$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ae6d0fd-21ea-38fc-bbd8-a27b51b891e5.roa File: 3ae6d0fd-21ea-38fc-bbd8-a27b51b891e5.roa (raw, json) Hash identifier: TrCwKnJF2mk9YeVgAKLom3QRRrTD0SWQElREJtUTG1g= Subject key identifier: 20:0D:B4:0F:89:8A:80:2A:A3:3B:40:28:45:CE:4A:82:4B:9D:FD:DE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F298C05C096A88341F6A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ae6d0fd-21ea-38fc-bbd8-a27b51b891e5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 24.253.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:98:c0:5c:09:6a:88:34:1f:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=396d8840-9199-44af-835e-60e93ab47d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:db:69:e6:e5:a5:2d:76:ab:1c:aa:8e:85: bc:34:96:bf:37:37:44:a4:ad:a9:10:4d:42:b3:56: 94:c2:db:84:d3:a6:8a:91:87:39:5c:02:e3:cf:a8: 17:d8:0b:33:08:6f:c9:0b:24:b5:ce:89:f9:e7:68: ca:ae:b6:b8:54:c9:92:89:71:35:e9:7c:3d:50:6f: f4:d5:13:57:81:07:fb:16:af:b0:49:e3:b2:ff:27: a8:42:26:6b:ef:37:a5:d8:16:c9:f6:d1:4a:a9:de: 80:21:c1:0c:a2:2d:40:ab:cd:58:ee:44:52:c9:5c: b2:95:54:69:d6:c9:a8:33:fe:d9:05:97:51:c8:83: 0f:ee:32:eb:9a:3d:14:79:85:8c:bc:63:52:d8:f7: b2:01:a9:b9:f1:40:06:ed:17:83:ce:90:94:b0:5b: 9d:c6:ca:7c:bd:1b:0e:d9:7d:36:6c:0f:2c:65:98: ea:38:ac:1b:f9:d3:d1:0e:f6:f3:ff:91:ea:f3:5e: d5:5d:02:eb:af:20:95:f9:ee:c8:95:74:1c:d1:76: 5b:93:c8:be:9a:8b:33:c8:44:97:c9:23:c0:62:ea: a9:12:cd:fd:9d:1e:fb:96:bd:c3:34:b6:a7:e4:fb: 63:e0:05:9c:21:51:b0:f4:2d:72:74:08:be:91:40: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0D:B4:0F:89:8A:80:2A:A3:3B:40:28:45:CE:4A:82:4B:9D:FD:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ae6d0fd-21ea-38fc-bbd8-a27b51b891e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:68:2f:0c:12:3e:fc:58:39:62:e7:e4:07:db:39:a2:08:66: 05:4d:4c:f1:da:71:39:e7:81:ce:7c:e2:29:28:0f:06:76:40: ea:92:a9:d5:4b:bc:7a:50:5e:f9:78:42:d7:2f:7e:5d:ef:91: cb:7b:95:4e:71:bc:56:60:b9:7b:d1:1a:9f:64:02:0f:0b:b7: b9:af:60:6a:2b:15:98:3b:b4:07:38:b4:3c:40:b7:42:9f:62: fd:03:9a:f6:47:0d:cd:31:b4:d2:23:a2:e0:a5:c2:d6:fd:3f: 11:4a:c5:4c:67:a5:7c:d3:07:22:f6:3c:e6:26:16:b7:a3:1b: 71:08:7c:fd:59:1c:29:07:dd:41:16:37:b4:7e:0e:ff:30:28: 90:f4:73:82:d9:90:c0:81:48:90:b1:2b:d8:f5:d5:a2:49:44: 3b:b5:bd:13:33:65:1a:cf:0f:d9:3e:13:62:73:6e:81:88:99: 1d:9c:2c:4d:66:c6:c7:b9:d4:08:a2:dd:d2:b4:dd:92:1e:ee: d6:32:6b:84:52:03:d0:be:91:f5:c0:e7:f1:c7:d0:d1:d4:c5: 54:8d:49:d2:2e:4e:6b:48:78:f3:05:2f:fb:4c:31:04:b7:b9: 6e:85:1f:67:ee:f6:01:f0:2e:45:bd:4e:c4:68:51:5b:f5:fd: 4c:02:21:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pjAXAlqiDQfagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Mzk2ZDg4NDAtOTE5OS00NGFmLTgzNWUtNjBlOTNhYjQ3ZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArczbaeblpS12qxyqjoW8NJa/NzdEpK2pEE1C s1aUwtuE06aKkYc5XALjz6gX2AszCG/JCyS1zon552jKrra4VMmSiXE16Xw9UG/0 1RNXgQf7Fq+wSeOy/yeoQiZr7zel2BbJ9tFKqd6AIcEMoi1Aq81Y7kRSyVyylVRp 1smoM/7ZBZdRyIMP7jLrmj0UeYWMvGNS2PeyAam58UAG7ReDzpCUsFudxsp8vRsO 2X02bA8sZZjqOKwb+dPRDvbz/5Hq817VXQLrryCV+e7IlXQc0XZbk8i+moszyESX ySPAYuqpEs39nR77lr3DNLan5Ptj4AWcIVGw9C1ydAi+kUAZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCANtA+JioAqoztAKEXOSoJLnf3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FlNmQwZmQtMjFlYS0z OGZjLWJiZDgtYTI3YjUxYjg5MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5oLwwSPvxYOWLn5AfbOaIIZgVNTPHacTnngc584ikoDwZ2QOqSqdVL vHpQXvl4Qtcvfl3vkct7lU5xvFZguXvRGp9kAg8Lt7mvYGorFZg7tAc4tDxAt0Kf Yv0DmvZHDc0xtNIjouClwtb9PxFKxUxnpXzTByL2POYmFrejG3EIfP1ZHCkH3UEW N7R+Dv8wKJD0c4LZkMCBSJCxK9j11aJJRDu1vRMzZRrPD9k+E2JzboGImR2cLE1m xse51Aii3dK03ZIe7tYya4RSA9C+kfXA5/HH0NHUxVSNSdIuTmtIePMFL/tMMQS3 uW6FH2fu9gHwLkW9TsRoUVv1/UwCIaU= -----END CERTIFICATE-----Generated at Thu Oct 16 01:28:34 2025 by rpki-client