$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e5f4fdf-8b64-307c-a147-77f65a120921.roa File: 1e5f4fdf-8b64-307c-a147-77f65a120921.roa (raw, json) Hash identifier: ikwu7FiJXSJJj+hoZKxwzjbueUOVvB7DP7FvfcS5N2k= Subject key identifier: 42:8D:90:0C:97:B2:88:35:06:89:8C:63:89:51:DF:B1:C2:75:14:32 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AFEE6CDA56454A4D5F6D60F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e5f4fdf-8b64-307c-a147-77f65a120921.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 17378 IP address blocks: 24.249.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:cd:a5:64:54:a4:d5:f6:d6:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=563b7bef-2154-41ae-8cb9-6a2cff2cf26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:30:b6:0c:3a:44:57:c2:0b:54:4c:23:a5:1e: af:b8:7f:02:5c:ff:49:9f:cb:c6:87:b6:71:9e:27: 4d:23:1d:99:63:84:3c:c8:24:b9:c3:76:03:72:96: ca:5b:11:f4:2e:bc:fe:a9:38:2a:d0:4b:2b:2e:02: 3d:5d:ad:f1:5a:87:7e:bc:42:36:88:42:51:f2:30: 3f:78:8b:25:59:20:18:52:72:65:c2:38:f3:ff:bd: bb:e0:49:62:07:68:0f:0a:fe:78:78:32:5f:9c:59: 79:bd:08:f0:32:4c:f8:74:91:1a:be:6b:96:12:c1: f3:15:a5:81:54:80:ba:d5:fe:d6:af:80:83:bb:be: 14:dc:b0:3d:86:16:3b:dd:7f:bf:be:2e:f0:45:e5: 82:13:fa:1e:8e:6f:1d:f1:05:7f:2f:6c:a5:68:db: a6:7a:af:52:1d:a1:a6:35:85:90:dd:7e:06:93:c9: 36:75:b5:48:7d:94:3a:a2:ac:dc:2e:32:85:a0:13: 83:6e:61:8e:4b:43:05:ec:86:19:87:50:1b:e9:75: fd:cc:10:c5:f4:b9:8f:f0:60:9b:2b:36:8a:26:5b: 9a:a6:87:10:04:33:bd:04:a6:9c:43:03:24:c7:05: bc:f1:4d:b0:ca:1f:2e:a3:ed:47:33:3b:2a:f0:82: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8D:90:0C:97:B2:88:35:06:89:8C:63:89:51:DF:B1:C2:75:14:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e5f4fdf-8b64-307c-a147-77f65a120921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.249.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:0b:42:c5:2e:43:6c:54:11:ee:a2:27:9d:03:83:d0:f1:b5: 70:4d:09:9b:1e:aa:55:1a:dd:f1:b0:12:b2:1a:00:1a:fc:50: 87:f1:3a:91:2b:ef:00:f6:75:8d:a3:9a:db:7b:1b:ad:9c:20: d5:88:0b:c6:f1:f7:8c:e6:8c:b5:50:5b:0b:73:59:56:96:8e: fe:3f:8f:8c:b1:e6:5a:39:7f:90:bd:83:bd:4d:ee:24:cd:2c: 39:1a:9b:ae:60:f6:6b:36:3a:18:27:a1:ab:16:a7:78:89:6d: 78:f6:e0:dc:82:9c:af:0d:bf:5a:f8:2b:45:ba:1f:15:fc:df: cc:ab:db:ba:e9:fd:00:ea:8b:1a:77:52:ac:08:91:b7:5d:28: 85:3a:37:b2:36:a1:97:75:41:67:5d:43:63:ad:a7:bc:55:92: 55:28:e9:75:1a:4c:8c:6a:64:11:6f:8b:ef:1a:52:03:e7:e3: 5b:50:55:59:be:a2:54:40:fc:8c:9f:e4:1e:ed:51:31:0b:bb: b3:98:ec:6b:a1:9f:d4:7a:22:c6:9e:cd:be:ff:16:ab:aa:fa: a4:13:d6:94:c5:60:0b:eb:12:c8:34:82:83:0d:96:76:df:b3: df:31:b1:15:e7:c8:cb:f3:0b:51:b5:49:f7:07:a6:fd:1b:78: 47:45:4c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5s2lZFSk1fbWD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NTYzYjdiZWYtMjE1NC00MWFlLThjYjktNmEyY2ZmMmNmMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDC2DDpEV8ILVEwjpR6vuH8CXP9Jn8vGh7Zx nidNIx2ZY4Q8yCS5w3YDcpbKWxH0Lrz+qTgq0EsrLgI9Xa3xWod+vEI2iEJR8jA/ eIslWSAYUnJlwjjz/7274EliB2gPCv54eDJfnFl5vQjwMkz4dJEavmuWEsHzFaWB VIC61f7Wr4CDu74U3LA9hhY73X+/vi7wReWCE/oejm8d8QV/L2ylaNumeq9SHaGm NYWQ3X4Gk8k2dbVIfZQ6oqzcLjKFoBODbmGOS0MF7IYZh1Ab6XX9zBDF9LmP8GCb KzaKJluapocQBDO9BKacQwMkxwW88U2wyh8uo+1HMzsq8IL/KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKNkAyXsog1BomMY4lR37HCdRQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWU1ZjRmZGYtOGI2NC0z MDdjLWExNDctNzdmNjVhMTIwOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKILQsUuQ2xUEe6iJ50Dg9DxtXBNCZseqlUa3fGwErIaABr8UIfxOpEr 7wD2dY2jmtt7G62cINWIC8bx94zmjLVQWwtzWVaWjv4/j4yx5lo5f5C9g71N7iTN LDkam65g9ms2OhgnoasWp3iJbXj24NyCnK8Nv1r4K0W6HxX838yr27rp/QDqixp3 UqwIkbddKIU6N7I2oZd1QWddQ2Otp7xVklUo6XUaTIxqZBFvi+8aUgPn41tQVVm+ olRA/Iyf5B7tUTELu7OY7Guhn9R6Isaezb7/Fquq+qQT1pTFYAvrEsg0goMNlnbf s98xsRXnyMvzC1G1SfcHpv0beEdFTNM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:47:15 2025 by rpki-client