$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c589313-2347-339a-9fbb-5335e38529ca.roa File: 3c589313-2347-339a-9fbb-5335e38529ca.roa (raw, json) Hash identifier: jEGX3URGSkZ/L1zus8uO8aOp510qlIHEWnmfcI/w3Gs= Subject key identifier: 65:9D:9D:A7:A6:D8:2B:C8:FE:51:44:E3:69:D1:26:F7:1C:EC:BD:8B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24FDFF7A1089B617B8280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c589313-2347-339a-9fbb-5335e38529ca.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 174.65.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4f:df:f7:a1:08:9b:61:7b:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=99e46158-d363-4ecb-9928-06f776b45516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a1:11:d8:73:57:27:a5:55:1d:26:18:66:b8: 94:09:62:0a:13:03:c1:e4:de:e7:b2:f3:d0:0a:fc: e2:bf:37:fd:70:4b:21:8e:2a:85:30:4c:e5:36:9f: c6:16:7a:7d:60:cf:ae:12:08:15:97:cc:eb:34:f7: e8:24:a6:91:8e:f6:e2:66:86:76:2e:30:64:b8:92: 48:59:94:a1:ba:f7:4e:1b:87:52:b4:a6:61:8e:f0: 3a:37:ff:6c:31:78:80:6d:bb:1a:cc:11:e8:90:f8: f4:bf:20:e8:2f:12:d1:47:30:3f:c5:cc:0c:4b:e0: 96:f1:d4:cd:13:af:e9:45:fb:4d:4c:3a:9f:43:68: f0:8c:5c:4e:ed:5c:d7:d5:fc:40:e2:10:56:b3:1c: 17:96:a2:d4:07:2f:6c:1a:76:13:47:2c:7e:53:39: 45:e9:17:20:4e:33:8b:46:78:1b:3d:0f:b4:4c:ad: 1b:dd:74:83:7b:e0:52:e9:ef:3b:4b:5b:9d:f3:bc: 58:01:6d:1d:72:de:a3:ce:17:03:d3:8d:43:c6:e4: af:5c:1b:be:36:3f:f2:6e:45:04:ea:15:c3:4a:44: 8a:cd:6d:91:77:33:35:93:3a:72:d2:7d:30:60:ca: 6e:28:7e:72:76:a3:5f:5b:11:2d:bf:72:14:e8:bf: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9D:9D:A7:A6:D8:2B:C8:FE:51:44:E3:69:D1:26:F7:1C:EC:BD:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c589313-2347-339a-9fbb-5335e38529ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f1:9e:e1:99:e5:20:2f:fb:3f:ac:c8:14:77:06:22:66:01: 15:38:c2:52:10:43:e3:6d:93:27:9a:27:02:52:4f:43:42:89: 90:5e:76:87:5b:4a:92:d2:cd:2b:54:4e:fc:4c:1f:e2:f8:16: a5:22:be:32:01:ea:c6:2c:92:ed:be:a3:d2:dd:73:93:8a:1d: ab:1a:e6:1e:19:c0:ee:de:4a:a9:46:a3:28:dd:dc:24:53:6e: fd:d0:67:27:5d:44:4e:f7:a7:b2:0c:9a:c0:9b:e5:15:e8:d7: 70:18:b9:e7:33:96:1b:dd:88:62:b5:52:28:0a:42:bd:cc:b2: b1:c7:96:d3:b1:cb:5e:79:29:ff:86:4c:e3:e8:6b:37:5a:4a: aa:2c:29:0d:2f:be:6b:33:43:a9:a0:37:cc:7d:81:cf:c8:2e: 9e:4c:83:91:19:dd:ce:4c:54:2c:24:dd:19:b1:9f:24:16:d3: 57:8a:c6:d1:7d:39:a5:5c:74:78:52:35:44:19:16:62:3a:75: 68:db:e4:fb:d8:7b:7a:e5:77:3d:61:8f:23:2e:c9:ae:cf:06: a1:f7:21:dd:78:b3:72:68:8b:6c:02:cd:ea:ea:ba:ef:fe:3b: 0b:4c:39:85:15:77:27:52:65:0b:fe:f5:9c:06:3f:17:5c:b2: 5c:f0:36:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28k/f96EIm2F7goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OTllNDYxNTgtZDM2My00ZWNiLTk5MjgtMDZmNzc2YjQ1NTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKER2HNXJ6VVHSYYZriUCWIKEwPB5N7nsvPQ Cvzivzf9cEshjiqFMEzlNp/GFnp9YM+uEggVl8zrNPfoJKaRjvbiZoZ2LjBkuJJI WZShuvdOG4dStKZhjvA6N/9sMXiAbbsazBHokPj0vyDoLxLRRzA/xcwMS+CW8dTN E6/pRftNTDqfQ2jwjFxO7VzX1fxA4hBWsxwXlqLUBy9sGnYTRyx+UzlF6RcgTjOL RngbPQ+0TK0b3XSDe+BS6e87S1ud87xYAW0dct6jzhcD041DxuSvXBu+Nj/ybkUE 6hXDSkSKzW2RdzM1kzpy0n0wYMpuKH5ydqNfWxEtv3IU6L8IRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWdnaem2CvI/lFE42nRJvcc7L2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2M1ODkzMTMtMjM0Ny0z MzlhLTlmYmItNTMzNWUzODUyOWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPxnuGZ5SAv+z+syBR3BiJmARU4wlIQQ+NtkyeaJwJST0NCiZBedodb SpLSzStUTvxMH+L4FqUivjIB6sYsku2+o9Ldc5OKHasa5h4ZwO7eSqlGoyjd3CRT bv3QZyddRE73p7IMmsCb5RXo13AYueczlhvdiGK1UigKQr3MsrHHltOxy155Kf+G TOPoazdaSqosKQ0vvmszQ6mgN8x9gc/ILp5Mg5EZ3c5MVCwk3RmxnyQW01eKxtF9 OaVcdHhSNUQZFmI6dWjb5PvYe3rldz1hjyMuya7PBqH3Id14s3Joi2wCzerquu/+ OwtMOYUVdydSZQv+9ZwGPxdcslzwNmE= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:59 2025 by rpki-client