$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ea28cbf6-c273-39dd-a2cf-60859ef92897.roa File: ea28cbf6-c273-39dd-a2cf-60859ef92897.roa (raw, json) Hash identifier: wOB26oPh48BlMWelqZDNXStFesdHVxJXKHHfVM6TrB8= Subject key identifier: FE:B0:44:8B:EE:E8:55:E4:F3:C4:A2:3B:98:64:AA:93:74:E1:30:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066E2AFCD674E88686B3400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ea28cbf6-c273-39dd-a2cf-60859ef92897.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 24.253.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:e2:af:cd:67:4e:88:68:6b:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=99060635-e008-4d5f-8909-598cc920fd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:a9:b6:57:c9:da:4f:09:2f:bd:f5:1e:11: d2:29:6f:c1:88:30:7e:2f:ce:5d:1b:c7:cc:c1:43: 28:01:b8:cd:5a:00:ba:58:27:db:42:a8:16:85:ae: 1b:d6:c4:d9:57:b5:28:7f:da:e5:90:72:5b:a1:7f: 83:2f:a1:bd:2c:a7:0e:0e:2a:07:02:42:d5:8d:d4: 05:e4:c6:e1:b0:34:44:b1:3e:ef:c2:07:f0:1e:47: e1:a9:52:86:7c:58:f6:61:9e:b5:88:62:b0:30:71: 92:9a:bf:53:ea:71:63:66:85:f7:90:24:d6:4f:59: 4a:6e:6f:01:04:eb:99:24:a9:41:02:92:e5:1b:b6: 68:1f:9a:7f:b3:4c:ff:4f:b4:6b:c6:ed:ea:aa:2a: 74:93:61:ae:2c:12:0d:7a:35:53:55:f1:66:23:7d: 78:0f:2c:d1:20:f5:01:ed:8c:5a:d4:e2:2c:da:2d: f9:bc:60:83:32:d2:13:ac:4a:d9:8e:41:eb:e6:09: 8c:9b:55:fe:55:83:4d:e8:81:79:f2:5d:fc:e5:9d: d6:a3:66:1d:4d:06:98:2c:fe:12:ee:2e:95:9b:3d: 48:16:34:cb:4f:c5:d3:d5:fd:08:c1:68:b1:50:54: 70:b1:30:57:ac:82:c9:98:a2:79:2d:4c:5b:c2:7b: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B0:44:8B:EE:E8:55:E4:F3:C4:A2:3B:98:64:AA:93:74:E1:30:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ea28cbf6-c273-39dd-a2cf-60859ef92897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:01:cf:16:ff:b1:97:c9:ad:a5:22:e2:4b:40:cc:62:73:98: bc:60:be:79:fe:48:48:da:1a:76:89:f9:38:2b:17:3e:bd:df: 9a:13:e1:ff:f9:a7:11:44:18:ce:bb:bb:13:9b:f5:0a:8b:7b: 46:ff:e0:60:e9:e2:12:ba:56:98:25:17:ec:59:2d:48:5a:32: d9:c1:fc:65:81:6a:a6:00:e1:a5:96:be:0b:d9:ab:6d:8b:e2: f1:6d:03:49:10:2c:42:bb:1c:66:ea:3b:12:0e:d0:55:5c:43: 09:f7:bf:a3:b9:9b:e7:25:3d:3f:c0:71:04:55:e8:33:90:96: f7:a6:3d:a8:01:5d:ce:33:d5:74:ce:28:0e:4a:a4:fb:ab:48: b6:ef:df:e2:cb:81:83:e2:a6:ee:c3:e5:38:12:f5:1e:9c:55: 7f:a5:8e:90:38:08:ff:f6:89:eb:02:3b:16:4f:ab:7b:98:fc: ff:98:7e:86:ff:66:db:57:b9:9e:ad:be:dd:63:14:8f:90:1d: 71:af:8d:7e:a0:8e:0a:fb:aa:1f:8b:06:2f:3f:27:52:83:df: 8b:f1:31:69:76:7c:00:e3:24:c5:db:b0:d7:77:8e:2e:e4:39: 58:cd:76:d7:02:87:91:7c:cf:a0:1f:e0:2e:82:17:a6:11:bd: 97:74:64:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZuKvzWdOiGhrNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk OTkwNjA2MzUtZTAwOC00ZDVmLTg5MDktNTk4Y2M5MjBmZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrmptlfJ2k8JL731HhHSKW/BiDB+L85dG8fM wUMoAbjNWgC6WCfbQqgWha4b1sTZV7Uof9rlkHJboX+DL6G9LKcODioHAkLVjdQF 5MbhsDREsT7vwgfwHkfhqVKGfFj2YZ61iGKwMHGSmr9T6nFjZoX3kCTWT1lKbm8B BOuZJKlBApLlG7ZoH5p/s0z/T7Rrxu3qqip0k2GuLBINejVTVfFmI314DyzRIPUB 7Yxa1OIs2i35vGCDMtITrErZjkHr5gmMm1X+VYNN6IF58l385Z3Wo2YdTQaYLP4S 7i6Vmz1IFjTLT8XT1f0IwWixUFRwsTBXrILJmKJ5LUxbwnv1XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6wRIvu6FXk88SiO5hkqpN04TAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWEyOGNiZjYtYzI3My0z OWRkLWEyY2YtNjA4NTllZjkyODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGP0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKABzxb/sZfJraUi4ktAzGJzmLxgvnn+SEjaGnaJ+TgrFz6935oT4f/5 pxFEGM67uxOb9QqLe0b/4GDp4hK6VpglF+xZLUhaMtnB/GWBaqYA4aWWvgvZq22L 4vFtA0kQLEK7HGbqOxIO0FVcQwn3v6O5m+clPT/AcQRV6DOQlvemPagBXc4z1XTO KA5KpPurSLbv3+LLgYPipu7D5TgS9R6cVX+ljpA4CP/2iesCOxZPq3uY/P+Yfob/ ZttXuZ6tvt1jFI+QHXGvjX6gjgr7qh+LBi8/J1KD34vxMWl2fADjJMXbsNd3ji7k OVjNdtcCh5F8z6Af4C6CF6YRvZd0ZIU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:45 2025 by rpki-client