$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7e1be4-331a-37ca-a234-211c999e1ca9.roa File: cd7e1be4-331a-37ca-a234-211c999e1ca9.roa (raw, json) Hash identifier: +ZufiaHxKfgRd+h8DpNcoIuhw1AONViBLqAJmza4GcU= Subject key identifier: 5F:2A:E3:40:52:D4:8D:7F:70:26:A0:A3:D8:85:05:B9:D3:2B:9A:BE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C372E14201FC4272C903580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7e1be4-331a-37ca-a234-211c999e1ca9.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.251.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:2e:14:20:1f:c4:27:2c:90:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=c907a31f-4f6e-4742-8615-e4e2f4da0c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:14:57:29:8e:52:1f:91:56:61:ad:dc:bf: de:8d:86:31:0e:b7:85:e5:3e:c0:4c:28:d1:81:a7: ba:1d:03:74:bb:93:c6:ec:94:d1:eb:7c:e4:54:78: ba:e7:23:87:63:b1:6b:ac:48:4e:90:34:08:ce:e2: 12:18:c4:0f:da:f1:69:36:4b:46:09:cb:c0:ed:51: 30:83:03:ee:8e:5c:90:71:35:c8:8e:03:52:b8:a7: ef:97:a0:39:62:5c:97:f1:7d:37:21:e4:fb:57:f2: ee:b5:56:1d:55:a7:26:95:4f:db:da:70:c0:78:ee: 16:3c:dd:72:c4:35:dd:d1:06:40:06:a0:9c:49:28: 22:61:e2:52:ba:ce:09:e4:41:8a:31:34:1d:44:00: fc:dd:09:60:87:5f:d2:5c:ba:74:c3:02:27:f2:ee: 9a:93:dd:8a:6b:5b:68:4f:c4:71:b9:4a:2e:4e:6e: 62:03:05:89:1a:86:77:92:c2:a7:1c:8b:88:f7:c7: 89:6e:96:e9:ff:96:12:9c:e1:5d:73:d9:aa:ba:57: 39:f4:3f:21:08:42:d6:2d:45:fe:2f:a7:4e:c0:c0: 17:90:ef:05:ba:ea:92:2a:49:0a:28:ce:12:e7:c7: 97:a2:fa:ce:9d:30:1b:3f:5b:a0:a8:a7:ab:85:1f: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2A:E3:40:52:D4:8D:7F:70:26:A0:A3:D8:85:05:B9:D3:2B:9A:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7e1be4-331a-37ca-a234-211c999e1ca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:f3:26:7b:0b:43:0e:69:5a:c3:0a:85:71:c9:26:db:fa:6b: 0e:83:a9:85:ec:33:07:21:89:09:8e:54:a3:8d:53:f5:b6:78: 51:3c:6d:6f:03:b8:dc:db:2b:16:4c:f8:52:24:af:7d:19:dd: ec:10:58:ba:73:72:88:78:f1:ec:5e:95:50:5d:da:20:7a:2d: d9:b4:44:a1:67:4c:2d:7e:d4:e2:40:ab:d2:fe:34:0e:fa:2f: dc:8f:b0:5e:d3:e0:23:ef:c5:00:2a:27:23:1e:3e:23:a5:03: de:b9:18:ed:ac:ff:fc:ee:97:d5:80:fe:8e:8d:7a:43:3a:9e: c2:36:27:5d:9a:20:b5:4c:49:56:6d:05:20:1e:d5:91:23:b4: 4e:4f:e4:cf:a0:24:4a:1e:25:ed:8a:40:c3:80:f1:86:73:3f: d9:66:79:c0:17:7e:d9:46:1a:97:75:e0:93:bd:8a:d8:a4:9c: d5:23:f4:82:e4:fd:47:dd:3b:32:94:3a:88:d2:34:dc:d3:3e: 3b:90:26:42:65:a7:34:c2:b3:c8:71:33:e1:a3:00:20:14:0b: 1e:fa:32:10:87:13:cf:eb:d1:5c:e5:24:0c:de:96:ce:d7:78: c7:26:85:cd:61:b0:76:9b:80:65:20:a3:74:c7:84:63:7e:c4: ca:13:31:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNy4UIB/EJyyQNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YzkwN2EzMWYtNGY2ZS00NzQyLTg2MTUtZTRlMmY0ZGEwYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb0UVymOUh+RVmGt3L/ejYYxDreF5T7ATCjR gae6HQN0u5PG7JTR63zkVHi65yOHY7FrrEhOkDQIzuISGMQP2vFpNktGCcvA7VEw gwPujlyQcTXIjgNSuKfvl6A5YlyX8X03IeT7V/LutVYdVacmlU/b2nDAeO4WPN1y xDXd0QZABqCcSSgiYeJSus4J5EGKMTQdRAD83Qlgh1/SXLp0wwIn8u6ak92Ka1to T8RxuUouTm5iAwWJGoZ3ksKnHIuI98eJbpbp/5YSnOFdc9mqulc59D8hCELWLUX+ L6dOwMAXkO8FuuqSKkkKKM4S58eXovrOnTAbP1ugqKerhR8qSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8q40BS1I1/cCago9iFBbnTK5q+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2Q3ZTFiZTQtMzMxYS0z N2NhLWEyMzQtMjExYzk5OWUxY2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPshMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/zJnsLQw5pWsMKhXHJJtv6aw6DqYXsMwchiQmOVKONU/W2eFE8bW8D uNzbKxZM+FIkr30Z3ewQWLpzcoh48exelVBd2iB6Ldm0RKFnTC1+1OJAq9L+NA76 L9yPsF7T4CPvxQAqJyMePiOlA965GO2s//zul9WA/o6NekM6nsI2J12aILVMSVZt BSAe1ZEjtE5P5M+gJEoeJe2KQMOA8YZzP9lmecAXftlGGpd14JO9itiknNUj9ILk /UfdOzKUOojSNNzTPjuQJkJlpzTCs8hxM+GjACAUCx76MhCHE8/r0VzlJAzels7X eMcmhc1hsHabgGUgo3THhGN+xMoTMbA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:06 2025 by rpki-client