$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c3949ac-f619-3e53-ac3e-5ea5f12917d8.roa File: 4c3949ac-f619-3e53-ac3e-5ea5f12917d8.roa (raw, json) Hash identifier: RgNQ86f9cNrFEEPI093dhs26VBQjk9fGi5ib2Q8lN/w= Subject key identifier: 6E:6F:83:57:A3:7B:43:46:54:E4:A4:FE:63:E2:A9:A8:6F:50:02:1A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2327E51397B21A437DF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c3949ac-f619-3e53-ac3e-5ea5f12917d8.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 24.253.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:32:7e:51:39:7b:21:a4:37:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=b9c3949b-d8a3-401f-9102-b161040d5836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9d:9c:6a:ff:33:90:32:40:3a:a4:ca:dd:c4: 96:16:5c:6c:cc:33:69:0b:d8:39:29:25:4f:81:c9: 18:29:26:b7:80:6b:8b:fb:3b:19:5e:b3:f4:55:ad: 34:7c:06:b6:fd:01:92:47:58:59:3b:46:0d:e6:35: 1c:32:f5:62:a1:ba:f9:7a:4a:97:bf:e1:85:da:f7: 72:c7:07:97:69:56:8b:d0:61:9b:c8:1a:19:b2:a7: 91:47:f9:37:a5:23:34:a9:75:04:7b:4e:93:a5:07: 70:04:90:df:c8:86:52:3b:d2:b6:0a:5c:04:de:ef: 42:7b:9a:a3:c7:c3:66:55:45:34:b0:6d:69:72:49: 7d:80:e7:45:3a:8c:7c:8d:ad:85:ea:71:b2:d3:26: 54:e3:e7:68:35:a2:aa:8d:4a:10:57:a2:77:bc:1d: 4c:f6:fd:65:45:2b:d7:7a:6c:ee:3c:2b:0b:df:3f: 6e:30:cf:06:2e:79:84:3e:f5:c0:18:67:1c:93:89: 06:51:83:bd:82:57:e5:e5:e4:79:1e:df:e4:0b:a4: e9:7a:f0:46:7c:3b:1c:da:7f:de:05:ae:53:8f:3b: bc:9b:32:bb:9b:c5:f2:15:eb:e4:50:6b:0d:9b:70: 1b:55:a3:f0:ee:34:5b:03:9d:f6:35:bb:e6:bf:a9: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6F:83:57:A3:7B:43:46:54:E4:A4:FE:63:E2:A9:A8:6F:50:02:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c3949ac-f619-3e53-ac3e-5ea5f12917d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:75:13:6c:fc:ea:0d:ac:22:4b:5f:62:65:20:ae:f3:79:3b: 7c:48:3a:7b:1c:8f:0f:2d:8a:87:5f:8f:fc:e1:40:2e:57:be: 0e:b7:eb:7b:55:2e:e0:3d:b4:9e:5b:12:d9:f3:c1:3d:16:8d: b9:12:36:a9:a8:b1:33:4f:8c:dd:d1:84:c2:4e:86:31:a0:fd: bb:66:ad:de:be:07:9b:be:1d:cc:4c:aa:2b:39:fd:aa:b0:b4: b2:e8:7c:b0:82:9f:55:a6:6f:d4:97:3d:20:8a:da:c0:be:9e: 0d:c6:98:6e:0c:41:57:f5:86:5a:c9:16:a5:e1:70:f8:02:04: 02:7f:e1:0d:b6:25:f0:47:2e:69:5d:cf:64:7c:5e:b2:3a:3e: 2c:ec:7f:e4:b0:4d:ed:27:fb:a4:2d:e8:a1:07:5b:6d:b1:12: dc:cf:07:63:3a:57:cf:7a:00:01:fb:6b:34:fe:2b:77:4a:71: 55:90:d3:9d:ea:9a:21:f0:be:9b:0e:6c:12:bf:21:ee:8c:5c: 25:c2:9b:e8:f1:57:8c:b9:02:46:75:b7:82:ee:a9:b8:9e:d4: 43:a8:80:c2:6f:d4:a1:c8:db:2c:66:cf:27:16:de:76:63:c3: 98:ff:6c:02:15:74:86:be:74:82:ca:82:65:ed:d7:6f:e3:b5: 9f:15:65:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jJ+UTl7IaQ334AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YjljMzk0OWItZDhhMy00MDFmLTkxMDItYjE2MTA0MGQ1ODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ2cav8zkDJAOqTK3cSWFlxszDNpC9g5KSVP gckYKSa3gGuL+zsZXrP0Va00fAa2/QGSR1hZO0YN5jUcMvViobr5ekqXv+GF2vdy xweXaVaL0GGbyBoZsqeRR/k3pSM0qXUEe06TpQdwBJDfyIZSO9K2ClwE3u9Ce5qj x8NmVUU0sG1pckl9gOdFOox8ja2F6nGy0yZU4+doNaKqjUoQV6J3vB1M9v1lRSvX emzuPCsL3z9uMM8GLnmEPvXAGGcck4kGUYO9glfl5eR5Ht/kC6TpevBGfDsc2n/e Ba5Tjzu8mzK7m8XyFevkUGsNm3AbVaPw7jRbA532Nbvmv6lIswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5vg1eje0NGVOSk/mPiqahvUAIaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGMzOTQ5YWMtZjYxOS0z ZTUzLWFjM2UtNWVhNWYxMjkxN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ1E2z86g2sIktfYmUgrvN5O3xIOnscjw8tiodfj/zhQC5Xvg6363tV LuA9tJ5bEtnzwT0WjbkSNqmosTNPjN3RhMJOhjGg/btmrd6+B5u+HcxMqis5/aqw tLLofLCCn1Wmb9SXPSCK2sC+ng3GmG4MQVf1hlrJFqXhcPgCBAJ/4Q22JfBHLmld z2R8XrI6Pizsf+SwTe0n+6Qt6KEHW22xEtzPB2M6V896AAH7azT+K3dKcVWQ053q miHwvpsObBK/Ie6MXCXCm+jxV4y5AkZ1t4Luqbie1EOogMJv1KHI2yxmzycW3nZj w5j/bAIVdIa+dILKgmXt12/jtZ8VZfY= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:44 2025 by rpki-client