$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438c7f97-51fd-3cc4-9ce3-2e4d338e3ae0.roa File: 438c7f97-51fd-3cc4-9ce3-2e4d338e3ae0.roa (raw, json) Hash identifier: v4T1Nr2K32e34BL52zqR1GIOtx/3VCn57jCDS670VyY= Subject key identifier: A1:95:9A:4D:F5:B4:61:68:30:F1:68:C9:A8:63:1B:45:81:F1:EE:F0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3730CB1F9B67E0E23AEC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438c7f97-51fd-3cc4-9ce3-2e4d338e3ae0.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.251.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:30:cb:1f:9b:67:e0:e2:3a:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=e9274921-efb9-4773-8f3b-ce21a142a5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:bf:5a:f2:6b:7c:23:ca:60:ea:a3:45:7c: 31:43:cb:97:47:7a:3a:10:38:97:a6:85:76:6c:7a: 50:a9:eb:02:52:2e:b8:0f:77:b4:c9:36:ae:d7:8b: 0c:b9:6c:fa:35:a6:3a:5d:21:da:a4:2d:9d:04:19: cd:cb:09:3c:39:57:74:5a:c7:33:0b:21:4c:39:f8: eb:7b:70:49:72:b4:5d:28:04:5a:5c:c4:22:a3:b8: 22:e0:43:40:96:49:d8:c4:02:c8:5e:55:ca:f6:bc: 2c:1d:2e:11:18:a8:b7:f1:1b:0c:30:59:15:ee:d7: 65:66:9f:da:db:a1:34:37:79:60:da:4e:4e:a5:eb: 2e:c9:b6:48:e1:da:7c:31:39:3f:76:9e:dc:b5:5e: ce:46:73:5d:a2:2d:89:10:9f:50:e3:fe:29:c0:74: 37:10:07:db:f7:fa:c7:9a:bb:e0:f4:44:18:53:4e: 41:4f:ca:95:ed:dc:0b:5b:5e:a4:88:29:cd:31:13: a2:e6:76:27:1a:e4:41:a2:75:f9:67:bf:de:d9:b6: 50:81:71:87:6f:46:bb:cf:95:02:d8:5e:4b:57:16: 0c:99:2a:a8:a8:e4:4d:a8:dd:f0:c9:1e:26:4e:dd: 00:6c:d7:20:2f:76:e4:7c:a3:82:5b:2d:66:8a:21: c8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:95:9A:4D:F5:B4:61:68:30:F1:68:C9:A8:63:1B:45:81:F1:EE:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438c7f97-51fd-3cc4-9ce3-2e4d338e3ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3d:c4:71:22:ad:33:e4:69:09:43:1a:b8:37:9a:4c:ba:aa: 32:42:ee:d0:72:94:a5:1a:c8:61:6b:95:0d:94:82:22:92:6d: 2a:ad:57:9e:b8:1a:90:6e:b4:84:ba:5e:b5:a3:57:74:2d:30: 07:18:8a:fc:fb:07:3e:0a:62:c1:b6:35:29:da:fe:34:a5:67: 7b:27:b3:0c:04:d0:b9:31:70:bb:db:13:ae:35:ae:a4:3a:88: 45:9d:7f:5b:b9:6f:2e:ef:98:b3:fd:44:95:0f:90:d2:18:cb: b5:63:38:e0:93:e5:ca:dd:5b:cf:ed:c9:08:fd:a0:95:14:27: 4e:cc:66:87:49:da:2f:68:71:c2:7d:39:1a:9c:ee:6a:14:23: f5:43:c5:cc:ae:4a:56:fd:d5:c9:c7:04:e7:89:74:b1:54:38: de:0e:d7:c4:d8:22:11:d4:78:5c:77:1d:14:d3:bc:72:69:98: 8b:15:0b:99:f8:22:af:28:2c:4f:86:c1:0c:f1:6f:59:dc:bd: 16:ec:c0:da:58:2f:7a:b0:a1:e0:31:a0:a7:2e:3e:ed:3b:67: 6b:3c:1d:85:e8:28:7c:8b:cb:08:8f:43:44:bf:4b:d4:83:69: 82:93:5c:8b:1e:eb:2a:8f:e2:13:eb:64:8f:2b:a4:12:fa:d1: a6:fa:a1:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzDLH5tn4OI67IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTkyNzQ5MjEtZWZiOS00NzczLThmM2ItY2UyMWExNDJhNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumq/WvJrfCPKYOqjRXwxQ8uXR3o6EDiXpoV2 bHpQqesCUi64D3e0yTau14sMuWz6NaY6XSHapC2dBBnNywk8OVd0WsczCyFMOfjr e3BJcrRdKARaXMQio7gi4ENAlknYxALIXlXK9rwsHS4RGKi38RsMMFkV7tdlZp/a 26E0N3lg2k5OpesuybZI4dp8MTk/dp7ctV7ORnNdoi2JEJ9Q4/4pwHQ3EAfb9/rH mrvg9EQYU05BT8qV7dwLW16kiCnNMROi5nYnGuRBonX5Z7/e2bZQgXGHb0a7z5UC 2F5LVxYMmSqoqORNqN3wyR4mTt0AbNcgL3bkfKOCWy1miiHIlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGVmk31tGFoMPFoyahjG0WB8e7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM4YzdmOTctNTFmZC0z Y2M0LTljZTMtMmU0ZDMzOGUzYWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPtcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE9xHEirTPkaQlDGrg3mky6qjJC7tBylKUayGFrlQ2UgiKSbSqtV564 GpButIS6XrWjV3QtMAcYivz7Bz4KYsG2NSna/jSlZ3snswwE0LkxcLvbE641rqQ6 iEWdf1u5by7vmLP9RJUPkNIYy7VjOOCT5crdW8/tyQj9oJUUJ07MZodJ2i9occJ9 ORqc7moUI/VDxcyuSlb91cnHBOeJdLFUON4O18TYIhHUeFx3HRTTvHJpmIsVC5n4 Iq8oLE+GwQzxb1ncvRbswNpYL3qwoeAxoKcuPu07Z2s8HYXoKHyLywiPQ0S/S9SD aYKTXIse6yqP4hPrZI8rpBL60ab6oX8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:46 2025 by rpki-client