$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c63472e-a69f-3912-9ed9-09d23ab9256c.roa File: 4c63472e-a69f-3912-9ed9-09d23ab9256c.roa (raw, json) Hash identifier: LHAnTTWJPZZRmH6WQrMsOnP4hqDjMQEVA0ZzxyTm4mU= Subject key identifier: 85:B0:A1:47:2B:36:E0:58:02:30:6E:4E:4A:A0:D9:EE:24:A4:63:37 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373636E3DFD4D726464080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c63472e-a69f-3912-9ed9-09d23ab9256c.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.251.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:36:36:e3:df:d4:d7:26:46:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=cdfc4839-8d78-4b82-9e2f-1b3e1facc737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:d3:4b:af:56:2e:99:95:4c:b9:08:55:1e: 7e:9e:8d:05:99:d2:c6:2e:25:be:65:41:31:82:1f: 7c:21:21:a8:31:c7:a5:6f:fc:fe:06:33:58:29:e7: 7b:b6:bc:8d:54:54:5a:51:1e:d5:ac:5c:ab:c0:4c: 6d:9f:bc:1c:ea:fe:10:ff:8f:b8:f1:1d:17:bd:9b: 78:c8:fe:2e:34:6b:fe:d3:70:18:85:01:a7:42:ad: 7b:9d:45:57:8a:d3:58:40:ca:ac:24:da:f0:d6:ff: f2:6b:fb:cd:90:28:33:59:22:a5:2c:2d:36:3f:23: f2:28:e1:ca:5d:b0:97:32:34:a6:59:3a:e9:81:90: 50:e1:21:de:1a:c9:22:57:59:8c:86:97:2a:c2:85: 88:99:2c:a7:06:b5:6a:c5:bf:40:fc:e6:26:9a:a8: b6:48:fb:ba:39:d2:95:08:55:04:c5:13:2d:fd:93: 62:93:bf:c3:1a:a6:a9:d3:0e:fb:ec:42:f9:88:4d: 6a:1b:d7:09:1b:d2:cb:6e:17:be:bd:81:eb:5c:c0: 08:88:df:1d:a8:b9:45:40:5c:95:5f:05:9e:9e:c4: d9:4b:b1:19:3d:0c:f5:f0:69:86:bd:f8:1a:4a:46: 70:41:4a:03:79:aa:d4:63:58:89:e3:61:14:f6:5c: c3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B0:A1:47:2B:36:E0:58:02:30:6E:4E:4A:A0:D9:EE:24:A4:63:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c63472e-a69f-3912-9ed9-09d23ab9256c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:97:9b:41:6b:f8:0f:30:b0:88:75:a9:f8:f1:87:f2:40:0d: 84:7a:f3:94:d9:57:74:bd:6b:e9:20:35:8f:87:cd:bd:a5:ba: 2a:ab:5b:69:c7:5f:0d:b6:32:52:9e:39:34:4f:3a:b5:ad:52: ff:5b:97:04:c3:9c:9e:ce:a0:22:37:d7:0b:27:74:0e:ff:b0: b4:90:de:e1:15:81:ee:c4:54:d4:72:33:a5:0c:89:f3:94:78: 6c:3f:c7:12:84:a6:60:00:90:81:74:53:21:f7:85:c3:33:5f: 2a:80:92:ee:a9:f8:84:98:9f:7b:b3:dc:ad:3a:83:eb:66:45: 69:bc:49:23:7f:82:e4:3a:b8:20:bf:85:a9:32:b5:aa:e5:e5: 6e:16:4f:ae:bd:ce:f3:42:7b:a7:c4:2d:d1:c8:41:19:11:03: 2a:18:1c:70:e7:41:71:26:dd:81:3a:92:af:a3:a6:d0:d1:e3: 6b:c9:58:a0:3a:f1:94:b9:a6:47:1e:60:b2:82:5a:ff:85:41: 1d:a5:e2:54:b2:91:87:3a:b1:8a:68:2f:3d:aa:49:cf:d5:16: 0c:4a:e2:6e:5a:76:eb:87:a0:a3:93:3b:e7:d5:f0:3a:ee:2c: c8:c1:31:44:ab:72:06:d8:f0:f0:2d:7e:73:5a:a2:c0:dd:fe: b9:02:27:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzY249/U1yZGQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2RmYzQ4MzktOGQ3OC00YjgyLTllMmYtMWIzZTFmYWNjNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdvTS69WLpmVTLkIVR5+no0FmdLGLiW+ZUEx gh98ISGoMcelb/z+BjNYKed7tryNVFRaUR7VrFyrwExtn7wc6v4Q/4+48R0XvZt4 yP4uNGv+03AYhQGnQq17nUVXitNYQMqsJNrw1v/ya/vNkCgzWSKlLC02PyPyKOHK XbCXMjSmWTrpgZBQ4SHeGskiV1mMhpcqwoWImSynBrVqxb9A/OYmmqi2SPu6OdKV CFUExRMt/ZNik7/DGqap0w777EL5iE1qG9cJG9LLbhe+vYHrXMAIiN8dqLlFQFyV XwWensTZS7EZPQz18GmGvfgaSkZwQUoDearUY1iJ42EU9lzDGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWwoUcrNuBYAjBuTkqg2e4kpGM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGM2MzQ3MmUtYTY5Zi0z OTEyLTllZDktMDlkMjNhYjkyNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqXm0Fr+A8wsIh1qfjxh/JADYR685TZV3S9a+kgNY+Hzb2luiqrW2nH Xw22MlKeOTRPOrWtUv9blwTDnJ7OoCI31wsndA7/sLSQ3uEVge7EVNRyM6UMifOU eGw/xxKEpmAAkIF0UyH3hcMzXyqAku6p+ISYn3uz3K06g+tmRWm8SSN/guQ6uCC/ hakytarl5W4WT669zvNCe6fELdHIQRkRAyoYHHDnQXEm3YE6kq+jptDR42vJWKA6 8ZS5pkceYLKCWv+FQR2l4lSykYc6sYpoLz2qSc/VFgxK4m5aduuHoKOTO+fV8Dru LMjBMUSrcgbY8PAtfnNaosDd/rkCJ1s= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:57 2025 by rpki-client