$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/d58c2633-bd82-343d-9a20-92169aedcf7c.roa File: d58c2633-bd82-343d-9a20-92169aedcf7c.roa (raw, json) Hash identifier: M9+f3wq3FaSFSKdB1yxzz/zYrkx+6JEU7LpwrwKCX4g= Subject key identifier: 09:D9:B0:6C:00:02:72:CD:3D:86:51:B6:E1:A2:AA:4F:57:B7:19:95 Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F4328584B461708E1CE92FABF64F0A680 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/d58c2633-bd82-343d-9a20-92169aedcf7c.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 7018 IP address blocks: 104.255.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:08:e1:ce:92:fa:bf:64:f0:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=8fa5a2fe-a8a8-4fbc-b9ed-3723c5a954dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:d8:fe:59:6a:e0:e2:54:15:94:06:34:55: 9a:44:96:e3:1c:3c:9c:fc:d1:3a:db:04:c7:cf:3a: ab:76:ec:0f:dd:f1:3c:28:da:7d:93:ad:d6:27:47: 15:20:44:5d:78:8f:da:26:9a:92:c7:e2:04:1f:2a: 18:15:ad:d8:a3:cf:99:7a:1a:e2:77:3f:e9:c7:43: 52:ac:ec:86:1f:72:54:22:34:da:a3:ce:64:1a:59: a7:c3:8e:e4:f2:78:19:4e:fd:c1:57:e2:45:9e:fd: c7:65:92:f5:05:03:92:99:15:4f:4c:32:f3:f3:07: 3a:4d:9f:63:ee:2f:db:86:9c:bd:d2:3b:27:75:15: 5e:14:5b:bd:f7:59:f4:d3:71:cc:99:43:12:cc:ab: f5:23:46:9e:93:8f:a8:ac:0f:27:a4:0e:33:80:ba: ea:0e:78:18:10:33:58:a7:53:e1:50:61:1b:21:7f: a1:ef:47:2a:82:61:b6:49:44:f8:47:93:cd:bf:88: 72:5d:37:6d:18:43:5a:aa:a4:c9:a9:11:25:83:f4: 23:f9:e7:4c:35:f7:41:8a:41:48:c3:b3:6a:bd:40: 97:39:dc:39:0d:11:8e:e5:50:ba:1a:e1:f2:4c:78: c1:18:93:89:98:e1:5a:1d:ce:8a:2c:be:2b:3e:a2: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D9:B0:6C:00:02:72:CD:3D:86:51:B6:E1:A2:AA:4F:57:B7:19:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/d58c2633-bd82-343d-9a20-92169aedcf7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 104.255.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:fb:78:fa:7d:83:82:38:ac:4e:fc:01:b6:26:35:07:19:0c: 1c:22:4e:19:2b:6f:82:71:8d:42:eb:60:86:d8:b1:ea:8e:88: 6b:0e:a2:d4:11:4b:80:a4:a8:6c:3a:1b:99:85:c4:9c:97:c4: e8:6b:8b:f0:86:9c:7f:fb:81:3e:99:d5:96:5b:96:83:56:0b: a3:35:3b:83:de:c8:69:01:de:d7:4a:8d:53:36:23:1b:02:34: 52:ce:68:7e:a3:a0:0b:de:8f:b2:56:16:78:11:d6:d5:9b:bd: 57:4f:db:a2:e0:32:f2:bb:17:75:0b:f5:b6:b8:ce:2c:45:fb: f8:c5:e2:cb:3d:e3:9b:aa:be:2a:58:ae:f4:5b:c9:1a:6a:e6: 73:d9:03:7c:33:29:d6:fd:e3:13:88:83:89:24:19:fd:ea:7d: 42:ba:83:cf:ad:8e:f7:fe:9f:91:cb:9a:16:3b:90:4e:98:44: 9b:e9:7e:6d:0e:2f:5d:68:77:55:c3:9f:0b:6b:03:ee:7c:7c: bd:c8:9f:6a:4d:a4:e4:b4:f5:7e:4b:c2:90:cc:cb:7b:61:c2: 13:01:7c:f7:3a:0a:f6:f3:d5:a6:65:04:06:17:d8:85:67:b2: 5e:c8:84:3d:c9:41:5b:0a:fc:b1:6f:29:b9:00:1d:72:2a:b9: 03:29:01:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFwjhzpL6v2TwpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk OGZhNWEyZmUtYThhOC00ZmJjLWI5ZWQtMzcyM2M1YTk1NGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAognY/llq4OJUFZQGNFWaRJbjHDyc/NE62wTH zzqrduwP3fE8KNp9k63WJ0cVIERdeI/aJpqSx+IEHyoYFa3Yo8+Zehridz/px0NS rOyGH3JUIjTao85kGlmnw47k8ngZTv3BV+JFnv3HZZL1BQOSmRVPTDLz8wc6TZ9j 7i/bhpy90jsndRVeFFu991n003HMmUMSzKv1I0aek4+orA8npA4zgLrqDngYEDNY p1PhUGEbIX+h70cqgmG2SUT4R5PNv4hyXTdtGENaqqTJqRElg/Qj+edMNfdBikFI w7NqvUCXOdw5DRGO5VC6GuHyTHjBGJOJmOFaHc6KLL4rPqJyQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnZsGwAAnLNPYZRtuGiqk9XtxmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvZDU4YzI2MzMtYmQ4Mi0z NDNkLTlhMjAtOTIxNjlhZWRjZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP/hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz7ePp9g4I4rE78AbYmNQcZDBwiThkrb4JxjULrYIbYseqOiGsOotQR S4CkqGw6G5mFxJyXxOhri/CGnH/7gT6Z1ZZbloNWC6M1O4PeyGkB3tdKjVM2IxsC NFLOaH6joAvej7JWFngR1tWbvVdP26LgMvK7F3UL9ba4zixF+/jF4ss945uqvipY rvRbyRpq5nPZA3wzKdb94xOIg4kkGf3qfUK6g8+tjvf+n5HLmhY7kE6YRJvpfm0O L11od1XDnwtrA+58fL3In2pNpOS09X5LwpDMy3thwhMBfPc6Cvbz1aZlBAYX2IVn sl7IhD3JQVsK/LFvKbkAHXIquQMpAdc= -----END CERTIFICATE-----Generated at Fri Oct 10 21:36:48 2025 by rpki-client