$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b7d72a1-3aa0-3268-a0f2-80ad12333020.roa File: 3b7d72a1-3aa0-3268-a0f2-80ad12333020.roa (raw, json) Hash identifier: KjhHRljCIsPyIwYFSErxOTle/F4qD+JZ1wSJKVMFm2A= Subject key identifier: 46:DF:79:C2:8C:4C:58:D5:2B:AD:59:F0:93:DB:D3:6F:9E:02:51:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C16D847AF43C0A08D4280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b7d72a1-3aa0-3268-a0f2-80ad12333020.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.56.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:16:d8:47:af:43:c0:a0:8d:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=24ebba51-408c-4789-9ae6-a3b4052a76fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:32:09:47:55:79:49:8c:5c:42:06:dc:18:a0: b3:0c:90:b8:cf:f7:55:e0:83:d0:e9:c2:c8:ee:de: ef:2f:cc:71:e4:e2:0f:ef:18:f0:33:d4:de:48:4a: 47:82:dd:f4:ca:a1:83:30:c9:16:47:ea:51:89:c9: a6:a5:79:93:40:5f:4f:5a:72:80:c1:a3:59:77:88: 80:c4:86:e9:29:90:cc:0e:a4:68:36:cb:07:c3:b7: 29:1a:02:7b:50:cc:d6:43:a0:1a:03:0a:46:c1:f6: e5:36:08:fc:13:2f:83:47:c4:f9:ac:41:c7:46:0c: 0a:06:c8:f4:d6:bc:75:80:38:65:d0:b8:8c:ba:00: fe:d0:b2:19:6e:d9:56:7a:7d:95:36:ab:24:24:67: 2f:f4:f3:38:47:f8:a0:c6:6f:9c:a0:36:85:e2:ed: c3:21:be:7f:7e:29:b4:3a:51:2d:dd:3f:9a:c8:94: 18:56:eb:5e:04:ea:fd:dd:3a:f3:02:85:fe:ca:42: 9a:98:e8:2b:d5:71:82:b7:34:5a:43:71:be:34:0d: 63:0f:e3:4b:3f:aa:f3:b7:bd:6a:59:09:b3:ac:0b: 19:af:4f:ec:c1:00:84:3a:2e:b2:07:8d:3a:53:5f: 78:59:bb:2a:c6:fd:df:86:3e:95:61:a5:d0:07:1d: 6c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DF:79:C2:8C:4C:58:D5:2B:AD:59:F0:93:DB:D3:6F:9E:02:51:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b7d72a1-3aa0-3268-a0f2-80ad12333020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.56.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:75:54:33:ca:04:71:63:c2:68:13:78:0d:b5:16:f2:fe:b4: a7:63:33:80:63:e9:a8:4d:ea:b6:30:bb:ed:9e:f2:6e:33:72: b2:fb:50:f4:07:65:7b:37:b4:1a:a0:fb:91:e5:05:db:6f:31: 9d:14:28:2a:72:9f:b2:14:48:39:b7:57:23:b5:fe:cb:7d:40: a1:05:4a:5b:8e:8e:6d:7d:9d:8b:00:21:14:7c:cc:0d:51:68: 3c:4a:77:df:db:c5:40:1c:f6:a9:2a:9b:b4:88:f2:48:2d:8a: 8e:41:8e:29:16:e9:59:15:31:ee:1e:58:02:7c:00:25:4b:fd: c9:9a:96:c8:cc:7f:b1:84:ee:fd:36:ab:2f:8b:12:51:53:25: 60:38:f2:d1:23:10:1a:c7:73:2c:1e:c5:2b:74:d9:c1:71:2e: 63:38:5c:ac:c9:15:f5:f0:a8:19:3b:fc:b2:0e:11:84:0d:09: 09:b5:93:17:bc:0b:d7:e4:ca:1a:86:06:eb:81:3a:94:d9:01: 0b:2d:34:42:85:0c:5b:ea:82:f0:ad:ba:2a:63:07:04:a9:73: 3d:ba:01:2f:04:e8:3c:a9:d0:6d:18:09:5f:92:54:ec:b3:af: f5:37:a3:65:ee:ed:d2:8d:6d:05:85:28:e3:dc:b6:4d:df:2b: 36:17:4d:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBbYR69DwKCNQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk MjRlYmJhNTEtNDA4Yy00Nzg5LTlhZTYtYTNiNDA1MmE3NmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jIJR1V5SYxcQgbcGKCzDJC4z/dV4IPQ6cLI 7t7vL8xx5OIP7xjwM9TeSEpHgt30yqGDMMkWR+pRicmmpXmTQF9PWnKAwaNZd4iA xIbpKZDMDqRoNssHw7cpGgJ7UMzWQ6AaAwpGwfblNgj8Ey+DR8T5rEHHRgwKBsj0 1rx1gDhl0LiMugD+0LIZbtlWen2VNqskJGcv9PM4R/igxm+coDaF4u3DIb5/fim0 OlEt3T+ayJQYVuteBOr93TrzAoX+ykKamOgr1XGCtzRaQ3G+NA1jD+NLP6rzt71q WQmzrAsZr0/swQCEOi6yB406U194Wbsqxv3fhj6VYaXQBx1sPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbfecKMTFjVK61Z8JPb02+eAlFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2I3ZDcyYTEtM2FhMC0z MjY4LWEwZjItODBhZDEyMzMzMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGDgfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ11VDPKBHFjwmgTeA21FvL+tKdjM4Bj6ahN6rYwu+2e8m4zcrL7UPQH ZXs3tBqg+5HlBdtvMZ0UKCpyn7IUSDm3VyO1/st9QKEFSluOjm19nYsAIRR8zA1R aDxKd9/bxUAc9qkqm7SI8kgtio5BjikW6VkVMe4eWAJ8ACVL/cmalsjMf7GE7v02 qy+LElFTJWA48tEjEBrHcywexSt02cFxLmM4XKzJFfXwqBk7/LIOEYQNCQm1kxe8 C9fkyhqGBuuBOpTZAQstNEKFDFvqgvCtuipjBwSpcz26AS8E6Dyp0G0YCV+SVOyz r/U3o2Xu7dKNbQWFKOPctk3fKzYXTX8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:45 2025 by rpki-client