$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b2b7e22-87be-3d49-812f-38ffd193ae1a.roa File: 4b2b7e22-87be-3d49-812f-38ffd193ae1a.roa (raw, json) Hash identifier: +IMq19QZ/QrckeF4QY154rEm4XYe2vgJGwNA6HsKcig= Subject key identifier: C7:C2:13:78:94:AE:A8:25:2C:3A:4D:3F:E7:1C:03:D2:55:34:BF:7D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B64CD7860D31D105B374EC280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b2b7e22-87be-3d49-812f-38ffd193ae1a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 22773 IP address blocks: 72.192.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:78:60:d3:1d:10:5b:37:4e:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=00d379ee-2380-45c8-9c46-1dc025f3eca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:73:5b:31:14:40:9f:30:3b:f1:a2:8f:1f:0f: a8:04:26:1c:d5:64:59:0a:63:c9:9a:c7:86:b4:6b: 6e:bf:ab:c0:54:96:5e:8d:e4:8d:22:d6:d0:09:ad: dd:a0:e2:f1:6d:03:a4:c5:dc:83:76:f9:47:1b:93: da:d5:f9:0c:2c:68:e9:fe:0d:07:d1:bc:3d:5d:d6: 8d:0b:4d:04:c5:6f:57:2a:8a:0d:93:45:b2:b6:a9: 17:bf:17:cc:07:e8:88:36:2e:10:9c:fe:a4:6f:e0: 10:cf:4f:13:3d:e7:43:ad:1f:10:4e:92:80:d1:e9: a6:b6:69:dd:87:15:19:d0:33:8d:74:5a:ea:2c:ca: 40:07:73:74:57:c2:49:c8:ed:00:f9:92:f2:bd:0a: 96:0b:4a:ba:1b:f3:59:c0:c1:82:71:8c:5d:8f:61: 54:77:9a:ad:ef:80:e9:8d:87:cd:e0:7f:5a:e5:95: 1d:89:99:33:ba:94:91:8a:35:aa:a0:ca:40:c0:91: 09:5c:b7:91:47:c9:ff:11:f2:51:5d:1f:63:af:e3: 20:37:ec:59:63:2b:91:f0:f9:df:52:52:67:23:d0: 35:fc:5d:3e:54:38:69:a4:cc:b9:92:94:1e:fb:67: 27:e9:53:99:58:b2:ca:4f:af:d4:66:7a:69:9d:a4: 06:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C2:13:78:94:AE:A8:25:2C:3A:4D:3F:E7:1C:03:D2:55:34:BF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b2b7e22-87be-3d49-812f-38ffd193ae1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2a:94:99:5c:09:4c:a8:99:64:e6:14:19:d4:db:f3:e1:ea: 89:cd:47:7f:52:68:0c:f0:ae:98:82:ad:fc:e4:6a:f9:72:34: 31:11:77:d3:d7:0d:ce:94:a7:72:58:3e:ea:85:af:90:04:43: 07:ac:2a:a1:bc:c7:b3:4c:35:a8:17:5b:98:3d:ef:3e:32:ab: be:f7:b6:dc:0b:1f:66:25:aa:a5:6b:44:ef:0b:b1:21:da:a4: 00:92:98:6c:02:f8:00:ad:8f:0c:c7:8c:36:97:dd:97:3d:8c: 96:69:6e:31:b6:36:17:e3:0e:f9:66:e3:60:33:a4:dc:dd:c5: 71:9d:b2:af:31:eb:fd:b4:80:81:92:00:ff:62:eb:af:e2:c1: 97:97:20:34:9e:c1:fa:f8:3c:bd:89:70:33:26:12:7f:67:0c: 85:0d:15:fc:9d:dd:fa:e0:54:c6:45:d6:be:7e:af:6d:83:df: 38:fb:b8:7c:9b:24:b7:07:e1:3d:ce:a3:3a:06:03:94:7f:1d: 15:0a:40:f6:4e:39:10:ed:49:ad:2d:26:93:8f:8a:4a:de:75: 62:a7:61:93:c5:60:12:47:e5:01:c6:90:73:af:c5:3d:70:d0: 7a:f1:91:d0:b4:95:07:5b:75:ef:b0:0b:37:03:b9:52:34:23: 6c:c2:f6:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXhg0x0QWzdOwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDBkMzc5ZWUtMjM4MC00NWM4LTljNDYtMWRjMDI1ZjNlY2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXNbMRRAnzA78aKPHw+oBCYc1WRZCmPJmseG tGtuv6vAVJZejeSNItbQCa3doOLxbQOkxdyDdvlHG5Pa1fkMLGjp/g0H0bw9XdaN C00ExW9XKooNk0WytqkXvxfMB+iINi4QnP6kb+AQz08TPedDrR8QTpKA0emmtmnd hxUZ0DONdFrqLMpAB3N0V8JJyO0A+ZLyvQqWC0q6G/NZwMGCcYxdj2FUd5qt74Dp jYfN4H9a5ZUdiZkzupSRijWqoMpAwJEJXLeRR8n/EfJRXR9jr+MgN+xZYyuR8Pnf UlJnI9A1/F0+VDhppMy5kpQe+2cn6VOZWLLKT6/UZnppnaQGRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfCE3iUrqglLDpNP+ccA9JVNL99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGIyYjdlMjItODdiZS0z ZDQ5LTgxMmYtMzhmZmQxOTNhZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSMDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIqlJlcCUyomWTmFBnU2/Ph6onNR39SaAzwrpiCrfzkavlyNDERd9PX Dc6Up3JYPuqFr5AEQwesKqG8x7NMNagXW5g97z4yq773ttwLH2YlqqVrRO8LsSHa pACSmGwC+ACtjwzHjDaX3Zc9jJZpbjG2NhfjDvlm42AzpNzdxXGdsq8x6/20gIGS AP9i66/iwZeXIDSewfr4PL2JcDMmEn9nDIUNFfyd3frgVMZF1r5+r22D3zj7uHyb JLcH4T3OozoGA5R/HRUKQPZOORDtSa0tJpOPikredWKnYZPFYBJH5QHGkHOvxT1w 0HrxkdC0lQdbde+wCzcDuVI0I2zC9nQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:46:45 2025 by rpki-client