$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00c37976-a9ad-3ff9-93c4-6a0178864b95.roa File: 00c37976-a9ad-3ff9-93c4-6a0178864b95.roa (raw, json) Hash identifier: krbUpXVSWJNd/v6g9xokA6UQZwrXBequQFTXGAEDZ8A= Subject key identifier: 74:9A:40:C3:57:3E:E8:10:57:4C:F6:E8:34:9D:76:B2:AE:C6:0F:5A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2A090B4304BE9487C1540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00c37976-a9ad-3ff9-93c4-6a0178864b95.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 24.254.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:a0:90:b4:30:4b:e9:48:7c:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=5e74b721-d196-41da-b2e4-b65e321059fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3b:05:90:1c:c3:70:7a:29:7e:a7:27:d0:45: 8c:f3:d1:bd:e4:40:bf:f3:ca:94:b1:76:3f:7f:6b: 98:f2:7f:8a:b8:a7:44:67:dc:a4:25:f7:ca:39:3e: e0:ed:8e:1c:5a:1e:b6:5b:53:31:ab:e6:af:95:2b: 45:7d:23:5a:29:58:2e:aa:24:4b:ae:6e:34:2a:e3: 84:01:69:ea:b1:6c:3a:90:db:b2:d8:f8:7f:1b:f4: 01:1f:c4:d2:55:fe:a2:bb:8b:51:6b:7b:64:70:00: 32:5e:af:82:9b:82:c3:52:b1:93:3c:fe:aa:21:ec: a3:0a:9c:ae:f3:68:7e:72:d6:cb:0f:2e:15:5b:b6: 56:7c:e5:c8:de:4e:1c:f6:6e:ac:7b:9e:43:da:87: 82:4c:e0:d8:df:cf:66:c5:76:0e:f7:40:56:1e:79: fd:46:a3:9b:ad:af:4e:2e:9f:e1:a5:85:c7:53:24: de:7d:a7:ee:a4:60:92:9b:b5:8a:bb:29:6b:d9:22: 37:4a:91:04:7a:9e:01:22:c0:ab:8f:54:c7:cb:a4: c4:af:95:75:8e:b8:d8:86:df:ac:0b:a8:19:fb:27: 84:ee:fa:43:61:60:89:ef:d6:74:40:48:ef:46:8c: 47:e8:6f:cc:ae:02:ff:1a:5c:a5:5e:35:62:f2:54: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:40:C3:57:3E:E8:10:57:4C:F6:E8:34:9D:76:B2:AE:C6:0F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00c37976-a9ad-3ff9-93c4-6a0178864b95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.254.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:92:82:49:50:fa:4a:89:65:36:42:bb:a5:fd:e7:48:37:28: be:d9:9d:45:95:2f:de:d8:0f:96:79:c3:99:00:55:98:cd:c8: ad:6a:1a:77:82:e6:53:55:2f:01:47:92:b8:85:a8:1b:36:d7: 63:02:f9:07:e7:cf:3d:a1:e5:ab:f9:05:72:6a:9b:74:13:af: 0d:d2:8b:10:71:44:d9:43:c2:06:85:0c:9d:43:6c:ba:02:04: 13:30:81:d9:d5:46:46:d0:99:f6:ba:3a:b0:cc:9a:58:c9:9a: 1e:bf:33:e7:b2:53:d6:2a:06:38:38:54:80:b7:04:70:d7:43: 30:6d:ae:09:33:a5:df:ce:c1:80:0d:74:5c:8a:a0:34:d3:fa: c1:6e:75:33:b1:88:dc:77:4e:d7:08:98:33:19:de:03:76:54: 9c:85:cb:ad:22:35:7d:88:97:ba:be:d7:ba:f6:a4:d4:09:94: b2:25:c1:b5:0e:57:ae:2c:b0:ee:09:cc:82:5d:ef:d2:08:13: f6:d0:9c:85:6d:04:e4:16:bf:0c:4b:4e:e6:7e:33:a3:19:a9: 3b:5e:b4:c1:d3:ba:10:4e:54:b6:e1:f8:f0:82:d5:3b:a5:c6: 5d:06:4b:78:7b:dc:ab:f4:21:24:23:31:31:27:8a:a5:34:8e: e7:41:db:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28qCQtDBL6Uh8FUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NWU3NGI3MjEtZDE5Ni00MWRhLWIyZTQtYjY1ZTMyMTA1OWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDsFkBzDcHopfqcn0EWM89G95EC/88qUsXY/ f2uY8n+KuKdEZ9ykJffKOT7g7Y4cWh62W1Mxq+avlStFfSNaKVguqiRLrm40KuOE AWnqsWw6kNuy2Ph/G/QBH8TSVf6iu4tRa3tkcAAyXq+Cm4LDUrGTPP6qIeyjCpyu 82h+ctbLDy4VW7ZWfOXI3k4c9m6se55D2oeCTODY389mxXYO90BWHnn9RqObra9O Lp/hpYXHUyTefafupGCSm7WKuylr2SI3SpEEep4BIsCrj1THy6TEr5V1jrjYht+s C6gZ+yeE7vpDYWCJ79Z0QEjvRoxH6G/MrgL/GlylXjVi8lQg0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSaQMNXPugQV0z26DSddrKuxg9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDBjMzc5NzYtYTlhZC0z ZmY5LTkzYzQtNmEwMTc4ODY0Yjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP7DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuSgklQ+kqJZTZCu6X950g3KL7ZnUWVL97YD5Z5w5kAVZjNyK1qGneC 5lNVLwFHkriFqBs212MC+Qfnzz2h5av5BXJqm3QTrw3SixBxRNlDwgaFDJ1DbLoC BBMwgdnVRkbQmfa6OrDMmljJmh6/M+eyU9YqBjg4VIC3BHDXQzBtrgkzpd/OwYAN dFyKoDTT+sFudTOxiNx3TtcImDMZ3gN2VJyFy60iNX2Il7q+17r2pNQJlLIlwbUO V64ssO4JzIJd79IIE/bQnIVtBOQWvwxLTuZ+M6MZqTtetMHTuhBOVLbh+PCC1Tul xl0GS3h73Kv0ISQjMTEniqU0judB23I= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:01 2025 by rpki-client