$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb2c2433-90bc-392a-aa70-7a0e83b584c4.roa File: bb2c2433-90bc-392a-aa70-7a0e83b584c4.roa (raw, json) Hash identifier: qMtv8yq9NFpiYtHl43ZS7Vgw187flWetsps2tLftPtI= Subject key identifier: 2B:A5:BA:38:6E:38:DE:24:C5:A0:0B:C6:0D:0D:DD:4F:DA:0B:78:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3737033E1262EC486FE920 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb2c2433-90bc-392a-aa70-7a0e83b584c4.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.255.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:37:03:3e:12:62:ec:48:6f:e9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=c2af4a3c-a476-49d3-87f0-2c2d448de3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ed:50:18:02:30:75:8b:f8:60:5e:a3:64:1f: f2:b1:26:ba:5e:3a:e7:70:60:8b:f3:80:9d:82:f6: b9:2d:e3:b5:0f:ee:a5:e5:dd:10:52:15:b6:f3:2b: 4f:38:0c:e8:9c:16:ed:22:46:13:ae:a4:a9:d8:f2: 73:5e:96:9a:9d:53:1e:09:65:b5:0b:9c:51:94:cb: 39:18:91:3a:17:bf:44:a8:b6:fd:0d:5a:00:50:47: 52:e1:ca:26:e5:5d:4a:19:a3:10:80:8c:27:a0:69: c9:d9:05:9e:cd:5e:c2:c0:ff:44:9b:76:f4:76:c3: 38:5b:db:eb:bd:1d:f7:79:7a:32:78:1d:50:1a:b9: 6a:0f:44:87:fc:7c:f8:38:43:5e:ab:85:f8:84:13: 20:7d:77:3d:79:92:f7:28:4b:21:00:61:55:18:c0: c8:1a:8e:5b:1a:45:2f:cf:db:3d:b1:04:b9:43:ba: 7a:1a:ad:15:f2:92:c2:79:aa:7b:08:41:f0:01:8a: 64:86:c6:ae:cc:6e:1c:4f:84:56:39:d0:41:03:71: 19:e2:3b:31:63:fc:57:7b:aa:39:05:94:f4:3d:53: be:53:70:26:64:d4:d6:09:0f:c6:ee:2e:74:37:4d: 32:80:8b:c5:14:97:3e:3c:a9:a6:67:d2:88:48:aa: 85:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A5:BA:38:6E:38:DE:24:C5:A0:0B:C6:0D:0D:DD:4F:DA:0B:78:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb2c2433-90bc-392a-aa70-7a0e83b584c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.255.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:85:b9:14:33:c3:e0:f5:92:dc:c2:8c:8d:55:14:a9:8e:7b: 88:aa:98:0f:19:c0:29:9b:d5:77:5d:f5:02:0f:88:19:6d:54: a7:c3:14:dc:db:65:ce:59:4b:ad:74:22:c8:f4:b7:ae:89:25: f9:89:55:d7:c1:a3:f4:bc:9e:1e:18:4e:3b:4f:ec:be:ed:d4: b5:9b:c0:c2:d6:8d:68:93:ca:9a:c1:81:d6:7e:15:ce:d0:9b: b9:0d:25:48:28:16:5e:24:15:c5:5d:13:1e:0a:13:3b:74:39: d1:9d:8d:3b:ce:38:91:54:76:17:ed:24:a8:5a:9c:fc:5d:13: e9:2d:0a:d5:d6:55:0e:d0:91:a2:04:05:38:4a:74:3f:d5:f2: ad:c1:8c:22:34:e3:91:d7:f5:88:b9:2b:6c:d5:eb:c3:f3:63: 6d:64:35:04:cc:3f:62:c9:9e:5d:22:bc:41:ec:1e:1f:9c:a5: 91:f0:d1:ab:29:49:c6:ab:dc:3c:1e:5b:82:91:9c:66:01:08: 84:29:ca:7a:8a:74:65:76:b0:d3:66:70:54:ab:4f:c1:4f:de: ca:07:5a:cc:ab:d4:fe:86:60:81:6e:c1:f1:fc:49:ce:d1:7b: e0:96:2b:1e:fc:74:31:a9:a9:e6:26:5a:13:28:82:27:85:4d: 1a:1e:78:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzcDPhJi7Ehv6SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YzJhZjRhM2MtYTQ3Ni00OWQzLTg3ZjAtMmMyZDQ0OGRlM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje1QGAIwdYv4YF6jZB/ysSa6XjrncGCL84Cd gva5LeO1D+6l5d0QUhW28ytPOAzonBbtIkYTrqSp2PJzXpaanVMeCWW1C5xRlMs5 GJE6F79EqLb9DVoAUEdS4com5V1KGaMQgIwnoGnJ2QWezV7CwP9Em3b0dsM4W9vr vR33eXoyeB1QGrlqD0SH/Hz4OENeq4X4hBMgfXc9eZL3KEshAGFVGMDIGo5bGkUv z9s9sQS5Q7p6Gq0V8pLCeap7CEHwAYpkhsauzG4cT4RWOdBBA3EZ4jsxY/xXe6o5 BZT0PVO+U3AmZNTWCQ/G7i50N00ygIvFFJc+PKmmZ9KISKqFoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCulujhuON4kxaALxg0N3U/aC3jYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmIyYzI0MzMtOTBiYy0z OTJhLWFhNzAtN2EwZTgzYjU4NGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqFuRQzw+D1ktzCjI1VFKmOe4iqmA8ZwCmb1Xdd9QIPiBltVKfDFNzb Zc5ZS610Isj0t66JJfmJVdfBo/S8nh4YTjtP7L7t1LWbwMLWjWiTyprBgdZ+Fc7Q m7kNJUgoFl4kFcVdEx4KEzt0OdGdjTvOOJFUdhftJKhanPxdE+ktCtXWVQ7QkaIE BThKdD/V8q3BjCI045HX9Yi5K2zV68PzY21kNQTMP2LJnl0ivEHsHh+cpZHw0asp Scar3DweW4KRnGYBCIQpynqKdGV2sNNmcFSrT8FP3soHWsyr1P6GYIFuwfH8Sc7R e+CWKx78dDGpqeYmWhMogieFTRoeeLw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:41:40 2025 by rpki-client