$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ff88d8c-5127-3e96-ba2a-8aaa2c4d8811.roa File: 9ff88d8c-5127-3e96-ba2a-8aaa2c4d8811.roa (raw, json) Hash identifier: hZmsdtetsuat8pFQuOs/A086/1F/odYM5bWcARsvb0E= Subject key identifier: 4E:63:1E:CC:BB:84:C4:92:D7:6D:12:82:86:77:EB:E4:12:4F:27:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3739415772FD9B10708380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ff88d8c-5127-3e96-ba2a-8aaa2c4d8811.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.255.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:39:41:57:72:fd:9b:10:70:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=7d2bdf94-4a51-44f1-b3bc-ccc3ed716e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f4:61:27:31:27:7e:c1:f8:30:4c:01:bc:b9: 0a:67:eb:bf:47:86:5d:30:78:2e:28:db:da:00:fe: bc:24:46:ba:42:3c:5f:6a:bd:f9:7f:f9:4d:aa:bb: 38:7a:a5:aa:9e:27:d9:4b:5d:f7:8f:bb:ce:bc:33: b6:ee:4b:b9:02:87:3d:d3:e1:4e:5d:b1:1a:6b:0f: 02:14:f8:05:fc:bf:d9:4f:18:c4:9b:4f:06:52:34: cc:55:3e:06:0a:d7:ef:35:a4:82:08:d4:7f:a2:c1: ed:2d:d2:9b:9a:05:a6:64:7e:74:c7:a1:dc:3a:55: 75:07:f1:22:59:11:63:19:f0:a1:d2:74:b9:35:3d: 4f:48:e9:5c:89:e4:a2:10:fe:1a:91:f9:25:d2:a7: 6c:e0:6f:13:9e:e5:18:53:ae:7d:07:4b:f4:35:f1: 6b:ce:c3:de:58:5d:d0:80:b4:71:29:27:2a:bf:03: 2b:fa:c2:98:40:76:22:53:1f:9b:df:04:1b:f4:8c: 28:44:22:13:ba:4c:60:d7:0d:d5:13:e0:d3:d9:1e: 23:bc:c7:05:cd:19:fe:04:56:bd:bb:35:1e:67:17: 81:09:d0:c6:97:71:84:7d:1a:69:8e:c8:63:55:27: 6d:d7:71:11:1f:dc:a7:06:5a:cb:d1:2e:f5:e4:96: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:63:1E:CC:BB:84:C4:92:D7:6D:12:82:86:77:EB:E4:12:4F:27:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ff88d8c-5127-3e96-ba2a-8aaa2c4d8811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.255.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:7f:4d:66:89:ad:09:8f:4b:c2:be:d2:f6:06:cf:21:4b:49: a0:35:01:2b:95:87:1d:0e:9c:40:7e:6e:88:7e:49:67:d0:34: 00:71:fe:a2:86:f8:f0:b7:9e:72:d4:91:27:9d:4d:ae:36:3f: 6d:3e:7f:66:24:47:11:66:5f:25:d8:cc:5a:81:26:86:19:69: 0f:5b:29:56:d1:74:f5:a0:5f:a8:e3:ab:73:17:95:6f:c4:1e: 60:3c:48:e0:b3:c8:34:37:f5:65:4e:34:02:65:1d:83:f7:78: 43:19:73:4a:2c:17:1a:b2:20:05:8b:bf:d2:b6:76:cd:19:c8: 94:4d:34:c1:66:89:24:65:d2:88:3e:d9:07:dc:6f:62:b6:68: ee:6a:75:19:26:b9:3b:e1:e6:a0:b3:6d:53:34:22:e5:94:4c: d3:15:36:57:21:69:91:ae:89:66:03:a8:c0:34:80:d6:03:b1: 8e:36:b3:9c:8e:54:23:41:3a:8b:48:79:c7:07:b4:94:3c:38: ef:24:29:4f:9f:ee:6d:a5:b4:6d:fa:cb:89:c3:17:8e:13:cb: 76:68:2f:d4:17:a3:e8:4f:7c:b7:2e:d1:0f:99:03:0c:bb:fb: f2:bf:e5:65:37:d6:fa:fa:d1:23:c2:6f:32:d9:12:15:11:b3: 3e:86:99:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzlBV3L9mxBwg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk N2QyYmRmOTQtNGE1MS00NGYxLWIzYmMtY2NjM2VkNzE2ZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPRhJzEnfsH4MEwBvLkKZ+u/R4ZdMHguKNva AP68JEa6Qjxfar35f/lNqrs4eqWqnifZS133j7vOvDO27ku5Aoc90+FOXbEaaw8C FPgF/L/ZTxjEm08GUjTMVT4GCtfvNaSCCNR/osHtLdKbmgWmZH50x6HcOlV1B/Ei WRFjGfCh0nS5NT1PSOlcieSiEP4akfkl0qds4G8TnuUYU659B0v0NfFrzsPeWF3Q gLRxKScqvwMr+sKYQHYiUx+b3wQb9IwoRCITukxg1w3VE+DT2R4jvMcFzRn+BFa9 uzUeZxeBCdDGl3GEfRppjshjVSdt13ERH9ynBlrL0S715JYk3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5jHsy7hMSS120SgoZ36+QSTydjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWZmODhkOGMtNTEyNy0z ZTk2LWJhMmEtOGFhYTJjNGQ4ODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt/TWaJrQmPS8K+0vYGzyFLSaA1ASuVhx0OnEB+boh+SWfQNABx/qKG +PC3nnLUkSedTa42P20+f2YkRxFmXyXYzFqBJoYZaQ9bKVbRdPWgX6jjq3MXlW/E HmA8SOCzyDQ39WVONAJlHYP3eEMZc0osFxqyIAWLv9K2ds0ZyJRNNMFmiSRl0og+ 2Qfcb2K2aO5qdRkmuTvh5qCzbVM0IuWUTNMVNlchaZGuiWYDqMA0gNYDsY42s5yO VCNBOotIeccHtJQ8OO8kKU+f7m2ltG36y4nDF44Ty3ZoL9QXo+hPfLcu0Q+ZAwy7 +/K/5WU31vr60SPCbzLZEhURsz6GmSI= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:13 2025 by rpki-client