$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa File: 1dcc2252-c71a-345a-ba00-93c43b487133.roa (raw, json) Hash identifier: SmCm+mWpyrJ9PTb76aLJa0Lmzjidrpr6aiYf+clFRcg= Subject key identifier: 60:3A:38:9E:DB:1F:9C:AD:7B:87:1F:DF:9A:BE:A9:53:D8:F6:C4:99 Certificate issuer: /CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Certificate serial: 010D0C9F4328584AF25676E8BF84726382D38E80 Authority key identifier: AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 25715 IP address blocks: 173.225.32.0/20 maxlen: 24 199.36.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:76:e8:bf:84:72:63:82:d3:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=69ebe413-5702-44a9-8dd6-df71bb515ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2e:5b:ad:f7:d4:e1:d6:8f:58:2c:21:3d:a4: 9e:5f:fc:96:f8:9b:45:a9:2f:df:cb:6b:7e:7d:f9: 9e:c0:57:52:88:1f:e3:9d:70:15:c6:ea:23:c4:75: 3a:77:e4:19:b3:e3:35:ac:39:66:57:9a:9b:d2:7a: 16:af:93:2f:cb:f4:e1:67:05:44:4f:90:1d:78:af: a0:03:d4:05:e9:69:62:a5:1c:02:f2:08:75:4f:3c: 9e:10:27:f1:8a:64:c3:9e:b4:80:a9:36:43:f9:66: d9:45:e3:a1:d3:b8:55:68:8c:34:9e:bc:b2:7f:0a: 19:f5:94:7b:ca:01:10:25:a1:d8:c0:98:e1:b4:12: 68:04:dc:59:47:e4:18:9a:52:57:fc:af:86:c6:cf: ef:ff:00:c8:ac:26:f9:64:f1:a1:c9:91:f7:58:d2: 49:63:21:a5:ca:d6:18:d8:19:87:98:9a:71:7b:ab: 61:9c:d9:02:d0:9c:eb:df:84:45:88:52:3c:15:77: 9d:22:fe:b4:bf:ca:45:d6:84:52:5f:24:cc:c8:8a: aa:f5:8d:bc:2e:d8:9f:68:75:3d:65:74:07:8a:0c: 76:b2:61:96:14:38:fe:0c:f8:33:fd:a0:cf:6f:c8: 10:04:80:30:26:a3:b7:d7:e9:32:6f:3a:87:b2:51: 18:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3A:38:9E:DB:1F:9C:AD:7B:87:1F:DF:9A:BE:A9:53:D8:F6:C4:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl X509v3 Authority Key Identifier: keyid:AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer sbgp-ipAddrBlock: critical IPv4: 173.225.32.0/20 199.36.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:83:e2:93:52:28:ea:b6:46:44:4a:e8:c0:c1:82:26:0b:73: 49:59:14:e7:e9:31:ff:f2:9b:35:1b:11:17:ac:b2:94:bb:1f: 12:e6:80:eb:69:4b:99:bf:d0:be:bc:93:52:2e:b5:28:dc:64: 0e:73:fc:16:f8:c9:db:7a:d0:cc:75:13:66:39:32:19:c3:28: e2:d6:95:1c:22:42:7a:94:cb:ff:cd:17:68:a9:50:ce:e4:6e: 81:47:6a:ed:8c:0f:bc:1f:8f:2c:63:1d:d8:78:3a:a7:7c:d9: bc:03:af:f3:a7:6c:b7:eb:9e:4b:bc:d0:b4:00:aa:bf:3a:99: de:75:e4:7e:e4:42:cb:7c:bd:36:86:32:67:6a:fd:74:0b:52: ef:c0:12:78:b5:36:0e:19:d1:13:80:1d:ca:b3:cf:d4:53:1e: 9c:a5:c0:26:ef:5f:f4:77:86:9e:fa:16:94:bf:19:f4:da:03: b1:ae:1a:16:49:8a:c2:ff:12:a5:84:06:83:15:b1:69:cf:ec: e9:e8:32:10:3a:ff:ed:c0:52:88:ec:c5:aa:bd:5a:1c:83:6e: 0a:c6:6b:e7:b4:92:57:d9:f0:10:e9:52:45:32:67:ba:f6:0d: 36:f5:16:c1:18:32:e1:53:15:07:23:15:51:7a:6b:89:2c:d8: 40:b4:f8:a1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEryVnbov4RyY4LTjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhYWNkNWEtNDZhYy00ZTE4LTllZjItNzIyMjgwZGRm YTk0MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NjllYmU0MTMtNTcwMi00NGE5LThkZDYtZGY3MWJiNTE1Y2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS5brffU4daPWCwhPaSeX/yW+JtFqS/fy2t+ ffmewFdSiB/jnXAVxuojxHU6d+QZs+M1rDlmV5qb0noWr5Mvy/ThZwVET5AdeK+g A9QF6WlipRwC8gh1TzyeECfximTDnrSAqTZD+WbZReOh07hVaIw0nryyfwoZ9ZR7 ygEQJaHYwJjhtBJoBNxZR+QYmlJX/K+Gxs/v/wDIrCb5ZPGhyZH3WNJJYyGlytYY 2BmHmJpxe6thnNkC0Jzr34RFiFI8FXedIv60v8pF1oRSXyTMyIqq9Y28LtifaHU9 ZXQHigx2smGWFDj+DPgz/aDPb8gQBIAwJqO31+kybzqHslEYcwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGA6OJ7bH5yte4cf35q+qVPY9sSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGFh Y2Q1YS00NmFjLTRlMTgtOWVmMi03MjIyODBkZGZhOTQvMWRjYzIyNTItYzcxYS0z NDVhLWJhMDAtOTNjNDNiNDg3MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhYWNkNWEtNDZhYy00ZTE4LTll ZjItNzIyMjgwZGRmYTk0LzkwYWFjZDVhLTQ2YWMtNGUxOC05ZWYyLTcyMjI4MGRk ZmE5NC5jcmwwHwYDVR0jBBgwFoAUqoUNnn9DBsgVll3rTBzP5Pt2cAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGFhY2Q1YS00NmFjLTRlMTgtOWVmMi03MjIy ODBkZGZhOTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEreEgAwQD xyTgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACiD4pNSKOq2RkRK6MDBgiYLc0lZFOfpMf/ymzUbEResspS7 HxLmgOtpS5m/0L68k1IutSjcZA5z/Bb4ydt60Mx1E2Y5MhnDKOLWlRwiQnqUy//N F2ipUM7kboFHau2MD7wfjyxjHdh4Oqd82bwDr/OnbLfrnku80LQAqr86md515H7k Qst8vTaGMmdq/XQLUu/AEni1Ng4Z0ROAHcqzz9RTHpylwCbvX/R3hp76FpS/GfTa A7GuGhZJisL/EqWEBoMVsWnP7OnoMhA6/+3AUojsxaq9WhyDbgrGa+e0klfZ8BDp UkUyZ7r2DTb1FsEYMuFTFQcjFVF6a4ks2EC0+KE= -----END CERTIFICATE-----Generated at Mon Nov 3 04:24:42 2025 by rpki-client