$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba44346f-559a-3e7a-869b-02dd5d22b75f.roa File: ba44346f-559a-3e7a-869b-02dd5d22b75f.roa (raw, json) Hash identifier: zZyUzDhuiTocRYYQwHrF6hpPMdEtbUWPSVcucmwDcH8= Subject key identifier: 05:75:AC:C8:DD:52:99:1E:68:48:56:6D:DA:45:60:DF:A8:28:EA:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C37306644E74C58690269C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba44346f-559a-3e7a-869b-02dd5d22b75f.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.251.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:30:66:44:e7:4c:58:69:02:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=363314a8-8430-4538-a630-2b476027c0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bc:32:ea:e8:d3:de:d8:96:05:cc:86:ad:8d: a9:4b:ce:6f:e8:f7:e0:a1:33:60:83:85:ca:75:0f: 8d:71:5d:eb:af:58:bd:c9:3e:3f:bf:65:16:13:ca: 65:d7:fe:60:11:5b:3f:ce:2d:e4:2a:19:33:f7:64: f1:81:5b:a4:0f:73:09:72:9d:7a:53:a6:86:74:1e: 4f:ea:5c:22:34:ed:7c:11:84:d7:82:c6:12:95:b8: 57:24:f2:41:14:87:95:64:80:1d:ab:aa:47:a2:b9: b6:ee:d8:d9:c5:bf:77:f4:49:89:5b:c1:bc:ea:03: 5f:2a:9a:16:3f:c2:27:6d:24:fc:a9:3e:c8:ed:7f: 32:4d:a3:57:ac:0d:7e:17:13:4c:c3:25:c5:fe:06: c7:cc:51:2e:93:65:40:10:9c:8f:65:17:d5:71:33: af:ac:52:15:97:d5:22:7b:b8:1b:bf:8f:62:19:4a: f7:5a:4c:81:af:3b:82:fa:03:6b:d9:e4:32:eb:02: 36:ca:ab:c9:31:cb:59:f0:49:dc:cb:79:ed:63:d6: 2a:92:3a:d1:ac:09:ec:f2:1c:44:0b:2f:11:18:47: 12:95:78:0c:e6:cc:d0:56:7a:53:9d:d4:be:c9:ec: f6:2b:57:f9:ed:5e:23:c8:84:c8:59:69:4e:1d:d8: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:75:AC:C8:DD:52:99:1E:68:48:56:6D:DA:45:60:DF:A8:28:EA:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba44346f-559a-3e7a-869b-02dd5d22b75f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:48:47:56:bc:f0:1d:4a:fc:db:53:01:f8:18:16:f9:39:fe: 76:99:3c:fe:4a:e6:91:92:29:a3:ae:bb:79:02:1a:e3:e3:ea: f5:3b:5c:73:b5:ef:f7:d1:9c:ec:96:d1:5c:d5:40:d6:88:b5: 29:58:89:39:c8:a8:62:5d:0d:94:a8:1e:31:b2:38:cd:fb:74: 5f:d8:70:b6:12:2f:a5:2d:15:42:96:da:d5:db:d7:21:a1:4f: 5e:32:7f:b6:b8:ba:7f:18:29:54:5d:aa:f6:cd:65:9b:c9:ab: 27:1e:44:7e:81:99:80:63:9a:af:b5:bb:74:d6:97:a1:9b:8f: 0f:08:6a:f8:62:27:be:d9:61:88:33:ce:ee:49:01:a8:7a:a1: c6:fc:90:f5:53:9b:a3:d1:4b:27:3b:70:0d:2c:d7:b0:67:79: a9:14:a6:4f:07:5a:58:63:ae:a5:72:de:67:86:0f:59:83:d9: 93:6a:0c:97:2f:9f:aa:1d:8b:94:a7:59:70:dd:49:e7:a1:92: 23:49:ac:05:95:00:0c:47:06:7a:51:a3:de:e2:ff:79:38:27: d3:c8:54:0b:52:1d:b9:d3:45:68:4e:5a:b4:a3:0b:2f:48:dd: 36:ac:79:79:87:22:b7:b0:48:04:35:95:f3:65:e0:38:21:71: 41:68:a3:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzBmROdMWGkCacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzYzMzE0YTgtODQzMC00NTM4LWE2MzAtMmI0NzYwMjdjMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07wy6ujT3tiWBcyGrY2pS85v6PfgoTNgg4XK dQ+NcV3rr1i9yT4/v2UWE8pl1/5gEVs/zi3kKhkz92TxgVukD3MJcp16U6aGdB5P 6lwiNO18EYTXgsYSlbhXJPJBFIeVZIAdq6pHorm27tjZxb939EmJW8G86gNfKpoW P8InbST8qT7I7X8yTaNXrA1+FxNMwyXF/gbHzFEuk2VAEJyPZRfVcTOvrFIVl9Ui e7gbv49iGUr3WkyBrzuC+gNr2eQy6wI2yqvJMctZ8Ency3ntY9YqkjrRrAns8hxE Cy8RGEcSlXgM5szQVnpTndS+yez2K1f57V4jyITIWWlOHdg5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV1rMjdUpkeaEhWbdpFYN+oKOroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmE0NDM0NmYtNTU5YS0z ZTdhLTg2OWItMDJkZDVkMjJiNzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpIR1a88B1K/NtTAfgYFvk5/naZPP5K5pGSKaOuu3kCGuPj6vU7XHO1 7/fRnOyW0VzVQNaItSlYiTnIqGJdDZSoHjGyOM37dF/YcLYSL6UtFUKW2tXb1yGh T14yf7a4un8YKVRdqvbNZZvJqyceRH6BmYBjmq+1u3TWl6Gbjw8IavhiJ77ZYYgz zu5JAah6ocb8kPVTm6PRSyc7cA0s17BneakUpk8HWlhjrqVy3meGD1mD2ZNqDJcv n6odi5SnWXDdSeehkiNJrAWVAAxHBnpRo97i/3k4J9PIVAtSHbnTRWhOWrSjCy9I 3TaseXmHIrewSAQ1lfNl4DghcUFoo+4= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:13 2025 by rpki-client