$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa File: 8b83c5d7-df69-3e4e-8d87-019ffe414958.roa (raw, json) Hash identifier: trGMwDcP7ZWrUehaM10iEjiTv9HuTl20J6WnNfC5K4M= Subject key identifier: 89:0D:45:52:AC:28:4F:DB:F3:F6:37:76:2A:DE:BE:FB:68:66:BC:60 Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F4328584B6632017F6BB59EAA9F291880 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 64123 IP address blocks: 128.254.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:01:7f:6b:b5:9e:aa:9f:29:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=77ea4f11-46b0-4141-a5ed-a49e13af6a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:77:31:c8:48:c8:60:bc:a1:8d:f1:2e:47: 4d:f2:89:cd:e7:25:c1:58:6c:ee:55:a9:2d:c0:4f: 61:ed:48:63:02:3a:0d:95:59:5a:7b:0c:42:94:81: a7:45:bc:74:1f:f9:36:04:a7:ac:c7:5f:23:79:09: bb:7e:b8:ef:37:e0:93:01:70:f0:5d:60:17:d8:1d: f7:31:22:44:d4:5c:96:f5:45:9f:f4:04:cf:1c:e4: 0c:27:3b:2a:db:8b:5b:3f:8b:0d:fc:35:99:ee:ed: 47:ea:af:d5:81:b8:b2:a4:64:de:7c:b2:e1:c2:e9: cd:85:81:67:cd:1a:cc:2b:72:d1:9b:bb:ef:88:30: 6d:c4:f9:6c:4a:dc:37:1a:7c:3d:8e:f8:6b:e4:77: 4b:71:fc:aa:10:82:6d:75:4d:17:2b:eb:9a:7b:97: 3d:64:6c:9d:4e:68:74:e3:31:4b:bb:aa:bf:de:cb: bc:eb:cc:3d:bc:e3:e3:bb:93:fe:e8:19:2d:38:db: db:e6:68:61:42:e4:c9:11:ea:39:5b:9a:5e:a6:fa: db:83:24:b5:3e:a6:2a:9b:4d:91:0e:1c:be:fa:74: c2:1e:b6:bb:11:28:6a:48:ee:95:c4:e6:c3:52:b8: 3f:f3:72:4a:06:d8:2b:7c:66:63:c9:8d:3a:ba:f8: 5f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0D:45:52:AC:28:4F:DB:F3:F6:37:76:2A:DE:BE:FB:68:66:BC:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv4: 128.254.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:cd:17:c8:13:f1:aa:56:23:52:46:bb:82:08:76:d7:db:27: ee:26:d9:94:02:5c:7e:7b:47:98:fc:89:82:b0:31:c6:c3:64: f0:45:15:35:88:e8:f5:9a:d8:1b:3a:6c:1d:8f:71:5e:ab:38: c2:99:b6:08:a5:9b:e1:08:27:1d:63:5c:77:99:ca:80:99:39: c1:89:3f:8d:e1:61:02:0e:8a:1d:93:9d:f9:44:16:26:4b:5c: f4:c1:d2:68:6b:5c:b6:33:db:cb:69:34:f6:12:f9:fe:53:d2: b4:d3:1d:aa:3a:a1:c6:f5:63:e9:ad:ca:c8:15:df:31:2d:ab: 8d:92:b6:8c:7c:08:81:16:69:2e:f3:28:68:a4:c3:87:47:d2: 31:b2:8c:33:71:b9:25:0f:bd:fb:8d:3c:6d:53:bf:1f:e6:38: 19:cf:cc:bd:6e:9a:08:4e:78:e5:e1:0d:b2:b7:40:ff:2f:f8: 3a:8f:db:4f:2a:f6:8b:92:f2:ac:cf:8c:16:20:bd:5a:10:fa: 65:40:32:5f:e7:05:78:62:00:ab:83:ae:c0:5c:c7:5d:d8:10: ad:8d:8f:77:f6:41:75:64:a3:b3:6e:35:7b:88:68:85:af:a9: 2d:4e:8c:f1:1f:35:56:a5:bf:73:42:b7:46:b1:52:b3:c2:93: f0:4a:70:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgF/a7Weqp8pGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NzdlYTRmMTEtNDZiMC00MTQxLWE1ZWQtYTQ5ZTEzYWY2YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvl3MchIyGC8oY3xLkdN8onN5yXBWGzuVakt wE9h7UhjAjoNlVlaewxClIGnRbx0H/k2BKesx18jeQm7frjvN+CTAXDwXWAX2B33 MSJE1FyW9UWf9ATPHOQMJzsq24tbP4sN/DWZ7u1H6q/VgbiypGTefLLhwunNhYFn zRrMK3LRm7vviDBtxPlsStw3Gnw9jvhr5HdLcfyqEIJtdU0XK+uae5c9ZGydTmh0 4zFLu6q/3su868w9vOPju5P+6BktONvb5mhhQuTJEeo5W5pepvrbgyS1PqYqm02R Dhy++nTCHra7EShqSO6VxObDUrg/83JKBtgrfGZjyY06uvhfNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkNRVKsKE/b8/Y3direvvtoZrxgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvOGI4M2M1ZDctZGY2OS0z ZTRlLThkODctMDE5ZmZlNDE0OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvNF8gT8apWI1JGu4IIdtfbJ+4m2ZQCXH57R5j8iYKwMcbDZPBFFTWI 6PWa2Bs6bB2PcV6rOMKZtgilm+EIJx1jXHeZyoCZOcGJP43hYQIOih2TnflEFiZL XPTB0mhrXLYz28tpNPYS+f5T0rTTHao6ocb1Y+mtysgV3zEtq42Stox8CIEWaS7z KGikw4dH0jGyjDNxuSUPvfuNPG1Tvx/mOBnPzL1umghOeOXhDbK3QP8v+DqP208q 9ouS8qzPjBYgvVoQ+mVAMl/nBXhiAKuDrsBcx13YEK2Nj3f2QXVko7NuNXuIaIWv qS1OjPEfNValv3NCt0axUrPCk/BKcBc= -----END CERTIFICATE-----Generated at Sun Oct 26 20:36:49 2025 by rpki-client