$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/589e3549-c67c-3bd0-91e1-37e90df8e26e.roa File: 589e3549-c67c-3bd0-91e1-37e90df8e26e.roa (raw, json) Hash identifier: vaFdN9fQLWbhq20Cx8Vrk5d/3VWEbucnXx9zf6MzUDA= Subject key identifier: B5:BA:E9:68:04:3A:C2:C8:B5:16:20:6C:A9:88:18:88:0B:A0:41:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24E8E37DA5E78286DC180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/589e3549-c67c-3bd0-91e1-37e90df8e26e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 24.253.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4e:8e:37:da:5e:78:28:6d:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3a233f6f-1b62-4a26-a235-bea4eb6a00fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8d:f7:a3:3c:8a:df:20:2c:68:36:21:00:e6: c5:43:2f:e4:76:e9:bc:ef:a4:0d:df:33:75:f5:23: 46:c5:b6:bf:4c:ac:ad:26:93:cd:4c:aa:a1:e7:bc: 7c:62:6b:6b:43:df:e8:1a:ba:d6:8e:e0:c9:61:cb: 3a:8e:94:61:8b:16:79:00:02:e5:58:41:70:17:85: 17:da:91:0b:3a:9a:01:68:1d:fa:52:ab:dd:1c:a9: 1a:c1:05:cf:90:97:87:49:9f:74:f1:9c:cd:09:01: ac:17:55:28:9a:3a:18:0e:70:b9:15:39:23:e1:27: 46:e5:b2:26:9c:3b:6d:d0:fe:73:45:d8:7b:4c:13: 56:38:02:7e:73:df:93:cd:c9:bd:10:eb:28:92:74: 6e:e9:f7:db:8c:90:35:8b:a9:3b:69:86:06:cb:ab: d1:27:d4:9a:f3:0d:45:58:ec:5e:36:79:f7:03:15: a6:b8:e3:e5:2b:32:92:3f:1a:7e:3e:88:cc:da:48: ee:96:9b:ec:8a:4a:79:e8:2a:ee:f4:7c:94:2c:ec: 24:a0:16:f8:b4:6c:66:8a:29:81:72:34:cd:ab:71: 5d:2a:fa:87:dc:96:e7:de:aa:f3:48:e3:11:ae:66: 81:fa:8c:50:6a:b4:46:18:00:6f:e5:33:a1:ec:5d: ae:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BA:E9:68:04:3A:C2:C8:B5:16:20:6C:A9:88:18:88:0B:A0:41:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/589e3549-c67c-3bd0-91e1-37e90df8e26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:1d:f5:a2:e4:94:d2:d9:d5:7a:fc:f8:8b:84:a3:0d:86:56: a0:bc:3b:9c:61:14:fd:a2:a3:00:ab:5a:e8:16:77:39:bb:91: e9:93:a9:0f:ec:4c:8b:55:f0:e2:04:d1:17:20:de:c1:f4:18: af:30:49:d6:6b:26:b1:dc:55:78:36:7d:d3:f3:2d:96:0e:fc: 49:15:e2:2d:b4:ae:fa:cc:72:98:74:e6:11:6b:c9:75:f4:79: f0:a9:73:77:a0:50:72:0e:af:8f:0a:6d:aa:ab:1d:d5:bd:46: a1:be:21:f7:3a:c6:ed:92:07:ea:72:f3:98:5a:8d:90:21:33: ba:b4:6e:88:bc:93:42:c9:11:4b:fd:9b:5c:a9:cc:02:78:a5: 51:72:b0:97:4d:80:03:e7:19:f2:8b:c0:20:04:fb:8d:67:ae: 21:e4:b0:45:08:95:cf:4f:a7:9f:33:fa:0d:9f:4d:5e:1f:f2: 1d:dc:ee:df:8e:2b:61:f8:30:65:c2:66:9c:4b:17:47:4a:c3: dc:79:8b:4e:c1:ac:7c:2f:90:55:95:dd:25:68:4f:0c:01:8c: 6c:53:d5:8c:bb:6f:cc:5b:54:d5:f6:cc:55:07:7c:95:57:89: b5:be:97:cf:d1:35:1b:5c:67:b6:00:bc:db:ba:53:bf:73:5d: 12:97:e4:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28k6ON9peeChtwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk M2EyMzNmNmYtMWI2Mi00YTI2LWEyMzUtYmVhNGViNmEwMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY33ozyK3yAsaDYhAObFQy/kdum876QN3zN1 9SNGxba/TKytJpPNTKqh57x8YmtrQ9/oGrrWjuDJYcs6jpRhixZ5AALlWEFwF4UX 2pELOpoBaB36UqvdHKkawQXPkJeHSZ908ZzNCQGsF1UomjoYDnC5FTkj4SdG5bIm nDtt0P5zRdh7TBNWOAJ+c9+Tzcm9EOsoknRu6ffbjJA1i6k7aYYGy6vRJ9Sa8w1F WOxeNnn3AxWmuOPlKzKSPxp+PojM2kjulpvsikp56Cru9HyULOwkoBb4tGxmiimB cjTNq3FdKvqH3Jbn3qrzSOMRrmaB+oxQarRGGABv5TOh7F2uJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW66WgEOsLItRYgbKmIGIgLoEEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTg5ZTM1NDktYzY3Yy0z YmQwLTkxZTEtMzdlOTBkZjhlMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP2uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcd9aLklNLZ1Xr8+IuEow2GVqC8O5xhFP2iowCrWugWdzm7kemTqQ/s TItV8OIE0Rcg3sH0GK8wSdZrJrHcVXg2fdPzLZYO/EkV4i20rvrMcph05hFryXX0 efCpc3egUHIOr48KbaqrHdW9RqG+Ifc6xu2SB+py85hajZAhM7q0boi8k0LJEUv9 m1ypzAJ4pVFysJdNgAPnGfKLwCAE+41nriHksEUIlc9Pp58z+g2fTV4f8h3c7t+O K2H4MGXCZpxLF0dKw9x5i07BrHwvkFWV3SVoTwwBjGxT1Yy7b8xbVNX2zFUHfJVX ibW+l8/RNRtcZ7YAvNu6U79zXRKX5Ks= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:51 2025 by rpki-client