$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/029ab60e-3760-3e4d-af92-b69a52114d0a.roa File: 029ab60e-3760-3e4d-af92-b69a52114d0a.roa (raw, json) Hash identifier: CQw8+lkr8MEcSEI2+GoyHmJvLCSniRdpO7S42Lkt7SQ= Subject key identifier: AF:A6:00:56:2F:3F:69:08:A3:4E:99:1C:F5:99:33:9A:37:8A:8B:4E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA68941EE841A3D77504B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/029ab60e-3760-3e4d-af92-b69a52114d0a.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 184.186.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:89:41:ee:84:1a:3d:77:50:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=7bfae31e-7dd6-436b-a996-cd4b0a189bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:17:c2:03:8f:4b:37:e4:df:4e:82:03:70: 81:bc:bb:df:bd:e3:05:64:f7:9e:df:d4:d7:d4:28: a1:ae:ef:1a:0c:33:9f:9a:d9:45:1d:a7:cb:b2:bf: 40:bc:a7:50:08:07:b6:4b:4b:7e:28:d3:9b:48:09: 17:78:5e:b1:0b:b5:59:ae:7f:f4:aa:ab:64:ad:08: 35:d8:22:22:37:7e:19:3a:d7:13:e2:89:c7:36:a1: 88:11:e4:cb:18:90:c2:3c:d7:37:55:1c:82:4f:bd: 57:93:f1:f2:29:6d:4d:42:2e:76:30:2f:bb:f8:65: bc:92:d3:2b:99:98:ef:9a:20:4d:65:bd:e9:85:91: 0e:ae:56:09:00:92:63:ec:e7:b3:c1:36:dd:ac:6f: 5d:ce:62:a0:00:d1:1a:08:49:cd:6e:4b:33:9d:2b: f9:de:31:e9:f7:d0:aa:dd:e2:91:bb:88:c8:cd:f5: e9:2c:0e:55:1f:a5:a1:e4:2f:55:4a:a0:25:22:f2: 13:b2:6d:53:c9:c6:41:d8:43:03:da:59:67:25:06: c2:73:ae:e1:3e:c6:85:71:8c:b4:97:20:49:c4:11: 2c:91:3d:d3:8d:a9:d3:8b:c4:11:b3:88:0c:11:4b: 6b:ed:03:bd:a7:0f:45:27:ca:0b:33:15:4c:3b:f1: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A6:00:56:2F:3F:69:08:A3:4E:99:1C:F5:99:33:9A:37:8A:8B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/029ab60e-3760-3e4d-af92-b69a52114d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 184.186.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:79:35:76:f7:b6:4e:f0:1a:3e:06:5f:7c:47:b3:95:9f:e5: f3:73:69:38:99:ab:73:fa:49:73:e1:72:02:bf:64:d4:3d:e8: 91:ba:cf:a5:86:06:7b:98:99:e5:3d:86:3c:e2:64:61:6c:19: f0:0c:2c:87:12:57:e1:1e:1e:d1:fe:6d:25:37:e2:62:96:a2: 8c:b9:0c:91:64:eb:29:cc:92:8b:de:c9:30:1d:0a:83:12:ab: b0:47:17:e9:ba:f8:d9:80:e2:23:55:59:ed:9a:b7:ad:4a:c0: c5:d6:ac:26:d0:28:d0:e3:f1:f8:aa:65:25:a0:cc:68:dc:7f: 9c:c1:ba:be:2e:88:b9:72:af:fd:86:48:df:14:55:67:a8:d1: 65:5c:62:60:5b:0d:30:a1:b5:01:6f:11:7c:34:3f:7f:2d:96: 6e:da:86:ea:3d:8e:13:94:36:f1:2f:65:98:5d:cf:be:a2:24: c3:61:70:50:f1:cf:84:68:57:38:1c:90:cf:95:84:73:2b:52: b9:87:e2:25:b1:10:4b:da:eb:7a:a1:a0:8c:91:ef:13:a3:81: 32:f6:1a:62:9a:fc:9a:25:5d:95:0a:fc:5e:b3:0d:7a:26:9c: 1d:bf:fc:db:50:58:eb:f1:ae:e0:77:64:db:f7:0d:15:3c:2a: 22:45:73:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpolB7oQaPXdQSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk N2JmYWUzMWUtN2RkNi00MzZiLWE5OTYtY2Q0YjBhMTg5YmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrwXwgOPSzfk306CA3CBvLvfveMFZPee39TX 1Cihru8aDDOfmtlFHafLsr9AvKdQCAe2S0t+KNObSAkXeF6xC7VZrn/0qqtkrQg1 2CIiN34ZOtcT4onHNqGIEeTLGJDCPNc3VRyCT71Xk/HyKW1NQi52MC+7+GW8ktMr mZjvmiBNZb3phZEOrlYJAJJj7OezwTbdrG9dzmKgANEaCEnNbksznSv53jHp99Cq 3eKRu4jIzfXpLA5VH6Wh5C9VSqAlIvITsm1TycZB2EMD2llnJQbCc67hPsaFcYy0 lyBJxBEskT3TjanTi8QRs4gMEUtr7QO9pw9FJ8oLMxVMO/F7iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+mAFYvP2kIo06ZHPWZM5o3iotOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI5YWI2MGUtMzc2MC0z ZTRkLWFmOTItYjY5YTUyMTE0ZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuLpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ5NXb3tk7wGj4GX3xHs5Wf5fNzaTiZq3P6SXPhcgK/ZNQ96JG6z6WG BnuYmeU9hjziZGFsGfAMLIcSV+EeHtH+bSU34mKWooy5DJFk6ynMkoveyTAdCoMS q7BHF+m6+NmA4iNVWe2at61KwMXWrCbQKNDj8fiqZSWgzGjcf5zBur4uiLlyr/2G SN8UVWeo0WVcYmBbDTChtQFvEXw0P38tlm7ahuo9jhOUNvEvZZhdz76iJMNhcFDx z4RoVzgckM+VhHMrUrmH4iWxEEva63qhoIyR7xOjgTL2GmKa/JolXZUK/F6zDXom nB2//NtQWOvxruB3ZNv3DRU8KiJFc1A= -----END CERTIFICATE-----Generated at Sat Aug 23 23:58:46 2025 by rpki-client