$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce76bbe1-a8bc-3cd4-9f8e-411e132e3c86.roa File: ce76bbe1-a8bc-3cd4-9f8e-411e132e3c86.roa (raw, json) Hash identifier: hA6qYqeZAxRMLriwfxfvOIQgT1NPt2IqC6TuEHFkvGI= Subject key identifier: 8D:81:5E:69:9F:FA:78:18:91:9D:F4:A2:B1:E8:7A:98:50:DA:23:A2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373269D20AF2594E853500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce76bbe1-a8bc-3cd4-9f8e-411e132e3c86.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.251.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:32:69:d2:0a:f2:59:4e:85:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=2295d5c6-5003-4a6f-ad08-e06a393636cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:32:b0:6e:bd:06:af:86:cd:d6:bc:21:aa:99: 82:0e:3b:c3:bb:96:96:80:c4:44:09:31:a6:26:a5: 5d:4a:9c:64:fc:da:61:47:49:48:30:29:7a:bd:6a: 20:a1:42:12:ea:71:23:02:9c:97:c7:66:fc:9c:89: e7:cf:02:98:03:cc:57:18:be:6d:a7:d9:ea:64:17: af:a8:2b:92:fa:bb:d1:d4:21:3d:85:12:f3:92:e7: a1:28:96:3e:eb:e1:08:d8:56:51:ff:a1:b2:0e:20: 3b:91:e2:a4:1d:b2:9e:7e:ba:1d:8b:7d:32:2b:85: b6:f4:f9:4e:f2:cf:02:1f:3a:45:c2:b7:c8:a5:c4: 2a:b3:c2:5f:ab:ef:b9:04:12:4b:22:d8:eb:29:b0: 01:0b:61:4d:3d:55:ca:9f:ef:f0:cd:51:5c:b8:5d: 25:c5:9e:a0:48:8f:4b:e1:d1:34:b9:29:7b:0d:5d: af:aa:43:96:cd:b6:bc:d4:c7:9f:af:32:62:db:12: 1c:5f:10:8d:0a:8b:37:27:18:a9:39:95:e2:eb:4a: 67:a6:07:f2:8e:9a:30:38:6d:52:76:e2:f6:d7:c8: 47:27:1b:de:1b:90:e0:d8:a1:19:97:47:10:08:3f: 62:f1:61:84:a3:e6:bd:7c:d8:f6:02:a2:27:5f:6a: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:81:5E:69:9F:FA:78:18:91:9D:F4:A2:B1:E8:7A:98:50:DA:23:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce76bbe1-a8bc-3cd4-9f8e-411e132e3c86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:45:db:65:65:43:47:c7:49:35:c8:07:3b:85:2b:ee:e1:dd: 97:fc:de:bb:4a:53:69:c6:4f:d0:c7:28:62:49:b0:54:a7:97: e2:4a:11:03:b1:d6:da:34:16:51:47:c5:0b:3f:df:7a:35:f0: eb:8e:ad:7b:e8:00:2b:7e:55:72:8e:20:6c:d3:2e:31:1b:fe: e5:c3:99:ae:5f:8e:95:7a:a8:2e:51:12:85:ab:3d:d9:98:4e: 5f:3c:e2:cd:20:d5:5a:ec:31:5f:10:b3:88:67:ba:cd:7d:98: 8e:aa:75:f5:10:10:68:3c:ae:dd:8a:30:83:b8:5a:cc:7a:f2: 3b:2b:e5:62:23:05:a5:be:6c:0c:88:18:3e:a1:97:eb:ec:3c: 09:45:23:43:ed:d2:e7:f5:f1:ff:d3:cb:6a:40:6d:89:3a:f9: 34:08:fc:c2:08:4d:42:e5:90:9f:07:8c:59:90:a8:49:18:46: 4f:0b:f8:95:f0:41:9c:2b:2d:ce:d4:89:54:63:d5:57:00:b9: 37:16:80:48:27:b9:63:ee:38:92:3c:20:55:cd:e2:de:ed:60: 4c:da:16:e0:38:b9:52:9f:13:cb:9e:46:89:33:f8:db:e3:bd: 94:bf:36:fe:0e:d6:fc:ff:e4:68:de:b6:5f:ce:96:5a:09:bf: e7:6a:d9:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzJp0gryWU6FNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjI5NWQ1YzYtNTAwMy00YTZmLWFkMDgtZTA2YTM5MzYzNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjKwbr0Gr4bN1rwhqpmCDjvDu5aWgMRECTGm JqVdSpxk/NphR0lIMCl6vWogoUIS6nEjApyXx2b8nInnzwKYA8xXGL5tp9nqZBev qCuS+rvR1CE9hRLzkuehKJY+6+EI2FZR/6GyDiA7keKkHbKefrodi30yK4W29PlO 8s8CHzpFwrfIpcQqs8Jfq++5BBJLItjrKbABC2FNPVXKn+/wzVFcuF0lxZ6gSI9L 4dE0uSl7DV2vqkOWzba81MefrzJi2xIcXxCNCos3JxipOZXi60pnpgfyjpowOG1S duL218hHJxveG5Dg2KEZl0cQCD9i8WGEo+a9fNj2AqInX2pBPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2BXmmf+ngYkZ30orHoephQ2iOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2U3NmJiZTEtYThiYy0z Y2Q0LTlmOGUtNDExZTEzMmUzYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPuGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRF22VlQ0fHSTXIBzuFK+7h3Zf83rtKU2nGT9DHKGJJsFSnl+JKEQOx 1to0FlFHxQs/33o18OuOrXvoACt+VXKOIGzTLjEb/uXDma5fjpV6qC5REoWrPdmY Tl884s0g1VrsMV8Qs4hnus19mI6qdfUQEGg8rt2KMIO4Wsx68jsr5WIjBaW+bAyI GD6hl+vsPAlFI0Pt0uf18f/Ty2pAbYk6+TQI/MIITULlkJ8HjFmQqEkYRk8L+JXw QZwrLc7UiVRj1VcAuTcWgEgnuWPuOJI8IFXN4t7tYEzaFuA4uVKfE8ueRokz+Nvj vZS/Nv4O1vz/5Gjetl/OlloJv+dq2fY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:34:56 2025 by rpki-client