$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21ae069d-8c07-31a6-bd6c-18b2ddb1042c.roa File: 21ae069d-8c07-31a6-bd6c-18b2ddb1042c.roa (raw, json) Hash identifier: lKJNPot1F2Ugry8FPo7gtxNniVJmYAI7j04rhlu8Ivc= Subject key identifier: 12:71:23:C9:A7:EF:87:27:EC:29:05:CF:09:02:2C:BE:65:60:A7:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3733BB038B557D8404C680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21ae069d-8c07-31a6-bd6c-18b2ddb1042c.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.251.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:33:bb:03:8b:55:7d:84:04:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=4e992e2e-4161-468b-b350-9066af46450e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1a:80:77:67:f9:52:be:5d:0d:01:3e:4d:78: 1c:b1:be:f8:b0:7a:d6:5e:48:27:a4:f0:98:2f:77: df:e2:19:d0:c5:12:96:83:d3:bf:d1:5d:c6:54:64: be:b9:65:93:4f:dd:7d:9b:6d:e0:fa:9d:1f:85:a0: 5d:10:14:39:c4:33:51:85:12:28:6d:b8:dc:c6:19: aa:af:56:06:fa:9b:2f:8d:fd:b1:a0:e5:f0:b1:46: eb:04:6e:32:80:e9:28:90:57:d3:bd:6f:7c:60:bc: 0c:17:e3:3d:ac:39:79:b1:43:79:2a:a8:9a:e7:09: 0d:56:c0:8f:65:5f:38:dd:c5:9e:1e:9a:c3:08:cf: c8:14:52:73:51:ca:0f:b7:6e:2c:ac:2f:61:4c:f7: c4:8a:c6:30:81:db:a4:19:56:5b:a6:30:52:e1:b5: 65:a0:5a:39:9a:c9:f0:b5:8c:08:70:f7:3e:11:6d: 3f:48:2b:76:ed:60:03:4a:23:7f:b2:41:17:04:92: fe:59:95:69:47:36:ff:56:e0:f5:59:d9:e5:c5:b9: d3:a3:b3:89:2c:88:65:0e:8d:89:e0:39:de:dd:7a: 02:2b:3a:2a:5c:48:dd:3e:80:4a:b5:62:cf:47:4c: cc:4e:87:1f:95:f0:d4:37:92:ce:a9:c8:25:e0:86: 35:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:71:23:C9:A7:EF:87:27:EC:29:05:CF:09:02:2C:BE:65:60:A7:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21ae069d-8c07-31a6-bd6c-18b2ddb1042c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d1:14:3f:53:0a:a6:0c:22:0f:53:f1:01:02:a1:0a:00:68: 98:8c:8d:9e:51:42:fe:60:f4:18:61:aa:06:d4:91:94:54:14: 11:64:ea:95:1f:8c:9f:96:fe:68:d0:f7:2c:d0:46:2a:f8:f7: 32:9f:63:89:ee:51:63:7f:dc:e5:93:b2:52:27:41:47:7b:e5: 33:10:cd:25:9f:3c:95:f9:b0:16:25:9d:dd:4a:b3:b4:91:91: 4c:0d:5b:fa:fd:61:bb:a7:3c:08:f0:e1:da:b7:71:ef:59:35: 06:52:5a:c2:38:35:05:1f:5f:00:f1:e1:ea:05:23:30:55:9d: 62:b5:9a:d7:8c:56:a4:22:df:d3:35:f8:bb:6e:01:cc:25:b2: 5d:55:0b:4f:16:89:9f:5a:02:3f:7a:88:45:65:48:68:df:80: 3a:40:2d:dd:c9:f3:f9:ae:ed:77:6e:e5:f0:32:a9:af:07:df: 22:4d:e8:2f:a1:15:8f:ae:ae:99:af:6d:e3:95:79:7d:0b:7f: 00:3f:f9:43:25:e4:fb:08:39:93:a2:98:6f:81:cd:04:92:a0: 24:57:56:22:5d:a7:3c:02:27:00:34:1b:72:92:79:af:4c:4a: c1:f4:a6:08:18:9b:71:c8:ab:e0:67:4f:0f:46:d5:c5:35:df: 65:00:8e:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzO7A4tVfYQExoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NGU5OTJlMmUtNDE2MS00NjhiLWIzNTAtOTA2NmFmNDY0NTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBqAd2f5Ur5dDQE+TXgcsb74sHrWXkgnpPCY L3ff4hnQxRKWg9O/0V3GVGS+uWWTT919m23g+p0fhaBdEBQ5xDNRhRIobbjcxhmq r1YG+psvjf2xoOXwsUbrBG4ygOkokFfTvW98YLwMF+M9rDl5sUN5Kqia5wkNVsCP ZV843cWeHprDCM/IFFJzUcoPt24srC9hTPfEisYwgdukGVZbpjBS4bVloFo5msnw tYwIcPc+EW0/SCt27WADSiN/skEXBJL+WZVpRzb/VuD1WdnlxbnTo7OJLIhlDo2J 4Dne3XoCKzoqXEjdPoBKtWLPR0zMTocflfDUN5LOqcgl4IY1YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJxI8mn74cn7CkFzwkCLL5lYKfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFhZTA2OWQtOGMwNy0z MWE2LWJkNmMtMThiMmRkYjEwNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPulMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLRFD9TCqYMIg9T8QECoQoAaJiMjZ5RQv5g9BhhqgbUkZRUFBFk6pUf jJ+W/mjQ9yzQRir49zKfY4nuUWN/3OWTslInQUd75TMQzSWfPJX5sBYlnd1Ks7SR kUwNW/r9YbunPAjw4dq3ce9ZNQZSWsI4NQUfXwDx4eoFIzBVnWK1mteMVqQi39M1 +LtuAcwlsl1VC08WiZ9aAj96iEVlSGjfgDpALd3J8/mu7Xdu5fAyqa8H3yJN6C+h FY+urpmvbeOVeX0LfwA/+UMl5PsIOZOimG+BzQSSoCRXViJdpzwCJwA0G3KSea9M SsH0pggYm3HIq+BnTw9G1cU132UAjrc= -----END CERTIFICATE-----Generated at Wed Nov 5 06:08:32 2025 by rpki-client