$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a74da21e-4c61-3cb5-856f-64fad4009583.roa File: a74da21e-4c61-3cb5-856f-64fad4009583.roa (raw, json) Hash identifier: 3tqqsWBG5uZ60N7n1fnvts/qbx9PQhhT8qXa4BgmoxA= Subject key identifier: 94:B8:1A:5A:AE:7B:2A:37:3E:DA:F8:C0:BE:EE:E7:F4:9C:DC:56:37 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3736F04268B9C36CA439D0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a74da21e-4c61-3cb5-856f-64fad4009583.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.255.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:36:f0:42:68:b9:c3:6c:a4:39:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=8fec7d87-952c-4a8c-b672-4a8bf41034f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:95:4c:c1:a7:3d:26:0b:24:8a:b0:84:19: 42:6f:e6:b5:e7:fe:1e:53:4d:6b:1b:fc:69:f8:07: 3a:2f:70:3e:36:2c:d9:61:76:48:ba:e4:7d:bd:88: 69:c7:2a:77:b4:88:8d:e9:04:ea:00:ed:52:a9:30: 23:a1:4a:49:bd:69:54:c9:6e:d4:45:8c:02:b4:c3: c5:12:88:4d:91:a6:cb:ff:42:d1:14:7a:18:9c:fc: 14:4a:92:8d:c6:6f:88:81:53:c1:49:c0:27:f8:bc: 4f:25:a0:a2:05:32:9f:d7:27:cf:c4:36:6f:e2:f8: 9c:00:86:4d:50:19:45:67:7a:95:85:9e:09:e2:97: ce:5f:32:b4:97:0e:84:9c:d9:3c:ee:20:ff:17:ce: a6:b8:3f:28:b8:ad:f3:af:e3:2b:90:fb:f7:1e:01: a5:04:c4:f5:7e:dd:ea:bb:b8:91:78:f6:e4:16:77: 0c:47:d3:79:b5:f8:73:7f:75:fd:9c:a7:26:b0:f6: 91:7d:97:4d:8b:0e:27:e6:48:5e:6b:17:e6:16:a5: b7:6d:dd:b2:b8:ff:6a:05:2f:fa:4c:ee:5a:b9:86: d1:66:02:08:0b:40:db:a4:e8:ea:34:00:9d:7d:81: c6:3e:ae:8d:60:41:a5:19:62:cf:0e:f4:f4:49:fc: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B8:1A:5A:AE:7B:2A:37:3E:DA:F8:C0:BE:EE:E7:F4:9C:DC:56:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a74da21e-4c61-3cb5-856f-64fad4009583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.255.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:14:80:a9:b6:67:27:36:36:fc:5c:31:cf:98:5d:ef:cf:83: 30:61:5f:41:f8:c7:49:e7:06:75:93:76:5c:a3:ba:86:63:ea: 15:cb:88:9b:2c:ed:9c:21:2b:98:6b:e7:cd:5b:13:1b:b8:60: f4:bd:c7:79:d9:36:58:41:c2:eb:15:8e:6b:0f:4d:b9:d3:9f: 7a:6d:b9:d8:cd:b7:3f:ec:1c:70:d2:42:b0:58:60:c8:05:60: 6e:4f:2b:9c:87:02:45:4a:e7:39:78:b8:23:50:cc:5e:c2:ab: 47:50:d5:1a:1b:ac:d0:85:41:0c:08:1e:55:52:ff:b7:e1:8b: f3:d5:5d:46:89:e1:a2:91:6a:18:d6:c7:8d:37:3b:37:33:aa: 75:0c:19:56:81:6c:40:22:50:0d:7a:89:24:97:7b:a1:80:c8: 48:56:fd:2a:4c:f2:33:96:72:1e:fc:9d:49:c0:82:ce:ae:b7: d5:ae:ff:a5:05:be:a1:f2:4a:9e:ae:2c:5d:ca:24:8a:2f:07: 22:b9:e8:93:c5:3f:ba:d3:44:be:1a:8f:be:b6:60:09:4b:24: b9:f7:d6:66:b1:d4:61:f9:04:22:4c:bf:ff:07:e1:11:b8:53: 3e:a9:80:5f:38:4a:7e:00:f2:2d:35:a8:14:60:7a:4d:24:48: 04:26:d2:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzbwQmi5w2ykOdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk OGZlYzdkODctOTUyYy00YThjLWI2NzItNGE4YmY0MTAzNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw+VTMGnPSYLJIqwhBlCb+a15/4eU01rG/xp +Ac6L3A+NizZYXZIuuR9vYhpxyp3tIiN6QTqAO1SqTAjoUpJvWlUyW7URYwCtMPF EohNkabL/0LRFHoYnPwUSpKNxm+IgVPBScAn+LxPJaCiBTKf1yfPxDZv4vicAIZN UBlFZ3qVhZ4J4pfOXzK0lw6EnNk87iD/F86muD8ouK3zr+MrkPv3HgGlBMT1ft3q u7iRePbkFncMR9N5tfhzf3X9nKcmsPaRfZdNiw4n5kheaxfmFqW3bd2yuP9qBS/6 TO5auYbRZgIIC0DbpOjqNACdfYHGPq6NYEGlGWLPDvT0SfwodwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS4Glqueyo3Ptr4wL7u5/Sc3FY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTc0ZGEyMWUtNGM2MS0z Y2I1LTg1NmYtNjRmYWQ0MDA5NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAUgKm2Zyc2NvxcMc+YXe/PgzBhX0H4x0nnBnWTdlyjuoZj6hXLiJss 7ZwhK5hr581bExu4YPS9x3nZNlhBwusVjmsPTbnTn3ptudjNtz/sHHDSQrBYYMgF YG5PK5yHAkVK5zl4uCNQzF7Cq0dQ1RobrNCFQQwIHlVS/7fhi/PVXUaJ4aKRahjW x403OzczqnUMGVaBbEAiUA16iSSXe6GAyEhW/SpM8jOWch78nUnAgs6ut9Wu/6UF vqHySp6uLF3KJIovByK56JPFP7rTRL4aj762YAlLJLn31max1GH5BCJMv/8H4RG4 Uz6pgF84Sn4A8i01qBRgek0kSAQm0ps= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:23 2025 by rpki-client