$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4aa3d9ad-eaaa-324c-9b4b-9b06e800a692.roa File: 4aa3d9ad-eaaa-324c-9b4b-9b06e800a692.roa (raw, json) Hash identifier: bKNMQrTn7qCk3aShzGvjhSOIAkegoPukDm0fnur1VtM= Subject key identifier: 13:C9:F7:33:B4:31:BC:AE:A4:86:48:B5:BC:B5:4C:EB:D3:97:CB:7B Certificate issuer: /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c Certificate serial: 010D0C9F4328584B99D792EED60E76AAD4DE5F40 Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4aa3d9ad-eaaa-324c-9b4b-9b06e800a692.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 22438 IP address blocks: 208.90.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:92:ee:d6:0e:76:aa:d4:de:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=7dfa8f53-0ec5-4fc5-86f7-bcf2a1dd9ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:19:9c:a6:21:3c:a4:e2:f2:0a:75:43:bd:0b: 45:61:34:de:ed:80:1f:8f:58:21:5b:8c:c2:6b:62: 8e:bb:c0:78:8b:2f:01:44:01:4b:bf:bb:98:9b:db: 81:5c:08:90:2a:68:87:85:7f:79:9c:82:6a:c3:bd: 6a:87:e8:51:ed:20:48:d8:19:92:34:dc:c8:1f:34: 6d:df:8e:fa:30:70:43:65:34:b9:cb:b9:b6:26:99: 12:b6:2a:29:1f:3d:af:92:f7:0e:11:2e:a5:76:29: 43:42:76:0a:50:ff:08:ea:5f:1c:90:da:45:bc:e5: 26:9a:bb:8d:e8:2a:b8:29:d8:0a:47:dc:ce:c8:d0: 66:8f:1a:9f:c2:b7:e8:50:c7:e4:1d:ad:3d:a5:74: ad:df:9b:6c:fc:ef:8e:7c:94:26:0c:79:37:bb:7c: f4:4b:2b:62:48:ad:1c:94:b6:d6:0e:3a:cc:15:5b: 11:b4:a3:5a:8b:85:fc:f9:71:b1:08:39:4b:e8:ed: 9b:8c:b0:ca:7d:db:76:9b:84:8a:22:30:bb:5b:97: 2a:6e:a4:d8:47:1b:f9:36:c7:b1:52:b7:0f:68:7e: af:82:f5:12:8f:41:8f:05:d2:d9:24:4c:30:0e:2c: b6:c4:d2:9b:21:cf:ac:70:3c:a0:12:42:5a:68:bf: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C9:F7:33:B4:31:BC:AE:A4:86:48:B5:BC:B5:4C:EB:D3:97:CB:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4aa3d9ad-eaaa-324c-9b4b-9b06e800a692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl X509v3 Authority Key Identifier: keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer sbgp-ipAddrBlock: critical IPv4: 208.90.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:3d:94:ae:73:8a:ba:62:ec:2f:3b:e0:76:fd:b9:fe:c5:5d: ef:20:82:5e:53:0c:c9:28:1a:a3:83:f7:73:39:9f:51:81:36: 06:65:23:c8:ea:59:36:31:a4:cf:b8:07:2d:60:b6:15:cd:f7: 3d:c5:ea:1a:8c:8c:9e:38:d6:d1:c4:82:3f:7e:c0:96:e0:b4: 01:39:c9:0e:d7:89:05:b2:34:b5:b9:08:3d:82:c4:26:fb:df: af:6f:c6:8d:7f:eb:c7:dc:89:c3:6c:a4:61:2b:12:2e:76:9c: 47:88:2b:f3:d6:49:c7:4d:54:25:fe:2c:8b:a4:e8:a5:9f:7f: 87:48:19:34:1a:10:46:15:86:5e:6d:d6:18:46:dc:79:bf:b9: 0c:2a:a5:ad:83:85:c9:bc:aa:09:dd:2b:34:c6:3f:68:bc:f5: cd:97:32:67:a2:c6:7b:40:b3:72:89:2e:e2:d9:08:12:28:c3: ef:f8:4a:af:d8:98:bc:13:6b:5a:06:8a:49:2a:8e:12:48:e2: 35:04:9e:b7:33:dc:76:df:98:2c:6a:3a:ad:58:99:42:8d:78: ea:a8:42:d6:c3:7a:69:14:3d:b5:8b:ad:a2:a8:ef:87:da:70: e8:86:cd:b5:0a:b0:a2:40:ee:e5:47:12:72:f4:46:bb:fe:8c: 8d:cc:64:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15Lu1g52qtTeX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUxOTIxY2ItNmI2Yy00MDZhLTg4YzQtN2YyMmFjMTI1 NDdjMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk N2RmYThmNTMtMGVjNS00ZmM1LTg2ZjctYmNmMmExZGQ5ZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xmcpiE8pOLyCnVDvQtFYTTe7YAfj1ghW4zC a2KOu8B4iy8BRAFLv7uYm9uBXAiQKmiHhX95nIJqw71qh+hR7SBI2BmSNNzIHzRt 3476MHBDZTS5y7m2JpkStiopHz2vkvcOES6ldilDQnYKUP8I6l8ckNpFvOUmmruN 6Cq4KdgKR9zOyNBmjxqfwrfoUMfkHa09pXSt35ts/O+OfJQmDHk3u3z0SytiSK0c lLbWDjrMFVsRtKNai4X8+XGxCDlL6O2bjLDKfdt2m4SKIjC7W5cqbqTYRxv5Nsex UrcPaH6vgvUSj0GPBdLZJEwwDiy2xNKbIc+scDygEkJaaL9BfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPJ9zO0MbyupIZItby1TOvTl8t7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5 MjFjYi02YjZjLTQwNmEtODhjNC03ZjIyYWMxMjU0N2MvNGFhM2Q5YWQtZWFhYS0z MjRjLTliNGItOWIwNmU4MDBhNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGUxOTIxY2ItNmI2Yy00MDZhLTg4 YzQtN2YyMmFjMTI1NDdjLzRlMTkyMWNiLTZiNmMtNDA2YS04OGM0LTdmMjJhYzEy NTQ3Yy5jcmwwHwYDVR0jBBgwFoAUjdDPHbObXlsM6MEnYkdtzgryKxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5MjFjYi02YjZjLTQwNmEtODhjNC03ZjIy YWMxMjU0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ9lK5zirpi7C874Hb9uf7FXe8ggl5TDMkoGqOD93M5n1GBNgZlI8jq WTYxpM+4By1gthXN9z3F6hqMjJ441tHEgj9+wJbgtAE5yQ7XiQWyNLW5CD2CxCb7 369vxo1/68fcicNspGErEi52nEeIK/PWScdNVCX+LIuk6KWff4dIGTQaEEYVhl5t 1hhG3Hm/uQwqpa2Dhcm8qgndKzTGP2i89c2XMmeixntAs3KJLuLZCBIow+/4Sq/Y mLwTa1oGikkqjhJI4jUEnrcz3HbfmCxqOq1YmUKNeOqoQtbDemkUPbWLraKo74fa cOiGzbUKsKJA7uVHEnL0Rrv+jI3MZOY= -----END CERTIFICATE-----Generated at Wed Nov 5 14:57:44 2025 by rpki-client