$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a1a31c4-e444-3a20-8875-c74889c40642.roa File: 8a1a31c4-e444-3a20-8875-c74889c40642.roa (raw, json) Hash identifier: GaGoXw0evIQvf6JxKI13HdxUFh16VQQ2ln6iT91z5N8= Subject key identifier: 69:BA:07:C0:AF:B1:E8:8E:46:4E:7C:62:2D:51:EE:07:77:1F:05:1B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26CCD0CB7419D1BDBE200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a1a31c4-e444-3a20-8875-c74889c40642.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 174.66.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:6c:cd:0c:b7:41:9d:1b:db:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=840969e2-715c-4157-8848-248f96de9a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f5:1a:fa:b1:3c:89:ea:03:39:4f:90:b5:8b: 71:7f:2d:01:4a:99:14:17:67:c1:78:d6:88:7d:2d: b9:03:ee:33:3b:6e:0a:14:f4:21:d6:39:82:e8:15: f0:7a:79:7f:f9:73:b8:3a:44:56:4e:1d:d4:e2:c5: 1e:ec:8b:56:21:f5:6d:ad:c7:c0:66:5b:c0:11:1d: 09:04:29:cc:1b:c2:05:61:a8:ca:df:a4:8a:cf:61: 7d:47:34:ed:af:d2:e9:20:de:2e:53:1d:c5:24:f2: 11:56:e8:bd:c0:92:f1:cd:67:7c:95:6a:1e:bd:bf: 2c:d3:12:cb:a8:94:b6:53:5a:05:83:12:24:93:42: e3:6a:de:d2:4d:64:5f:5b:62:68:4e:d1:7c:c2:6f: 4c:1e:b2:ff:a4:29:a3:3e:64:e7:15:84:22:4d:ad: cd:89:ee:53:a0:38:a4:97:fd:0a:7e:d4:5b:5d:33: eb:46:8b:db:7d:a8:8a:1f:66:8a:29:87:c4:9c:54: 62:8f:12:f5:c7:14:0c:4b:10:9a:5c:13:83:1b:ba: 2c:66:89:09:fe:e2:ca:76:44:a8:6c:da:2b:9b:65: 6f:97:e5:f7:0a:bc:27:35:32:39:18:91:d3:75:8d: 4f:0b:f1:93:44:da:8b:7c:43:58:b9:b5:16:70:81: cd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BA:07:C0:AF:B1:E8:8E:46:4E:7C:62:2D:51:EE:07:77:1F:05:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a1a31c4-e444-3a20-8875-c74889c40642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:f7:7d:cf:5b:6e:51:75:25:0f:23:d2:e4:4d:e3:ab:e4:1d: 22:48:80:3c:e1:dd:47:e2:b5:28:8c:38:a2:2c:98:dd:c9:72: f1:81:44:ca:84:0c:62:cb:97:67:d3:13:20:f5:cb:5d:e5:72: e2:91:43:99:bc:0a:e5:de:1a:19:c7:3d:ff:68:21:09:59:3d: 7e:c5:7f:26:c7:0d:31:d7:32:09:bf:e5:cc:bf:43:ce:3c:fa: 38:9f:81:94:a3:74:13:0b:31:0e:a7:2a:f4:23:f8:70:7b:2a: 4a:c7:45:e0:a6:09:18:1a:2d:b8:69:f8:34:02:38:b8:2f:73: 73:10:65:73:a8:74:94:79:81:df:d6:f2:d7:20:6a:7e:39:b9: 11:00:bd:13:45:d4:c6:c6:a1:4f:37:3d:b0:d9:f3:c6:0d:87: 8a:c9:3d:64:86:97:40:ae:7a:51:01:72:72:ea:df:89:34:1c: 43:a3:8d:ba:65:cc:35:4a:dd:99:f0:49:74:5f:2b:1b:8f:19: 45:40:f3:db:70:8d:a5:ad:5f:27:5c:68:81:29:3f:c9:8b:71: ae:c1:ef:53:6a:84:d3:ee:0f:4f:12:2e:be:bc:8a:ee:6f:46: 93:ad:91:d8:12:83:e9:0a:02:a1:05:cf:e1:69:25:bc:df:ab: fe:df:d0:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mzNDLdBnRvb4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODQwOTY5ZTItNzE1Yy00MTU3LTg4NDgtMjQ4Zjk2ZGU5YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfUa+rE8ieoDOU+QtYtxfy0BSpkUF2fBeNaI fS25A+4zO24KFPQh1jmC6BXwenl/+XO4OkRWTh3U4sUe7ItWIfVtrcfAZlvAER0J BCnMG8IFYajK36SKz2F9RzTtr9LpIN4uUx3FJPIRVui9wJLxzWd8lWoevb8s0xLL qJS2U1oFgxIkk0Ljat7STWRfW2JoTtF8wm9MHrL/pCmjPmTnFYQiTa3Nie5ToDik l/0KftRbXTPrRovbfaiKH2aKKYfEnFRijxL1xxQMSxCaXBODG7osZokJ/uLKdkSo bNorm2Vvl+X3CrwnNTI5GJHTdY1PC/GTRNqLfENYubUWcIHN8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGm6B8CvseiORk58Yi1R7gd3HwUbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGExYTMxYzQtZTQ0NC0z YTIwLTg4NzUtYzc0ODg5YzQwNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkKOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKb3fc9bblF1JQ8j0uRN46vkHSJIgDzh3UfitSiMOKIsmN3JcvGBRMqE DGLLl2fTEyD1y13lcuKRQ5m8CuXeGhnHPf9oIQlZPX7FfybHDTHXMgm/5cy/Q848 +jifgZSjdBMLMQ6nKvQj+HB7KkrHReCmCRgaLbhp+DQCOLgvc3MQZXOodJR5gd/W 8tcgan45uREAvRNF1MbGoU83PbDZ88YNh4rJPWSGl0CuelEBcnLq34k0HEOjjbpl zDVK3ZnwSXRfKxuPGUVA89twjaWtXydcaIEpP8mLca7B71NqhNPuD08SLr68iu5v RpOtkdgSg+kKAqEFz+FpJbzfq/7f0Gg= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:50 2025 by rpki-client