$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f54326a-90a9-3ece-866b-f1952e44176d.roa File: 2f54326a-90a9-3ece-866b-f1952e44176d.roa (raw, json) Hash identifier: w14A8lRvhIusjh2oA/qKY3i3hEMMVlshbPhztekU0xs= Subject key identifier: 47:A9:4B:4E:C3:07:1A:DB:E6:E1:CF:4E:A2:0C:CC:B4:82:FF:95:5D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA68EC7BB373B1651155700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f54326a-90a9-3ece-866b-f1952e44176d.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 72.196.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:8e:c7:bb:37:3b:16:51:15:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=2701d044-d8bb-4913-b942-b82249c9910c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:1c:16:c5:9b:47:7c:a3:6a:03:fd:e2:aa: 50:dc:5f:be:ba:17:ad:be:4f:8e:85:d2:b4:d6:79: 6c:f9:46:4b:77:8d:2d:07:97:8f:c8:d6:a6:cd:2b: 89:dd:5a:88:0e:ca:f3:99:aa:02:ab:5e:4e:96:14: 4b:4e:a0:d6:f3:bf:b2:ef:c3:b8:91:86:e2:5d:6f: 70:ab:ac:84:c0:5e:c9:de:4d:94:15:68:bc:85:85: d1:6d:35:cc:82:5b:ca:b2:c2:e3:6d:e7:b0:9c:31: d5:8a:3e:10:28:92:9a:f5:6c:99:4c:d7:35:ae:28: e1:2d:df:63:f1:b7:7a:da:48:66:db:09:37:81:01: 9c:e4:45:62:91:a3:cf:d6:ac:02:41:f3:65:1f:14: 56:55:44:f7:47:47:b1:bd:36:c7:fc:b9:30:78:f7: d1:4d:f9:b1:50:4d:78:64:07:9b:d5:eb:59:93:48: 0e:ef:fb:f3:dc:57:40:f2:9b:5e:c5:d2:3e:8f:ee: 23:6e:b7:eb:8a:02:6f:1b:3e:10:d9:b4:4c:74:b0: 63:26:55:0b:de:c4:06:9c:38:06:22:08:8e:3d:b0: c7:1f:2a:33:85:ca:1c:ae:2e:82:e8:f2:62:89:a0: 39:9f:1f:c1:c7:78:19:75:31:2b:b7:cb:72:a7:e3: 69:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A9:4B:4E:C3:07:1A:DB:E6:E1:CF:4E:A2:0C:CC:B4:82:FF:95:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f54326a-90a9-3ece-866b-f1952e44176d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.196.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:33:32:cb:43:ca:5d:08:a2:ed:d3:8a:0b:11:c9:20:60:7d: fb:7c:20:04:cc:db:1e:02:e8:1d:2e:e7:db:47:b9:26:f5:40: 34:87:7f:ef:b1:b6:b6:92:6a:fc:e0:35:31:8b:f1:97:39:d1: 78:98:9b:cb:f1:71:5e:99:b1:34:1e:54:f9:6b:e3:df:ef:78: 62:70:89:11:35:c4:37:3a:f4:a9:69:7e:89:f7:76:63:12:4f: 96:ee:b3:5a:d0:2e:4c:bd:fa:d6:04:e9:d0:ed:83:97:51:0c: e3:04:95:0e:d6:a4:ec:98:35:33:85:3c:26:33:cd:ac:52:46: 63:f3:de:33:ee:da:70:9d:57:85:86:c5:c8:95:1b:40:2d:30: 33:81:cc:11:6f:64:92:e0:0e:dc:91:ff:7e:83:5e:f9:76:a2: d8:af:7f:d4:c2:0b:ef:f0:16:e9:90:bc:27:32:69:34:3c:72: 22:2e:da:34:74:34:53:dd:d6:f9:4e:bb:03:5f:c9:63:02:72: e2:9c:cc:8f:56:49:53:aa:42:aa:99:a3:81:1d:82:3a:6a:08: 3f:db:e6:db:ec:df:36:35:4f:a3:da:10:8c:fd:29:61:95:22: d2:e8:4f:66:d4:95:e0:5b:0a:c9:ab:db:66:de:67:d4:79:ef: 4a:8a:36:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpo7Huzc7FlEVVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MjcwMWQwNDQtZDhiYi00OTEzLWI5NDItYjgyMjQ5Yzk5MTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWwcFsWbR3yjagP94qpQ3F++uhetvk+OhdK0 1nls+UZLd40tB5ePyNamzSuJ3VqIDsrzmaoCq15OlhRLTqDW87+y78O4kYbiXW9w q6yEwF7J3k2UFWi8hYXRbTXMglvKssLjbeewnDHVij4QKJKa9WyZTNc1rijhLd9j 8bd62khm2wk3gQGc5EVikaPP1qwCQfNlHxRWVUT3R0exvTbH/LkwePfRTfmxUE14 ZAeb1etZk0gO7/vz3FdA8ptexdI+j+4jbrfrigJvGz4Q2bRMdLBjJlUL3sQGnDgG IgiOPbDHHyozhcocri6C6PJiiaA5nx/Bx3gZdTErt8typ+NpiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEepS07DBxrb5uHPTqIMzLSC/5VdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmY1NDMyNmEtOTBhOS0z ZWNlLTg2NmItZjE5NTJlNDQxNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQzMstDyl0Iou3TigsRySBgfft8IATM2x4C6B0u59tHuSb1QDSHf++x traSavzgNTGL8Zc50XiYm8vxcV6ZsTQeVPlr49/veGJwiRE1xDc69Klpfon3dmMS T5bus1rQLky9+tYE6dDtg5dRDOMElQ7WpOyYNTOFPCYzzaxSRmPz3jPu2nCdV4WG xciVG0AtMDOBzBFvZJLgDtyR/36DXvl2otivf9TCC+/wFumQvCcyaTQ8ciIu2jR0 NFPd1vlOuwNfyWMCcuKczI9WSVOqQqqZo4EdgjpqCD/b5tvs3zY1T6PaEIz9KWGV ItLoT2bUleBbCsmr22beZ9R570qKNlQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:16:57 2025 by rpki-client