$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1cef33b8-4bb4-3337-85e5-b2214bd6801b.roa File: 1cef33b8-4bb4-3337-85e5-b2214bd6801b.roa (raw, json) Hash identifier: IMxT310TnLWcyB2bC6uRSF1tRrt5yLXdMOLbMi/qFCw= Subject key identifier: CE:25:BF:07:4C:FE:43:2A:5D:07:CC:92:21:2B:4D:93:63:B0:04:59 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F28713725601CFD3D90D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1cef33b8-4bb4-3337-85e5-b2214bd6801b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 24.250.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:87:13:72:56:01:cf:d3:d9:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=69a76c59-9546-4e71-9b7f-31c9c615502c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0d:c4:67:84:5c:f5:0c:e5:58:9e:cd:26:3d: 62:41:0d:d7:51:32:f9:db:51:13:2b:31:fa:f9:fd: e1:8c:f8:b5:8f:5d:0c:88:16:98:3e:63:12:46:d8: 52:b7:77:fa:46:0a:ef:73:ae:1d:32:b4:ac:ee:ed: 36:48:0f:38:b1:b6:dd:fe:70:2d:ad:74:4c:c1:f1: bc:7e:e7:1a:f3:6e:bc:e0:26:ab:51:85:3f:d5:17: e8:1e:98:29:58:bc:f9:6a:2d:37:97:a4:be:b4:92: f4:e5:d1:a4:d7:98:5b:51:cb:7d:d7:65:65:b8:7c: bc:b6:6f:c5:97:41:61:25:3f:80:0a:81:46:f2:5b: cb:45:80:cd:7c:25:dd:a4:7b:b1:5d:72:16:ca:5f: 3f:ad:53:bb:09:ac:4c:fc:d1:c7:ef:a5:a5:11:66: ba:47:fe:8e:65:7f:ae:f5:16:3d:09:a8:52:69:3a: 10:ca:08:55:b4:44:43:93:27:20:cc:ff:9b:55:d7: 88:42:e6:70:8d:15:b9:2d:40:cd:37:26:37:04:c6: 8e:58:10:bf:9c:be:de:79:4a:2b:4d:8d:99:11:e8: 76:ea:8a:c9:e4:5c:fc:41:ff:7a:c0:bf:34:3f:f4: 8d:db:99:24:80:2b:3a:db:d4:2a:83:99:9b:f7:8c: 38:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:25:BF:07:4C:FE:43:2A:5D:07:CC:92:21:2B:4D:93:63:B0:04:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1cef33b8-4bb4-3337-85e5-b2214bd6801b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.250.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:df:bd:80:06:bc:33:60:f6:cb:45:42:49:91:89:8a:2b:2f: e1:ae:e9:f1:2d:f1:58:47:2e:e9:59:c9:c2:c8:6a:f9:cd:d4: dd:96:cf:80:cf:55:a5:84:d1:17:23:2e:16:a9:35:97:54:67: d1:19:49:be:d0:6d:df:20:56:33:28:5f:c1:d2:1c:51:e8:ce: 51:7d:0e:75:ff:e9:7b:55:29:68:40:c9:2a:a8:fa:cc:c2:df: a6:52:d9:ca:af:97:75:4f:e5:ef:a9:0f:07:5b:c5:cc:a9:5b: 77:5e:f0:61:f4:a4:d4:f4:1e:b0:4a:6d:bc:fa:77:94:fa:a4: 96:6a:d8:b5:19:85:d6:d7:52:44:56:a2:c8:66:ac:c4:fb:78: 93:ea:de:0a:24:70:00:8f:1f:b0:86:b5:b4:4b:f5:aa:9f:27: db:27:52:6e:2f:f6:d4:83:eb:2e:55:f7:30:67:a8:65:87:b0: 9f:54:f6:fc:98:dd:98:71:86:4d:56:15:0e:cf:fe:b3:f5:ec: 6f:42:97:ee:5d:a5:f4:0f:b4:b4:9a:65:89:1f:3c:d1:a6:95: f5:47:a1:91:95:c5:50:a7:4f:30:b8:6b:b4:fb:0b:1c:07:3b: 4e:00:1a:7f:8c:6b:3e:e2:ca:35:57:d0:42:3e:80:d8:17:9e: 9b:fa:f1:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ocTclYBz9PZDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NjlhNzZjNTktOTU0Ni00ZTcxLTliN2YtMzFjOWM2MTU1MDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA3EZ4Rc9QzlWJ7NJj1iQQ3XUTL521ETKzH6 +f3hjPi1j10MiBaYPmMSRthSt3f6Rgrvc64dMrSs7u02SA84sbbd/nAtrXRMwfG8 fuca82684CarUYU/1RfoHpgpWLz5ai03l6S+tJL05dGk15hbUct912VluHy8tm/F l0FhJT+ACoFG8lvLRYDNfCXdpHuxXXIWyl8/rVO7CaxM/NHH76WlEWa6R/6OZX+u 9RY9CahSaToQyghVtERDkycgzP+bVdeIQuZwjRW5LUDNNyY3BMaOWBC/nL7eeUor TY2ZEeh26orJ5Fz8Qf96wL80P/SN25kkgCs629Qqg5mb94w40QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4lvwdM/kMqXQfMkiErTZNjsARZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWNlZjMzYjgtNGJiNC0z MzM3LTg1ZTUtYjIyMTRiZDY4MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPoqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATfvYAGvDNg9stFQkmRiYorL+Gu6fEt8VhHLulZycLIavnN1N2Wz4DP VaWE0RcjLhapNZdUZ9EZSb7Qbd8gVjMoX8HSHFHozlF9DnX/6XtVKWhAySqo+szC 36ZS2cqvl3VP5e+pDwdbxcypW3de8GH0pNT0HrBKbbz6d5T6pJZq2LUZhdbXUkRW oshmrMT7eJPq3gokcACPH7CGtbRL9aqfJ9snUm4v9tSD6y5V9zBnqGWHsJ9U9vyY 3Zhxhk1WFQ7P/rP17G9Cl+5dpfQPtLSaZYkfPNGmlfVHoZGVxVCnTzC4a7T7CxwH O04AGn+Maz7iyjVX0EI+gNgXnpv68fE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:38 2025 by rpki-client