4e:72:92:8e:0b:65:d5:43:ea:79: 1c:ff:6c:b7:27:15:4d:7a:23:68:ec:71:ca:76:6f:19:e4:32: 30:6c:f7:e5:85:e3:47:5d:d7:42:ef:e5:10:a9:d8:8e:c4:7e: 81:a9:91:9e:3e:91:3a:d8:83:b1:50:e0:d9:d3:3c:68:62:de: 5f:22:cf:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqVZgxsmZNgr/eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Mjk0MGM4OWYtMmRmOS00NTA4LWJjOTctODI4MzJhNzMwYWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltGMo+v/rLgymRUvgWtnMnlH3uzo2HV3Ngc4 CZAk8819uz6nIftRXD6fhOjKYhXd/HK5Xi6BIJVEG3rIulC5iBkGPiaXOjkxR7TM 040Kqe6Q8aclMA82sj+Ph4i4SolQiCcxpXUUj4MQbQCaeFBMZSs01uBu97jISe3u GmfxW+norIuaL7GjeldJ+6B9dDIaXtEoOTo3PFocqTYI5gBoRiD93qaa9vXnZENj Hf96XhgnHDAkjk3xhD8J7SpzDJKWgKBRvExBU5CVeafFXTGU+wLY54GBBmtDL3yb JPVfVSEu9gVZB1srwT1FbQhf/9h4pt4kn/PJfYPkzalYt0qy/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYhg5IbaEAqbm8DyrepKELADaI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmM4ZjlkYTMtODI0NC0z MTJjLTgwODYtZDY1ZWNjMWZkZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMDGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXOA7czyR1UCsX1Xwqdb0rT/mjFr4ECsodffmpsHDB3BaZMxuokm90T eVuRcY2ZB+FSC8nziml6/SQXWcx8MRGHvTDwkOrHDOxlOyEJxdB0yvw/MtKKJMVk bJb3fsqrngh7oCZLnLLxzIb3oQNW+29OjAbt5BX/6f1pPB2bGn38aLLY2LQatUou Vpc910gwA6XeW2AMGVOPd9R9zWChameNGonQNcbY5njmWcAnrKfI+HLa34xuYno1 tEQmTnKSjgtl1UPqeRz/bLcnFU16I2jsccp2bxnkMjBs9+WF40dd10Lv5RCp2I7E foGpkZ4+kTrYg7FQ4NnTPGhi3l8iz7w= -----END CERTIFICATE-----Generated at Wed Nov 5 12:44:56 2025 by rpki-client