$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a4303d-b125-3ef6-b3bf-fab14a8d019c.roa File: e9a4303d-b125-3ef6-b3bf-fab14a8d019c.roa (raw, json) Hash identifier: YW95+TEdpqBYUjGK3Knf2a1BVAaEmEHn9UJ/7/yjFI4= Subject key identifier: A5:6C:C6:2C:C6:01:3B:41:AC:BA:25:8F:04:91:5D:19:7E:7F:D0:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F290FA498F919EBDD007C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a4303d-b125-3ef6-b3bf-fab14a8d019c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 24.253.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:90:fa:49:8f:91:9e:bd:d0:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=4f04d9a7-cc79-4979-b713-83b5e007707a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e7:08:7f:72:d1:24:6a:f2:19:cb:9f:45:63: bf:75:7f:b6:28:ff:d5:aa:0d:f4:00:e6:90:81:0c: dc:01:69:4a:53:ea:6d:b0:2a:07:9e:d5:b8:7b:b2: aa:c1:87:69:50:f0:1e:26:33:d0:73:f4:62:f0:21: 19:d5:cf:d6:ea:40:ed:b9:5b:60:fe:89:fa:c7:0a: f6:ca:7a:4a:b6:c5:8a:65:fb:71:e2:e1:81:cd:85: 8f:e8:af:e4:32:df:c6:09:c0:d6:20:1a:87:c1:79: ca:8e:00:ec:7d:4c:e0:cc:c4:a1:88:81:0b:37:46: 04:81:35:b2:12:d2:7c:29:c9:2a:bb:ab:bd:33:ee: c2:ce:40:11:50:33:ea:03:cc:74:8e:ff:a0:27:cd: 6c:8c:72:d5:49:18:34:33:5f:b4:d5:07:0f:4a:77: b0:03:a0:22:dd:33:d4:5a:32:ab:bd:ce:cb:46:b5: 2f:6b:bf:4a:28:3b:ea:1e:98:33:22:dc:43:02:27: f3:36:6d:e1:6b:3e:58:29:03:c9:17:70:e9:d5:f1: 89:c7:61:0a:db:b4:23:fd:47:f2:30:3e:da:4f:8d: be:91:07:a7:cc:f3:f5:b6:98:6a:66:09:81:93:29: aa:21:0c:1a:65:bb:5e:51:4d:8d:0d:5a:78:62:a5: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6C:C6:2C:C6:01:3B:41:AC:BA:25:8F:04:91:5D:19:7E:7F:D0:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a4303d-b125-3ef6-b3bf-fab14a8d019c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f0:7a:c3:a1:80:16:b0:11:e1:fe:bc:8a:7a:ae:7e:66:da: bd:4d:2d:01:b2:95:43:93:92:b2:1c:51:37:4a:e2:59:d2:1e: 1c:10:0a:a5:cb:55:63:1c:ba:9f:50:f8:de:51:8d:06:e0:7e: 2d:51:05:e2:16:b5:99:4d:3e:c8:02:30:41:72:fd:c9:ba:a6: b8:dc:3e:fe:ac:ab:17:a3:fc:c7:e5:44:0d:2a:56:d5:4c:90: 7e:6a:8b:fc:c1:4f:02:5b:47:59:a1:0e:73:58:84:4c:87:91: 96:ae:d1:60:82:43:b4:92:ef:5d:4d:57:db:64:52:9c:00:89: 04:96:b5:cb:58:66:bc:09:ad:98:f5:17:50:0c:70:f5:ec:4f: 11:49:1f:9e:62:85:d2:c1:ec:3b:a1:f9:70:ae:1a:45:6c:f7: 32:c1:9b:0c:03:cd:d7:cb:cc:f1:00:dd:02:3e:87:73:2b:44: a6:55:a6:a9:d3:6a:1d:f0:8b:8b:43:0b:96:70:a3:1e:27:ff: d9:b8:ee:16:d5:28:b7:5a:be:65:1d:df:82:4d:99:12:57:ef: 88:f8:b1:ac:57:9c:67:03:05:84:4b:7c:ab:07:20:e1:50:c1: 8e:40:3b:f3:49:0b:a9:33:7d:97:b9:96:ed:f4:1c:fb:bc:73: ab:dd:e6:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pD6SY+Rnr3QB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NGYwNGQ5YTctY2M3OS00OTc5LWI3MTMtODNiNWUwMDc3MDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhecIf3LRJGryGcufRWO/dX+2KP/Vqg30AOaQ gQzcAWlKU+ptsCoHntW4e7KqwYdpUPAeJjPQc/Ri8CEZ1c/W6kDtuVtg/on6xwr2 ynpKtsWKZftx4uGBzYWP6K/kMt/GCcDWIBqHwXnKjgDsfUzgzMShiIELN0YEgTWy EtJ8Kckqu6u9M+7CzkARUDPqA8x0jv+gJ81sjHLVSRg0M1+01QcPSnewA6Ai3TPU WjKrvc7LRrUva79KKDvqHpgzItxDAifzNm3haz5YKQPJF3Dp1fGJx2EK27Qj/Ufy MD7aT42+kQenzPP1tphqZgmBkymqIQwaZbteUU2NDVp4YqUzqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVsxizGATtBrLoljwSRXRl+f9A2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTlhNDMwM2QtYjEyNS0z ZWY2LWIzYmYtZmFiMTRhOGQwMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP2cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzwesOhgBawEeH+vIp6rn5m2r1NLQGylUOTkrIcUTdK4lnSHhwQCqXL VWMcup9Q+N5RjQbgfi1RBeIWtZlNPsgCMEFy/cm6prjcPv6sqxej/MflRA0qVtVM kH5qi/zBTwJbR1mhDnNYhEyHkZau0WCCQ7SS711NV9tkUpwAiQSWtctYZrwJrZj1 F1AMcPXsTxFJH55ihdLB7Duh+XCuGkVs9zLBmwwDzdfLzPEA3QI+h3MrRKZVpqnT ah3wi4tDC5Zwox4n/9m47hbVKLdavmUd34JNmRJX74j4saxXnGcDBYRLfKsHIOFQ wY5AO/NJC6kzfZe5lu30HPu8c6vd5nY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:42 2025 by rpki-client