$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d748515e-1438-32ec-9f6a-ef0408b88917.roa File: d748515e-1438-32ec-9f6a-ef0408b88917.roa (raw, json) Hash identifier: VVJf+JB1gX17Pz+i4K3C38Sw/UOe7mPggzuxIQ/yK4w= Subject key identifier: C8:74:A7:EE:E8:06:FF:A4:D7:16:FA:53:43:E4:B4:7D:53:6C:83:20 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27D8BFE9F786C4D251900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d748515e-1438-32ec-9f6a-ef0408b88917.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 174.65.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7d:8b:fe:9f:78:6c:4d:25:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=13dff481-e398-4b28-bc75-18a8f77e9fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:da:71:a2:6f:df:55:0e:64:79:cc:f6:a3: 13:c0:85:b9:9e:4b:f7:90:3c:9a:a5:3c:80:de:1f: f9:d2:69:3e:10:5c:44:88:b3:08:d4:76:2a:a2:31: a1:f3:e5:29:43:83:c4:06:c3:1e:fa:9f:cb:54:e4: 51:54:2d:44:35:46:0d:97:de:f8:87:6a:f2:dd:06: 0c:75:dc:f6:83:ec:17:46:1b:fd:e1:f6:1b:8e:a6: dd:72:d8:b0:76:22:49:4a:6f:2c:05:b6:64:01:4d: 1e:29:52:9c:49:5f:91:ed:e9:5c:9a:f9:cb:bf:e8: 8b:35:01:e7:b6:8a:d7:03:89:1b:3a:34:8f:1c:70: 8c:bd:b1:61:0b:f9:e7:79:e7:28:07:94:b0:24:01: 50:d7:b0:e5:c4:d2:d1:b2:60:3e:2e:41:f8:b3:36: 81:3f:08:0c:d5:d3:52:b9:28:0a:08:8e:e0:ee:f0: 28:ec:6c:f9:0e:33:4a:c6:46:8f:20:6d:8f:0c:09: d8:17:e4:f9:2c:4a:5c:45:c8:83:c9:d3:fc:74:7f: 54:57:5d:54:b0:85:e7:b9:03:24:48:39:8e:8f:aa: c5:6b:d8:d2:a8:be:6a:3e:68:04:3c:1f:a3:63:80: ac:07:12:d9:9d:dd:5b:41:7e:48:59:15:43:e0:e9: ca:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:74:A7:EE:E8:06:FF:A4:D7:16:FA:53:43:E4:B4:7D:53:6C:83:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d748515e-1438-32ec-9f6a-ef0408b88917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:34:19:1d:ac:d1:51:be:27:e3:fd:83:19:e4:f3:83:3e:39: 2e:9c:9b:b4:ef:93:bf:21:84:08:1d:a0:4e:e4:7d:7a:dd:3a: e8:66:19:1c:61:a3:e9:96:23:e4:a7:43:30:c7:7c:5f:12:b4: 1b:44:fb:8d:9e:e6:c9:16:19:0d:dd:3c:2e:5c:b9:c7:c4:e5: 1e:1d:f2:81:15:c3:34:95:25:41:8d:72:f9:5a:d1:04:c1:c6: d6:3e:1d:b2:60:47:13:67:17:78:37:bd:97:e0:e5:99:7d:43: 55:ea:3b:aa:68:11:74:6b:7a:3f:15:b9:51:54:80:ee:75:14: 84:9c:68:8e:dc:16:5a:46:bf:8b:a3:07:e0:b1:a9:c8:e5:07: 52:f2:ba:45:53:8d:1c:e1:08:f0:73:86:84:5b:2e:3f:b3:d0: 11:b5:04:ac:ed:69:06:0d:97:49:cf:17:4c:d8:00:c4:9b:92: 1c:50:f0:ba:10:65:20:5a:85:a0:e9:72:5f:83:63:b4:4a:7b: 84:2f:7f:ea:c5:ea:c9:1b:15:43:22:f7:f6:4f:97:fa:38:b3: 8c:ca:a4:b8:7d:a8:f1:76:94:0d:d5:81:c0:00:b3:fa:e2:33: f2:73:bb:6f:80:c3:9c:27:d5:38:89:ae:9c:38:eb:37:0a:c4: 97:fb:34:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28n2L/p94bE0lGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTNkZmY0ODEtZTM5OC00YjI4LWJjNzUtMThhOGY3N2U5ZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZjacaJv31UOZHnM9qMTwIW5nkv3kDyapTyA 3h/50mk+EFxEiLMI1HYqojGh8+UpQ4PEBsMe+p/LVORRVC1ENUYNl974h2ry3QYM ddz2g+wXRhv94fYbjqbdctiwdiJJSm8sBbZkAU0eKVKcSV+R7elcmvnLv+iLNQHn torXA4kbOjSPHHCMvbFhC/nneecoB5SwJAFQ17DlxNLRsmA+LkH4szaBPwgM1dNS uSgKCI7g7vAo7Gz5DjNKxkaPIG2PDAnYF+T5LEpcRciDydP8dH9UV11UsIXnuQMk SDmOj6rFa9jSqL5qPmgEPB+jY4CsBxLZnd1bQX5IWRVD4OnKLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMh0p+7oBv+k1xb6U0PktH1TbIMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDc0ODUxNWUtMTQzOC0z MmVjLTlmNmEtZWYwNDA4Yjg4OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo0GR2s0VG+J+P9gxnk84M+OS6cm7Tvk78hhAgdoE7kfXrdOuhmGRxh o+mWI+SnQzDHfF8StBtE+42e5skWGQ3dPC5cucfE5R4d8oEVwzSVJUGNcvla0QTB xtY+HbJgRxNnF3g3vZfg5Zl9Q1XqO6poEXRrej8VuVFUgO51FIScaI7cFlpGv4uj B+CxqcjlB1LyukVTjRzhCPBzhoRbLj+z0BG1BKztaQYNl0nPF0zYAMSbkhxQ8LoQ ZSBahaDpcl+DY7RKe4Qvf+rF6skbFUMi9/ZPl/o4s4zKpLh9qPF2lA3VgcAAs/ri M/Jzu2+Aw5wn1TiJrpw46zcKxJf7NPA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:25 2025 by rpki-client