$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d7488eb-f8eb-36ef-8c51-7bccff14ebd6.roa File: 3d7488eb-f8eb-36ef-8c51-7bccff14ebd6.roa (raw, json) Hash identifier: SbufNx4aH+qOwITB2WdHm5nIaNoytiIMuidrlZrkc/M= Subject key identifier: 9B:B3:51:6C:80:EF:15:E6:CA:51:79:1A:54:53:63:52:F5:87:3E:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C372DB6E3F4696CDD99E680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d7488eb-f8eb-36ef-8c51-7bccff14ebd6.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.251.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:2d:b6:e3:f4:69:6c:dd:99:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=761381cc-d69e-4ec6-a395-5f130dcc08af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:1e:05:fa:cc:08:06:25:41:e9:32:5f:82: 51:47:e7:ba:ff:5c:d5:0a:1f:bd:0f:b0:da:7f:3a: 0f:7c:94:57:d1:64:b9:3c:ed:2a:8f:f6:0b:0c:98: ef:2f:88:d3:ae:3d:a8:c1:89:a6:4a:e0:62:ef:ca: 61:e0:c1:af:d4:55:9a:ed:b9:b0:29:1f:f7:bb:d5: 92:20:48:2f:e8:a7:0e:39:98:7b:cd:47:63:36:64: 17:cc:3a:e4:7d:81:59:f8:58:b0:57:47:6f:1e:11: 6b:00:a4:30:c4:3c:c3:a3:2a:59:8f:bf:cb:4e:50: 60:4d:4d:00:b0:7c:58:d3:c4:5e:0f:8f:bb:6d:45: 52:30:f8:11:04:27:75:3c:0c:22:48:e4:a7:a2:b0: 30:13:83:a7:49:24:2e:37:d5:b3:60:30:41:ed:e6: 2f:ee:4a:68:b3:48:7b:23:82:83:55:be:f9:60:6c: ef:ac:70:3e:8e:dc:4a:69:51:df:6a:3b:4f:80:93: de:d2:60:85:8f:cf:f0:4e:69:4a:84:a9:01:df:27: b4:a3:dd:7d:d2:c6:41:4e:92:8e:71:59:1d:fc:46: 26:7c:80:c2:12:da:a5:cb:d8:ec:96:e2:08:6e:78: fa:1b:32:f1:7b:b9:58:a8:d8:40:71:c7:ff:c0:fb: 0e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B3:51:6C:80:EF:15:E6:CA:51:79:1A:54:53:63:52:F5:87:3E:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d7488eb-f8eb-36ef-8c51-7bccff14ebd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:08:bc:c3:50:28:93:82:fe:41:78:81:3b:94:25:d2:04:52: 7d:fa:a7:72:f7:ff:86:f7:32:aa:c9:6a:91:ff:cf:83:32:62: f1:1a:5f:f1:4e:69:9d:91:17:d3:08:70:74:2d:0e:fd:b9:b6: 1b:4a:e8:25:60:85:1f:86:9f:0f:5f:33:b9:49:d8:84:75:7e: 27:a5:da:1a:59:3e:6e:28:88:20:7c:c5:27:2c:e6:70:1c:53: b5:83:90:58:52:f0:1e:99:7d:28:d4:df:f1:19:f6:96:54:bc: b3:81:09:ea:57:a9:98:be:8c:6a:8a:c2:33:23:be:61:74:57: 92:e1:cb:71:6c:ac:53:c7:2c:5e:44:e3:03:2a:52:81:4a:00: b5:59:13:2a:76:5a:60:58:c8:a3:9f:39:04:dc:2c:89:a3:cf: e4:db:05:45:07:95:48:b7:4c:92:c2:74:6c:d2:f3:73:d7:45: ce:d9:8a:9e:4a:00:5e:c1:94:2a:9d:20:69:ec:de:9b:57:c7: 33:33:38:7a:dd:08:58:00:1e:bd:16:ff:e5:b7:de:e8:07:ad: 4f:51:a1:ff:d0:dc:9c:35:f1:09:5f:63:b8:2d:8c:f2:7e:2a: cd:c8:49:5a:82:bf:42:64:7a:93:e6:0c:08:73:98:cb:91:75: 92:a6:b3:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNy224/RpbN2Z5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NzYxMzgxY2MtZDY5ZS00ZWM2LWEzOTUtNWYxMzBkY2MwOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm4eBfrMCAYlQekyX4JRR+e6/1zVCh+9D7Da fzoPfJRX0WS5PO0qj/YLDJjvL4jTrj2owYmmSuBi78ph4MGv1FWa7bmwKR/3u9WS IEgv6KcOOZh7zUdjNmQXzDrkfYFZ+FiwV0dvHhFrAKQwxDzDoypZj7/LTlBgTU0A sHxY08ReD4+7bUVSMPgRBCd1PAwiSOSnorAwE4OnSSQuN9WzYDBB7eYv7kpos0h7 I4KDVb75YGzvrHA+jtxKaVHfajtPgJPe0mCFj8/wTmlKhKkB3ye0o9190sZBTpKO cVkd/EYmfIDCEtqly9jsluIIbnj6GzLxe7lYqNhAccf/wPsOwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuzUWyA7xXmylF5GlRTY1L1hz4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2Q3NDg4ZWItZjhlYi0z NmVmLThjNTEtN2JjY2ZmMTRlYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4IvMNQKJOC/kF4gTuUJdIEUn36p3L3/4b3MqrJapH/z4MyYvEaX/FO aZ2RF9MIcHQtDv25thtK6CVghR+Gnw9fM7lJ2IR1fiel2hpZPm4oiCB8xScs5nAc U7WDkFhS8B6ZfSjU3/EZ9pZUvLOBCepXqZi+jGqKwjMjvmF0V5Lhy3FsrFPHLF5E 4wMqUoFKALVZEyp2WmBYyKOfOQTcLImjz+TbBUUHlUi3TJLCdGzS83PXRc7Zip5K AF7BlCqdIGns3ptXxzMzOHrdCFgAHr0W/+W33ugHrU9Rof/Q3Jw18QlfY7gtjPJ+ Ks3ISVqCv0JkepPmDAhzmMuRdZKms1I= -----END CERTIFICATE-----Generated at Thu Oct 16 02:06:16 2025 by rpki-client