$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/811bf3a1-e39d-3e96-932b-9565871b2207.roa File: 811bf3a1-e39d-3e96-932b-9565871b2207.roa (raw, json) Hash identifier: 32UHUL0TjMpX7ooy8cOuL2kZxaxavRhHAwZyob5sS40= Subject key identifier: AD:4F:6C:A7:35:48:17:52:0A:FB:6B:A0:5B:D2:8A:91:52:A2:F0:C9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F269A9A4B09FC0D0E83CC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/811bf3a1-e39d-3e96-932b-9565871b2207.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 24.250.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:69:a9:a4:b0:9f:c0:d0:e8:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=e9fd1ebb-1f1b-4644-83e3-6dd68d25bf00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:83:fe:ae:41:65:2e:d7:d1:5e:8f:08:a9: 63:ae:8b:1b:fe:d9:d8:ae:40:8d:46:7d:df:2b:b9: 64:93:12:e7:7a:e8:fe:88:0c:15:c8:87:a0:95:66: 8f:ae:3a:7f:8d:ba:0e:ea:d9:7b:e2:24:f1:35:f8: 29:ae:b4:0c:78:08:7c:be:14:42:3c:b8:5f:b9:09: 2b:3f:85:49:ff:cb:42:bf:44:ac:64:96:11:a3:0f: 28:d4:bb:b8:8c:b7:49:2b:27:bb:7a:3b:87:0e:51: b2:cc:07:08:19:99:af:c9:94:6d:ad:dd:fd:bd:b7: 68:4f:84:b5:28:0b:83:d9:f5:5d:82:06:8d:dc:2c: 65:64:6a:eb:14:66:98:64:b6:8a:de:d2:15:f8:8b: 24:76:c2:3d:8d:33:1a:ac:31:31:24:c9:33:ed:d8: eb:6e:03:33:94:13:89:10:da:6e:17:0d:8e:13:17: 27:1a:e2:a0:ca:d1:d7:50:83:cf:30:46:4c:0c:0b: a7:e6:2f:d8:d3:d2:e2:47:3a:d9:d3:7e:ee:bd:d9: 7b:1e:08:7e:56:d9:5c:c1:ae:f2:dc:b0:24:7f:a3: d0:2e:30:f7:14:5a:b0:f3:c5:06:0b:59:d5:d1:a1: 1c:28:11:e9:c8:6d:49:ee:94:18:96:b7:d3:58:cd: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4F:6C:A7:35:48:17:52:0A:FB:6B:A0:5B:D2:8A:91:52:A2:F0:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/811bf3a1-e39d-3e96-932b-9565871b2207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.250.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:47:66:54:a4:c3:df:1f:82:49:84:e9:57:fa:c3:33:8c:e2: e7:d8:4d:47:a4:bf:76:8a:1a:51:15:88:60:7d:90:66:2a:ee: 73:4e:e4:91:c5:0d:fa:f4:b9:aa:f6:16:f6:2a:4b:50:4e:c9: 23:7b:8e:8e:7e:75:55:15:e1:8d:e1:00:6e:a6:8b:4c:55:f8: 0c:71:6a:15:46:c3:86:ad:8c:3d:eb:24:42:e4:9e:4d:71:6f: 3d:d7:db:42:e3:8e:ac:0c:23:3c:07:b5:03:9a:f3:3a:52:2e: 32:01:89:ee:7d:d7:fc:46:b0:b3:e5:47:82:b2:ef:62:bc:67: 5d:18:2f:89:ea:5d:36:3a:4b:d6:26:e4:f1:db:46:91:ad:35: 98:2e:d2:b8:1b:3d:65:a5:e5:b6:0c:3b:97:b5:95:e4:6d:51: 71:f6:fc:da:d0:2b:a7:b8:2d:fa:16:08:33:34:53:6d:71:3d: cc:20:d8:78:9e:88:3b:95:93:a4:90:d3:0a:66:93:be:f5:4e: d1:d4:12:d4:51:85:48:b2:bf:14:f7:45:c5:82:ca:88:25:ec: ab:c2:07:31:55:90:c2:bd:91:0a:f6:3d:2f:ad:01:70:54:b6: fa:81:48:64:9e:a2:35:8b:3f:47:a8:55:e8:fb:14:97:ca:36: fc:19:a0:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mmppLCfwNDoPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTlmZDFlYmItMWYxYi00NjQ0LTgzZTMtNmRkNjhkMjViZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEKD/q5BZS7X0V6PCKljrosb/tnYrkCNRn3f K7lkkxLneuj+iAwVyIeglWaPrjp/jboO6tl74iTxNfgprrQMeAh8vhRCPLhfuQkr P4VJ/8tCv0SsZJYRow8o1Lu4jLdJKye7ejuHDlGyzAcIGZmvyZRtrd39vbdoT4S1 KAuD2fVdggaN3CxlZGrrFGaYZLaK3tIV+IskdsI9jTMarDExJMkz7djrbgMzlBOJ ENpuFw2OExcnGuKgytHXUIPPMEZMDAun5i/Y09LiRzrZ037uvdl7Hgh+Vtlcwa7y 3LAkf6PQLjD3FFqw88UGC1nV0aEcKBHpyG1J7pQYlrfTWM3B9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1PbKc1SBdSCvtroFvSipFSovDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODExYmYzYTEtZTM5ZC0z ZTk2LTkzMmItOTU2NTg3MWIyMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPo0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFHZlSkw98fgkmE6Vf6wzOM4ufYTUekv3aKGlEViGB9kGYq7nNO5JHF Dfr0uar2FvYqS1BOySN7jo5+dVUV4Y3hAG6mi0xV+AxxahVGw4atjD3rJELknk1x bz3X20LjjqwMIzwHtQOa8zpSLjIBie591/xGsLPlR4Ky72K8Z10YL4nqXTY6S9Ym 5PHbRpGtNZgu0rgbPWWl5bYMO5e1leRtUXH2/NrQK6e4LfoWCDM0U21xPcwg2Hie iDuVk6SQ0wpmk771TtHUEtRRhUiyvxT3RcWCyogl7KvCBzFVkMK9kQr2PS+tAXBU tvqBSGSeojWLP0eoVej7FJfKNvwZoBM= -----END CERTIFICATE-----Generated at Thu Oct 16 04:52:42 2025 by rpki-client