$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f2ba786-cbc4-3326-b96b-012ffe179322.roa File: 1f2ba786-cbc4-3326-b96b-012ffe179322.roa (raw, json) Hash identifier: S3oNdh5wA71xN+Ryae8x9WUu8WD4+TEJdOGG2zH0yI4= Subject key identifier: EE:84:D5:41:27:2E:2A:09:1F:78:02:6E:EA:8A:30:16:0E:D2:7A:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C372E24F656AE667B296780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f2ba786-cbc4-3326-b96b-012ffe179322.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.251.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:2e:24:f6:56:ae:66:7b:29:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=4a988bd5-dea8-445b-a729-c3c3edaa1728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bd:1d:29:da:61:ba:7b:64:43:c2:00:d3:c4: 16:8f:f1:3e:4f:65:a4:7c:d8:73:cf:27:c9:79:ad: 18:26:b2:d2:2d:e8:6e:4a:8b:c0:2f:0a:8c:fc:4e: 04:a2:e4:91:96:84:90:1b:59:7e:d1:83:e1:fd:e2: 50:33:62:33:5c:2e:dc:34:2a:78:15:d0:f6:6f:4f: 0d:78:59:51:01:f2:b7:3b:54:f3:8e:83:3e:a5:cd: 2b:bb:b6:11:77:a3:b2:7a:37:53:80:ff:7d:86:d5: 8f:20:f8:69:40:2b:44:c1:55:5e:d7:f2:18:dc:2c: 1b:90:bd:0a:c6:04:c6:e5:2c:54:a1:79:d0:49:77: 35:4f:70:2d:38:94:79:79:90:78:03:7a:d3:a5:cf: 88:34:48:ba:38:42:3f:54:c1:df:b5:cf:70:b4:59: c4:f6:11:23:4f:1e:69:3f:3e:18:ba:07:86:ca:f2: 8c:96:b6:e4:47:53:72:34:9b:f6:04:4b:64:c2:3b: 15:69:97:3b:0d:00:82:db:0b:54:71:0b:44:79:67: 1c:04:d2:fa:e6:cb:fa:02:bf:3f:3e:2d:05:eb:e7: bc:51:54:59:42:d9:d1:00:b2:ee:ff:cf:53:3f:85: 59:a2:e6:d5:62:4f:ba:d4:f2:66:e1:73:aa:62:67: 29:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:84:D5:41:27:2E:2A:09:1F:78:02:6E:EA:8A:30:16:0E:D2:7A:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f2ba786-cbc4-3326-b96b-012ffe179322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:57:aa:17:f5:2c:6b:f4:23:10:5d:dd:d4:9e:df:b9:a6:ff: 6b:21:fa:a0:51:fb:71:c7:4d:23:b6:57:b0:78:2c:d1:8d:d1: ee:67:3c:54:37:92:dc:4c:56:45:0b:de:84:d4:f0:24:05:c9: af:fb:64:ad:0b:54:95:b2:18:91:72:45:6a:72:68:12:5e:2d: 63:98:6a:74:9e:68:6b:cc:a5:a9:05:cb:b5:1d:38:16:0a:ea: e7:d8:6d:cc:2a:bb:a7:e2:f4:2f:00:a7:1d:86:01:b9:89:f7: 15:7a:da:0b:e9:b7:5c:ad:a0:06:3a:82:55:01:e4:6f:74:b8: c0:0e:d7:b3:42:9c:01:87:88:ad:e9:1d:79:e7:04:0a:04:2f: 94:8b:23:c1:a7:29:e7:c3:79:3a:dd:a3:d6:cc:48:1e:65:d4: 66:d1:10:66:c9:63:b0:44:52:c4:25:68:22:4a:7c:00:81:14: e5:55:04:81:5c:12:30:db:8a:90:96:ea:03:88:21:d1:92:2f: 9a:a1:48:cc:55:95:85:93:37:0a:fd:e1:b6:ce:cf:b9:b7:8b: b1:08:8b:61:42:3e:87:15:a9:55:46:2f:09:ef:55:51:96:44: 68:28:0b:34:fb:dc:ca:98:66:89:cd:e4:01:0f:19:07:3e:03: 73:2d:64:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNy4k9lauZnspZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NGE5ODhiZDUtZGVhOC00NDViLWE3MjktYzNjM2VkYWExNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL0dKdphuntkQ8IA08QWj/E+T2WkfNhzzyfJ ea0YJrLSLehuSovALwqM/E4EouSRloSQG1l+0YPh/eJQM2IzXC7cNCp4FdD2b08N eFlRAfK3O1TzjoM+pc0ru7YRd6OyejdTgP99htWPIPhpQCtEwVVe1/IY3CwbkL0K xgTG5SxUoXnQSXc1T3AtOJR5eZB4A3rTpc+INEi6OEI/VMHftc9wtFnE9hEjTx5p Pz4YugeGyvKMlrbkR1NyNJv2BEtkwjsVaZc7DQCC2wtUcQtEeWccBNL65sv6Ar8/ Pi0F6+e8UVRZQtnRALLu/89TP4VZoubVYk+61PJm4XOqYmcpSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6E1UEnLioJH3gCbuqKMBYO0nryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWYyYmE3ODYtY2JjNC0z MzI2LWI5NmItMDEyZmZlMTc5MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPsiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRXqhf1LGv0IxBd3dSe37mm/2sh+qBR+3HHTSO2V7B4LNGN0e5nPFQ3 ktxMVkUL3oTU8CQFya/7ZK0LVJWyGJFyRWpyaBJeLWOYanSeaGvMpakFy7UdOBYK 6ufYbcwqu6fi9C8Apx2GAbmJ9xV62gvpt1ytoAY6glUB5G90uMAO17NCnAGHiK3p HXnnBAoEL5SLI8GnKefDeTrdo9bMSB5l1GbREGbJY7BEUsQlaCJKfACBFOVVBIFc EjDbipCW6gOIIdGSL5qhSMxVlYWTNwr94bbOz7m3i7EIi2FCPocVqVVGLwnvVVGW RGgoCzT73MqYZonN5AEPGQc+A3MtZEQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:24 2025 by rpki-client