$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b0b8d41-56bd-38d9-b862-52320aab8a84.roa File: 0b0b8d41-56bd-38d9-b862-52320aab8a84.roa (raw, json) Hash identifier: g6YU9pRejEDzKwXNj2EiLbLJTaEt2qI0r4t5s2VEBV4= Subject key identifier: B1:E1:4A:B6:97:97:12:FA:2D:B8:AD:22:9D:75:66:CE:E3:58:03:35 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BB5C2672CB18946126AD66AC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b0b8d41-56bd-38d9-b862-52320aab8a84.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 22773 IP address blocks: 24.249.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:67:2c:b1:89:46:12:6a:d6:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=d5205683-6b9a-423c-80c5-926b38170925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b0:ba:c5:b3:bb:4a:f8:e7:d7:07:b8:ca:5a: 9d:65:41:ca:ae:c8:92:3b:e9:24:80:f1:13:a5:bb: 31:5f:10:91:5a:f0:d2:47:7a:a6:a8:3e:29:e4:43: 16:3b:19:c4:ac:0e:6a:66:9e:9c:62:14:fb:41:a8: 85:26:2f:b8:2a:36:8a:a9:0b:90:28:4a:6f:8e:b2: 8c:c1:db:2f:d9:24:4e:84:51:6a:94:1d:5f:7e:c2: e1:98:a4:fa:02:cf:1f:d5:2f:48:13:1a:3b:2f:33: 78:de:3c:0b:36:60:05:a2:0c:64:62:54:31:a0:68: 8b:c0:f8:44:da:c3:2b:f4:88:8a:0f:48:ed:57:db: df:c6:5c:e0:90:be:82:29:84:e3:58:34:38:b3:8f: eb:71:3e:26:b5:ea:2e:dc:b2:24:5d:6b:3f:bc:2c: 4c:dd:16:66:bd:30:c0:72:47:b9:b7:f3:b5:79:b6: a7:b4:f2:33:05:ff:03:bf:3e:77:14:c9:49:77:ce: 5a:a3:56:aa:24:61:18:60:fd:7c:3f:20:1a:9a:ce: 84:37:d3:4e:53:a2:51:fe:7c:9d:d7:05:30:7e:82: 89:19:4a:79:23:94:a1:60:b6:a3:0c:b2:f7:0f:d7: db:f4:d9:20:9d:b1:26:d4:05:81:0d:6a:b9:dc:0b: d1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E1:4A:B6:97:97:12:FA:2D:B8:AD:22:9D:75:66:CE:E3:58:03:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b0b8d41-56bd-38d9-b862-52320aab8a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.249.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ca:3f:0c:e6:d9:16:33:c6:7e:46:1d:99:39:fd:62:ad:3f: 5f:37:08:d7:92:70:8a:97:c5:09:45:1f:d9:60:bf:8f:88:a6: b2:44:48:ae:1d:1e:fb:6e:5e:2e:6f:2a:52:b8:64:3a:9c:d6: 64:91:4e:42:c9:78:1e:7f:e0:85:c3:22:ed:75:a8:91:7f:75: a1:2e:c7:f4:00:3d:da:82:47:16:19:53:e0:27:b4:2b:b2:17: d1:ee:69:19:a8:93:4f:ae:3a:ec:36:86:5d:07:dd:0f:d5:39: 80:a3:04:8d:50:02:c6:e8:8c:0d:8f:8a:36:10:e1:dc:ad:d2: 9c:cc:2f:40:45:34:98:5b:fb:c1:b9:42:8f:95:d7:35:3d:c3: 30:30:73:cc:0b:ff:31:b6:fa:6b:37:2b:09:2c:7b:cb:7d:aa: d3:f2:c3:8c:b3:8b:f3:e4:2c:b5:f7:4c:72:7c:bb:92:79:01: b8:08:13:6f:80:91:84:1a:50:1d:32:ac:1f:83:a2:69:48:32: f3:b8:79:b5:46:40:5d:ef:e3:ae:5e:96:e1:4d:30:b2:b7:e7: 7e:50:6a:49:96:88:05:fe:64:fc:2d:8f:53:68:0d:87:f5:ef: 79:42:97:38:aa:58:a5:9d:f4:94:0a:74:1d:f3:69:99:0f:15: f1:7f:d7:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmcssYlGEmrWasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZDUyMDU2ODMtNmI5YS00MjNjLTgwYzUtOTI2YjM4MTcwOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbC6xbO7Svjn1we4ylqdZUHKrsiSO+kkgPET pbsxXxCRWvDSR3qmqD4p5EMWOxnErA5qZp6cYhT7QaiFJi+4KjaKqQuQKEpvjrKM wdsv2SROhFFqlB1ffsLhmKT6As8f1S9IExo7LzN43jwLNmAFogxkYlQxoGiLwPhE 2sMr9IiKD0jtV9vfxlzgkL6CKYTjWDQ4s4/rcT4mteou3LIkXWs/vCxM3RZmvTDA cke5t/O1ebantPIzBf8Dvz53FMlJd85ao1aqJGEYYP18PyAams6EN9NOU6JR/nyd 1wUwfoKJGUp5I5ShYLajDLL3D9fb9NkgnbEm1AWBDWq53AvR1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHhSraXlxL6LbitIp11Zs7jWAM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGIwYjhkNDEtNTZiZC0z OGQ5LWI4NjItNTIzMjBhYWI4YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGPnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbKPwzm2RYzxn5GHZk5/WKtP183CNeScIqXxQlFH9lgv4+IprJESK4d HvtuXi5vKlK4ZDqc1mSRTkLJeB5/4IXDIu11qJF/daEux/QAPdqCRxYZU+AntCuy F9HuaRmok0+uOuw2hl0H3Q/VOYCjBI1QAsbojA2PijYQ4dyt0pzML0BFNJhb+8G5 Qo+V1zU9wzAwc8wL/zG2+ms3Kwkse8t9qtPyw4yzi/PkLLX3THJ8u5J5AbgIE2+A kYQaUB0yrB+DomlIMvO4ebVGQF3v465eluFNMLK3535QakmWiAX+ZPwtj1NoDYf1 73lClziqWKWd9JQKdB3zaZkPFfF/1+A= -----END CERTIFICATE-----Generated at Tue Nov 4 12:42:00 2025 by rpki-client