$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa File: e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa (raw, json) Hash identifier: BTWXVGYBGFArmtv1xuDdZZ2NAD73Q0lJ0V2Gd0bj5lE= Subject key identifier: A2:35:82:B7:02:65:A9:81:AD:C4:A6:67:D5:E1:27:61:E1:AB:77:27 Certificate issuer: /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Certificate serial: 010D0C9F4328584B9B3CE469668FBC515C01EAC0 Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 26383 IP address blocks: 207.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e4:69:66:8f:bc:51:5c:01:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=ee48ebb1-40e1-4cc3-8ecd-b02b25c055d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:c6:44:d0:27:64:7c:bc:60:2c:0c:ad:06: a1:22:ef:f6:b3:b0:51:32:8e:d8:0c:0d:01:f3:e8: ae:c5:1a:8f:e7:22:82:22:c3:92:d9:7d:41:24:df: 22:41:e8:fc:7c:0a:2d:d3:c8:9a:76:0e:5c:44:b2: ac:bd:90:25:1b:8e:9d:53:a0:0c:f5:a8:82:38:2f: 1a:87:91:02:11:47:85:d4:aa:c3:db:6a:0d:9b:f6: 2d:47:0c:8c:0c:c6:5a:97:7f:a0:1a:9b:a9:bd:ca: ff:8a:4d:33:cf:34:c0:87:cb:56:b4:40:cf:65:3d: c7:6f:84:f9:ec:5c:24:bf:86:9b:3e:9e:11:bb:6a: 35:46:71:8f:0b:01:2d:a5:26:d2:8a:a9:c3:e5:30: ef:8f:86:1b:6c:e2:51:1f:81:08:3f:82:e3:fa:83: b4:2b:52:8b:71:eb:58:a7:57:d1:40:13:a4:ec:a4: cb:75:88:2d:dc:bc:23:bd:80:99:80:aa:c5:93:f6: 66:a7:dd:8a:b3:62:8d:f0:14:72:b5:51:c4:bb:8e: f2:3c:5c:70:5e:4e:df:f3:01:d6:1c:67:f0:32:2b: 9f:fe:39:fb:7d:f6:dd:9f:0c:df:7b:49:b9:2f:41: 61:ea:ca:75:7e:ac:12:9d:9c:75:03:cd:8d:cb:b4: a3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:35:82:B7:02:65:A9:81:AD:C4:A6:67:D5:E1:27:61:E1:AB:77:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl X509v3 Authority Key Identifier: keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer sbgp-ipAddrBlock: critical IPv4: 207.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8a:f3:bc:9e:6b:a9:ce:d9:7f:05:6b:c1:4d:a3:13:63:f2: 71:1d:b0:78:dc:75:88:5b:b1:68:22:be:48:80:8b:65:a5:22: 43:38:86:df:55:c3:09:bb:6a:e7:1d:cf:21:19:df:7d:e3:2d: 68:59:6c:1b:77:99:a7:96:38:b3:7e:c1:e2:ce:4e:4e:e0:07: 93:fd:f6:9e:88:f3:b7:f3:25:82:05:ea:4f:b7:aa:3e:ae:ef: a5:89:06:27:03:f0:89:ed:42:00:93:23:1c:1a:4a:d0:d5:22: d3:6e:ec:5c:56:ea:61:71:34:17:61:b4:b4:13:b6:94:29:36: be:e1:58:1e:74:30:d7:49:39:05:ac:73:6e:1a:4b:72:8d:10: 14:a7:40:01:23:b5:bf:9f:49:57:10:53:ba:4e:54:39:49:2c: c6:e2:5d:a1:75:57:b0:c6:b6:57:dd:8f:15:9a:c9:70:31:9f: c6:f2:09:d2:4c:13:a5:38:33:77:6c:a1:2b:03:ab:a9:b8:8c: 4c:bc:ef:12:02:3a:74:82:67:6b:02:ca:da:8f:4f:3f:42:15: b2:b7:02:a0:69:e1:9a:bb:e4:9f:f6:2f:e7:35:d7:4a:70:5d: e2:f8:d9:f9:82:2f:28:98:12:0b:c4:49:46:9a:2c:c2:66:30: 74:6d:b0:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPORpZo+8UVwB6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4 ZjgxMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZWU0OGViYjEtNDBlMS00Y2MzLThlY2QtYjAyYjI1YzA1NWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D7GRNAnZHy8YCwMrQahIu/2s7BRMo7YDA0B 8+iuxRqP5yKCIsOS2X1BJN8iQej8fAot08iadg5cRLKsvZAlG46dU6AM9aiCOC8a h5ECEUeF1KrD22oNm/YtRwyMDMZal3+gGpupvcr/ik0zzzTAh8tWtEDPZT3Hb4T5 7Fwkv4abPp4Ru2o1RnGPCwEtpSbSiqnD5TDvj4YbbOJRH4EIP4Lj+oO0K1KLcetY p1fRQBOk7KTLdYgt3LwjvYCZgKrFk/Zmp92Ks2KN8BRytVHEu47yPFxwXk7f8wHW HGfwMiuf/jn7ffbdnwzfe0m5L0Fh6sp1fqwSnZx1A82Ny7SjxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKI1grcCZamBrcSmZ9XhJ2Hhq3cnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvZTk5ODZlNGItZDU0OC0z ZThiLTk5NWYtYWU2MjNlNWQwNGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5 OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy ZDA4OThmODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1ruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyK87yea6nO2X8Fa8FNoxNj8nEdsHjcdYhbsWgivkiAi2WlIkM4ht9V wwm7aucdzyEZ333jLWhZbBt3maeWOLN+weLOTk7gB5P99p6I87fzJYIF6k+3qj6u 76WJBicD8IntQgCTIxwaStDVItNu7FxW6mFxNBdhtLQTtpQpNr7hWB50MNdJOQWs c24aS3KNEBSnQAEjtb+fSVcQU7pOVDlJLMbiXaF1V7DGtlfdjxWayXAxn8byCdJM E6U4M3dsoSsDq6m4jEy87xICOnSCZ2sCytqPTz9CFbK3AqBp4Zq75J/2L+c110pw XeL42fmCLyiYEgvESUaaLMJmMHRtsI8= -----END CERTIFICATE-----Generated at Mon Nov 3 23:04:30 2025 by rpki-client