$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/527de1a6-756a-3ed1-b185-ac38676ba22e.roa File: 527de1a6-756a-3ed1-b185-ac38676ba22e.roa (raw, json) Hash identifier: yXjvBZm+8VApLeHuaHQeB1MmuW9DshwA5C5AxCawsls= Subject key identifier: 6A:26:F6:38:D4:8D:C2:90:FA:F0:7C:6C:61:9B:B1:78:43:99:A9:E2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F1FD7E930ED4BC8EBB6400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/527de1a6-756a-3ed1-b185-ac38676ba22e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.192.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f1:fd:7e:93:0e:d4:bc:8e:bb:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=5a440468-3d03-4a96-8d81-31b399a172a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:32:07:64:66:d9:3f:5e:3a:9b:d7:af:0e: 4d:e1:62:0e:a7:fa:06:cb:7b:be:a1:07:15:fb:cd: a1:d9:13:98:ec:43:9d:bf:c7:6f:58:96:aa:a2:8f: ec:d5:c8:45:54:72:5a:c7:b7:4d:a0:d7:ce:42:e0: 65:5c:98:7e:e3:d5:37:78:51:f0:ec:09:0f:7b:4f: 82:71:43:44:2d:1e:fa:a4:61:5f:48:8b:68:8a:46: 77:b7:87:a7:da:9a:8f:8e:1a:bf:40:88:87:12:f2: 56:8a:f6:e5:d3:c1:1e:2a:13:75:0a:cf:53:7e:40: bc:f9:15:0b:03:13:25:6b:c7:96:6e:f9:55:23:fc: e6:33:04:dc:7b:82:2e:0b:c4:f4:d6:b2:f6:b1:39: 91:ec:ff:03:2d:0d:c4:80:bd:11:aa:62:aa:12:73: 20:b1:ec:4e:b9:39:cc:b4:3c:7d:ab:63:6a:64:09: d3:a2:36:d8:e4:55:cf:cb:ab:0c:27:a8:f1:c9:81: 89:6c:5e:80:ba:a3:af:d6:26:9a:f9:e8:ea:9b:86: 9c:69:21:ff:4e:29:a2:c8:ef:36:06:57:99:43:12: fa:d7:da:47:ec:cb:ad:b4:d2:fb:cc:cb:17:a7:f8: 02:79:f9:a0:35:ca:05:48:e8:19:92:f6:5e:65:9c: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:26:F6:38:D4:8D:C2:90:FA:F0:7C:6C:61:9B:B1:78:43:99:A9:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/527de1a6-756a-3ed1-b185-ac38676ba22e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:5d:85:66:9f:6f:e2:22:d5:ca:31:74:ca:c8:9f:3d:be:01: 7a:a0:12:75:41:8c:06:14:b7:c7:74:58:43:fe:97:61:b1:cf: 21:83:a9:85:31:a3:8d:d4:e2:79:9e:13:89:7e:1c:31:bd:75: e9:47:c8:8c:e7:99:5f:b0:9e:c7:b8:23:f7:d7:7d:73:ab:32: 25:a4:f2:ec:53:a8:21:74:13:dd:4f:ad:ff:9c:9e:b2:27:6e: 1d:37:dc:82:c9:5e:6b:25:bb:34:62:c5:46:61:d3:8a:2f:d3: 3e:49:af:75:e1:ea:61:12:bd:86:fe:cd:49:65:8c:87:72:73: c3:93:ce:2c:7d:ec:a0:2d:7d:f8:64:62:9a:80:72:d0:0d:48: 3e:28:50:f2:fa:b8:c0:0f:de:ac:4f:dd:20:8e:69:08:27:02: 26:6d:e0:37:80:4b:90:4e:52:ed:e8:d8:9a:77:7d:39:0d:93: 5d:21:cf:da:04:38:f4:63:17:e7:ea:16:67:ee:ab:d5:a5:9c: 68:b2:f6:45:65:ff:4d:75:53:60:19:56:a6:b1:e7:fb:a8:d4: d3:6a:2a:44:60:5d:d1:a0:a8:98:99:bf:a6:9e:ae:f5:5b:0a: 48:bb:7e:16:31:81:65:6f:9b:7c:f1:82:43:45:98:6e:65:e2: 35:0a:16:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28f1+kw7UvI67ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NWE0NDA0NjgtM2QwMy00YTk2LThkODEtMzFiMzk5YTE3MmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx0yB2Rm2T9eOpvXrw5N4WIOp/oGy3u+oQcV +82h2ROY7EOdv8dvWJaqoo/s1chFVHJax7dNoNfOQuBlXJh+49U3eFHw7AkPe0+C cUNELR76pGFfSItoikZ3t4en2pqPjhq/QIiHEvJWivbl08EeKhN1Cs9TfkC8+RUL AxMla8eWbvlVI/zmMwTce4IuC8T01rL2sTmR7P8DLQ3EgL0RqmKqEnMgsexOuTnM tDx9q2NqZAnTojbY5FXPy6sMJ6jxyYGJbF6AuqOv1iaa+ejqm4acaSH/TimiyO82 BleZQxL619pH7MuttNL7zMsXp/gCefmgNcoFSOgZkvZeZZwUNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGom9jjUjcKQ+vB8bGGbsXhDmaniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI3ZGUxYTYtNzU2YS0z ZWQxLWIxODUtYWMzODY3NmJhMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHddhWafb+Ii1coxdMrInz2+AXqgEnVBjAYUt8d0WEP+l2GxzyGDqYUx o43U4nmeE4l+HDG9delHyIznmV+wnse4I/fXfXOrMiWk8uxTqCF0E91Prf+cnrIn bh033ILJXmsluzRixUZh04ov0z5Jr3Xh6mESvYb+zUlljIdyc8OTzix97KAtffhk YpqActANSD4oUPL6uMAP3qxP3SCOaQgnAiZt4DeAS5BOUu3o2Jp3fTkNk10hz9oE OPRjF+fqFmfuq9WlnGiy9kVl/011U2AZVqax5/uo1NNqKkRgXdGgqJiZv6aervVb Cki7fhYxgWVvm3zxgkNFmG5l4jUKFrI= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:43 2025 by rpki-client