$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce085b9-c1e2-38f5-b2e2-c503a58b6cd4.roa File: 2ce085b9-c1e2-38f5-b2e2-c503a58b6cd4.roa (raw, json) Hash identifier: DpzAcpDO+BVK5y4St6X8lhync/kuqiFdO4G+7xHCR3M= Subject key identifier: 50:15:52:AF:49:2A:FA:75:F0:1B:20:E1:7A:C9:83:10:69:BB:1E:46 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BC288CC28F5566E954DE4D1C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce085b9-c1e2-38f5-b2e2-c503a58b6cd4.roa Signing time: Wed 05 Nov 2025 14:50:09 +0000 ROA not before: Wed 05 Nov 2025 14:50:09 +0000 ROA not after: Tue 03 Feb 2026 14:50:09 +0000 asID: 22773 IP address blocks: 207.162.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:88:cc:28:f5:56:6e:95:4d:e4:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 5 14:50:09 2025 GMT Not After : Feb 3 14:50:09 2026 GMT Subject: CN=98589db2-4a14-4e11-bc3f-54e3bf8b4455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:88:c9:d8:e6:c6:83:5e:6d:c0:48:db:97:0e: 8d:c5:2c:83:ee:bc:9f:a5:ae:27:ce:65:97:2e:69: d0:01:cf:80:0b:a4:31:88:de:92:dc:fd:15:f3:e8: 3a:69:91:74:26:cf:d2:5a:58:af:77:fa:9e:fc:13: fb:ef:97:b0:79:24:c8:54:2e:f1:8d:ff:14:f5:ca: 5a:f0:5f:44:60:89:15:46:6c:d9:93:a5:fe:00:a7: 4b:d1:fc:d0:a6:9b:b0:22:a4:29:be:59:a4:f7:fc: 58:4a:8d:27:b5:b5:57:4a:81:63:26:bd:56:37:de: 4b:41:48:73:34:fe:76:d0:1c:65:c9:30:9d:9d:f4: 89:bc:41:0e:71:c2:ae:ff:62:60:eb:f7:84:90:ac: be:ef:99:1d:1d:ee:ba:2e:50:20:89:11:de:9d:91: 52:15:21:74:a4:19:c5:12:13:56:74:fd:69:11:e7: bf:fe:e2:f3:27:9a:28:ed:ac:86:67:f6:6f:45:ee: 0b:19:13:04:14:ec:f4:30:05:5e:61:28:d6:d0:1e: 15:60:7f:3e:ab:52:2f:e5:ab:ab:7a:70:9f:c2:32: fa:90:35:29:aa:c4:48:e6:44:1a:d5:83:10:cd:d1: 15:7d:13:e4:0a:ff:e0:55:15:3a:5a:d1:eb:28:5e: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:15:52:AF:49:2A:FA:75:F0:1B:20:E1:7A:C9:83:10:69:BB:1E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce085b9-c1e2-38f5-b2e2-c503a58b6cd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 207.162.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:df:7d:9c:4c:fa:22:fa:03:50:fa:56:a1:9b:73:02:0d:a7: 86:98:9d:aa:3a:b4:5e:19:ea:b3:87:a7:ce:82:f7:93:5b:78: 28:b6:72:5d:14:ba:5d:3b:49:68:f8:fb:21:76:e1:c9:57:36: bb:cd:19:5c:d9:6d:f6:bf:b8:af:e6:46:ce:12:d0:9f:7d:08: 8a:2c:89:2c:d3:34:4c:7f:45:f0:aa:53:09:e5:88:fe:4d:3f: 42:d9:d4:60:48:6b:ee:ee:72:0b:f6:47:9d:cc:a7:ce:b7:d0: 46:d5:d8:2e:b0:db:4a:00:17:a3:13:df:8d:c7:dc:69:7d:f9: 53:55:3d:be:62:e6:f3:65:aa:0e:97:6e:5a:af:b3:96:7a:38: 77:53:14:69:03:01:50:4a:55:9f:49:10:1c:83:7a:6a:f3:c8: 97:22:57:fb:fe:07:a0:62:7b:50:eb:a0:77:2e:36:f8:e4:31: a6:15:a3:3d:7a:8c:40:23:1d:79:ea:00:29:97:3e:03:09:b3: bd:3a:86:1e:b9:c8:10:8a:f3:49:e4:fd:c2:c5:a7:42:b0:55: ae:3e:bd:05:39:3a:d7:c5:31:60:95:7e:58:9e:2c:c7:ef:96: 24:8e:ce:7f:56:b7:43:68:89:26:6d:e1:47:fd:b6:1a:45:fd: d7:2c:fb:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCiMwo9VZulU3k0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEwNTE0NTAwOVoXDTI2MDIwMzE0NTAwOVowLzEtMCsGA1UEAxMk OTg1ODlkYjItNGExNC00ZTExLWJjM2YtNTRlM2JmOGI0NDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4jJ2ObGg15twEjblw6NxSyD7ryfpa4nzmWX LmnQAc+AC6QxiN6S3P0V8+g6aZF0Js/SWlivd/qe/BP775eweSTIVC7xjf8U9cpa 8F9EYIkVRmzZk6X+AKdL0fzQppuwIqQpvlmk9/xYSo0ntbVXSoFjJr1WN95LQUhz NP520BxlyTCdnfSJvEEOccKu/2Jg6/eEkKy+75kdHe66LlAgiRHenZFSFSF0pBnF EhNWdP1pEee//uLzJ5oo7ayGZ/ZvRe4LGRMEFOz0MAVeYSjW0B4VYH8+q1Iv5aur enCfwjL6kDUpqsRI5kQa1YMQzdEVfRPkCv/gVRU6WtHrKF7fQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAVUq9JKvp18Bsg4XrJgxBpux5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmNlMDg1YjktYzFlMi0z OGY1LWIyZTItYzUwM2E1OGI2Y2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6KCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnffZxM+iL6A1D6VqGbcwINp4aYnao6tF4Z6rOHp86C95NbeCi2cl0U ul07SWj4+yF24clXNrvNGVzZbfa/uK/mRs4S0J99CIosiSzTNEx/RfCqUwnliP5N P0LZ1GBIa+7ucgv2R53Mp8630EbV2C6w20oAF6MT343H3Gl9+VNVPb5i5vNlqg6X blqvs5Z6OHdTFGkDAVBKVZ9JEByDemrzyJciV/v+B6Bie1DroHcuNvjkMaYVoz16 jEAjHXnqACmXPgMJs706hh65yBCK80nk/cLFp0KwVa4+vQU5OtfFMWCVflieLMfv liSOzn9Wt0NoiSZt4Uf9thpF/dcs+0E= -----END CERTIFICATE-----Generated at Sat Nov 8 18:02:14 2025 by rpki-client