$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb4761b-84a9-30f1-81b3-6e89a0effdd7.roa File: 0bb4761b-84a9-30f1-81b3-6e89a0effdd7.roa (raw, json) Hash identifier: qNwoW0CcsKl7PJXnER5owWjA6wRA/tEan6UB0lESN3Q= Subject key identifier: 21:1A:76:59:1F:E7:93:64:64:FA:EB:79:07:2D:BB:6E:58:EA:C8:F1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29A47BE271311FB1A4B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb4761b-84a9-30f1-81b3-6e89a0effdd7.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 24.250.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9a:47:be:27:13:11:fb:1a:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=1f31f806-0b6f-4844-8504-593d8d587f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:da:50:a9:b2:ab:25:c5:88:74:84:7c:d3: 3f:09:8c:e9:18:c6:21:ad:60:3f:ef:79:ca:8b:c9: 45:3d:62:09:2a:c8:55:d7:b7:21:43:d6:ff:b1:d6: 43:3f:c3:70:19:27:2e:99:37:21:83:64:0d:7e:40: 9f:32:7e:bf:df:36:06:4c:82:d3:a1:27:24:a7:11: 9f:56:5b:17:f4:42:e6:be:86:1f:76:72:61:a8:03: 44:d3:8a:d0:28:ab:ee:20:13:21:16:b9:86:6b:a5: dd:0c:3b:eb:f0:2d:b1:4a:53:db:dc:66:46:49:76: e8:f1:b2:67:ed:cb:88:66:24:fe:b9:d6:53:cd:45: d8:f4:0c:a2:41:dc:e4:08:c8:0f:d7:7c:46:7f:49: 59:0c:f0:5e:27:7f:b5:69:a1:9a:eb:6b:90:21:90: 3f:51:c0:ea:7b:0e:aa:ce:0a:49:f6:55:44:73:6c: b0:88:b2:63:04:8a:79:9e:4f:ea:86:a3:70:d7:87: f9:27:29:17:c7:8d:1f:92:73:c6:21:b9:40:4c:9d: df:4d:ee:50:0b:33:79:45:1b:cb:13:76:a9:71:57: 6b:10:be:58:08:2d:06:e2:11:99:ad:70:06:2d:8f: b8:84:88:6e:b8:26:f5:96:be:90:9c:73:ca:6a:86: e3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1A:76:59:1F:E7:93:64:64:FA:EB:79:07:2D:BB:6E:58:EA:C8:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb4761b-84a9-30f1-81b3-6e89a0effdd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.250.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e4:bd:8d:1c:d7:df:8a:be:6d:4a:7a:1e:fc:dc:1a:32:49: 52:e5:72:a1:47:ca:1a:5f:00:6b:3d:1c:ca:f4:0b:65:db:23: 01:1d:01:24:e8:61:da:a5:c7:fc:ae:12:df:e2:75:bd:f9:80: f4:a7:78:7d:c9:87:e0:cb:d7:f9:dd:80:0e:92:99:c9:a7:0c: 80:0e:88:20:b7:58:84:59:ac:9a:6a:7f:2e:c1:ab:bd:94:97: 1c:87:f0:82:fb:d7:cc:4f:62:43:ec:05:18:e5:06:10:63:4b: 4e:68:71:ea:03:5b:ab:43:52:90:cb:32:b7:a3:9d:07:a5:40: 02:23:33:3a:29:58:94:26:d2:a3:3a:82:d9:27:c8:3f:01:24: 97:0c:a9:db:7c:79:0e:61:06:93:ef:27:84:b1:1c:41:f4:55: 79:da:3b:c1:0a:2a:ec:6a:0a:63:88:84:8d:70:0d:90:ff:45: ad:74:df:cc:1b:1f:4a:8a:1f:df:b3:95:93:3b:ab:6b:21:7c: 89:25:94:c5:d1:72:84:95:18:67:1f:bc:55:a3:2a:21:5e:af: 6b:eb:38:7e:54:36:06:80:83:af:d4:e6:d9:2c:c3:b1:17:4a: 23:f6:43:60:8e:2b:59:8d:96:44:aa:0b:8c:d2:f8:d6:02:95: 7d:f7:c6:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ppHvicTEfsaSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MWYzMWY4MDYtMGI2Zi00ODQ0LTg1MDQtNTkzZDhkNTg3ZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCzaUKmyqyXFiHSEfNM/CYzpGMYhrWA/73nK i8lFPWIJKshV17chQ9b/sdZDP8NwGScumTchg2QNfkCfMn6/3zYGTILToSckpxGf VlsX9ELmvoYfdnJhqANE04rQKKvuIBMhFrmGa6XdDDvr8C2xSlPb3GZGSXbo8bJn 7cuIZiT+udZTzUXY9AyiQdzkCMgP13xGf0lZDPBeJ3+1aaGa62uQIZA/UcDqew6q zgpJ9lVEc2ywiLJjBIp5nk/qhqNw14f5JykXx40fknPGIblATJ3fTe5QCzN5RRvL E3apcVdrEL5YCC0G4hGZrXAGLY+4hIhuuCb1lr6QnHPKaobjuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEadlkf55NkZPrreQctu25Y6sjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGJiNDc2MWItODRhOS0z MGYxLTgxYjMtNmU4OWEwZWZmZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3kvY0c19+Kvm1Keh783BoySVLlcqFHyhpfAGs9HMr0C2XbIwEdASTo Ydqlx/yuEt/idb35gPSneH3Jh+DL1/ndgA6SmcmnDIAOiCC3WIRZrJpqfy7Bq72U lxyH8IL718xPYkPsBRjlBhBjS05oceoDW6tDUpDLMrejnQelQAIjMzopWJQm0qM6 gtknyD8BJJcMqdt8eQ5hBpPvJ4SxHEH0VXnaO8EKKuxqCmOIhI1wDZD/Ra1038wb H0qKH9+zlZM7q2shfIkllMXRcoSVGGcfvFWjKiFer2vrOH5UNgaAg6/U5tksw7EX SiP2Q2COK1mNlkSqC4zS+NYClX33xlk= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:52 2025 by rpki-client