$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f123c0-2604-3ef5-b61a-7bacb9cb05d0.roa File: a3f123c0-2604-3ef5-b61a-7bacb9cb05d0.roa (raw, json) Hash identifier: jRtMX2Qe7NEhFDFVIdHpNlblB6EWFX5w7Vq0uV5HXR4= Subject key identifier: B0:B5:55:A8:61:D9:58:58:5F:36:CF:CF:C6:03:10:D0:6B:E2:D2:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066E6DDE0CA43797CB6E280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f123c0-2604-3ef5-b61a-7bacb9cb05d0.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 24.253.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:e6:dd:e0:ca:43:79:7c:b6:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=292d9cd0-58ef-4bd4-8d08-cefa991cf933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:91:ba:ca:94:9c:b3:90:bd:77:01:22:1a:97: f5:9e:7a:37:da:b2:b7:2f:47:24:19:51:30:52:96: 98:4e:05:eb:f3:70:7a:13:ef:3b:63:fd:a4:95:2e: 50:41:76:b8:84:8d:b3:78:29:b2:bb:2b:9f:81:92: 12:ca:96:57:99:44:1e:b9:6f:fb:19:2a:c9:ff:06: 55:1a:4a:d5:f4:e0:0e:d8:52:c6:57:0b:0f:f3:33: a4:23:38:62:06:e7:97:1a:d7:43:2c:94:09:e5:17: 2a:86:6e:4d:c0:22:a4:c9:64:44:71:8a:91:8b:e1: e7:46:92:42:24:25:1c:db:da:9a:32:75:16:72:5d: 63:fc:04:2f:eb:86:f6:a7:fc:2c:1d:9f:4f:d9:61: 9d:3f:f0:ea:41:35:fa:0e:8d:d0:6f:d7:94:14:be: 1e:96:6f:b8:91:0d:f0:81:af:0e:18:34:73:14:02: 8b:c0:0d:d0:b4:19:f3:4b:02:55:b3:6b:79:bd:5f: 73:bf:1b:41:c6:05:a2:26:be:f3:a8:f5:c0:12:b4: 7f:08:ae:79:e5:67:fa:b9:45:35:af:1f:90:62:25: 43:cd:09:fb:f5:8c:55:b3:89:bb:db:ce:6a:a5:65: 62:52:fd:24:65:b0:bf:aa:5b:bf:4f:1e:9c:7b:ec: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B5:55:A8:61:D9:58:58:5F:36:CF:CF:C6:03:10:D0:6B:E2:D2:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f123c0-2604-3ef5-b61a-7bacb9cb05d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:d8:70:2f:37:58:b6:f5:55:fb:08:69:6f:34:0e:75:8b:5c: 09:2f:7c:ca:8b:06:76:1c:83:98:d5:c9:64:0f:27:bd:15:f9: ba:97:51:df:74:4c:c0:21:33:16:73:4c:70:64:cf:99:48:e3: a1:0a:45:64:46:60:8e:91:2b:45:6a:de:36:61:8b:88:8e:8b: 7a:e0:ea:05:e3:b1:87:a1:4c:f6:11:14:cf:15:54:36:b4:30: 92:93:d4:bf:05:fd:be:be:0b:1b:e5:6b:3d:7e:ff:74:8f:12: e4:7b:18:31:cb:72:af:88:5e:3c:69:eb:dc:6b:27:a5:f1:d5: 80:54:4a:50:7c:18:30:2d:12:86:ab:59:37:7c:bb:17:77:cc: 13:a9:9f:59:0e:66:40:24:77:fe:bf:a1:85:47:8e:af:5f:7c: b7:ee:1d:0d:0d:01:92:86:47:7a:57:f0:71:08:9c:ab:4f:f4: 82:42:ba:73:84:cb:0d:2b:dc:ae:0b:b7:8a:6a:36:a9:36:16: 4f:5f:e5:42:91:1e:03:0f:f6:fd:58:cc:c3:eb:26:4b:07:19: 40:35:b2:22:9f:94:a1:8e:a5:34:14:92:61:87:62:e6:e9:db: dd:b3:71:40:c3:63:46:b0:ad:c4:43:3e:30:0e:82:6a:d5:93: d8:0b:ad:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZubd4MpDeXy24oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MjkyZDljZDAtNThlZi00YmQ0LThkMDgtY2VmYTk5MWNmOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipG6ypScs5C9dwEiGpf1nno32rK3L0ckGVEw UpaYTgXr83B6E+87Y/2klS5QQXa4hI2zeCmyuyufgZISypZXmUQeuW/7GSrJ/wZV GkrV9OAO2FLGVwsP8zOkIzhiBueXGtdDLJQJ5Rcqhm5NwCKkyWREcYqRi+HnRpJC JCUc29qaMnUWcl1j/AQv64b2p/wsHZ9P2WGdP/DqQTX6Do3Qb9eUFL4elm+4kQ3w ga8OGDRzFAKLwA3QtBnzSwJVs2t5vV9zvxtBxgWiJr7zqPXAErR/CK555Wf6uUU1 rx+QYiVDzQn79YxVs4m7285qpWViUv0kZbC/qlu/Tx6ce+zZ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLC1Vahh2VhYXzbPz8YDENBr4tJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTNmMTIzYzAtMjYwNC0z ZWY1LWI2MWEtN2JhY2I5Y2IwNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP1tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvYcC83WLb1VfsIaW80DnWLXAkvfMqLBnYcg5jVyWQPJ70V+bqXUd90 TMAhMxZzTHBkz5lI46EKRWRGYI6RK0Vq3jZhi4iOi3rg6gXjsYehTPYRFM8VVDa0 MJKT1L8F/b6+Cxvlaz1+/3SPEuR7GDHLcq+IXjxp69xrJ6Xx1YBUSlB8GDAtEoar WTd8uxd3zBOpn1kOZkAkd/6/oYVHjq9ffLfuHQ0NAZKGR3pX8HEInKtP9IJCunOE yw0r3K4Lt4pqNqk2Fk9f5UKRHgMP9v1YzMPrJksHGUA1siKflKGOpTQUkmGHYubp 292zcUDDY0awrcRDPjAOgmrVk9gLrbE= -----END CERTIFICATE-----Generated at Thu Oct 16 04:47:27 2025 by rpki-client