$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39cdea94-0828-34c7-a8ab-cefeb6995433.roa File: 39cdea94-0828-34c7-a8ab-cefeb6995433.roa (raw, json) Hash identifier: Z1MXeczG6r3dqUdkezuJB/v3q9WDoGOD3e7DgHl4sJw= Subject key identifier: 13:EE:8C:02:AE:6E:42:72:40:11:0A:44:B6:5C:20:3E:EF:82:11:8D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9CA8E2530AB12EC292F9C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39cdea94-0828-34c7-a8ab-cefeb6995433.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 174.74.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:a8:e2:53:0a:b1:2e:c2:92:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=e3cd87fa-5df3-4be3-85ef-c892816c8af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:6e:21:0c:69:bc:47:09:61:69:a1:00:9e: f4:5d:64:1d:18:31:11:77:eb:05:00:5d:ef:61:e7: 20:2d:b8:8f:46:34:67:35:da:5a:5d:52:35:20:33: 37:1f:d0:18:81:a1:af:80:f0:4d:3d:22:2d:55:01: 64:b5:c0:4d:f7:24:9c:91:bc:00:00:39:f7:04:f7: 02:40:ed:95:41:3e:35:5c:a1:c9:d2:46:40:fc:23: 38:74:4e:0b:39:88:01:af:4e:61:78:f7:e9:37:09: 2d:85:ad:55:b3:4d:c7:21:fb:e6:26:49:cf:7d:be: 88:5b:61:dc:9c:6e:e1:ab:33:e3:89:d2:62:5a:e1: 51:5b:c8:50:e5:d6:b1:d1:97:14:d0:24:6a:df:85: 5c:44:01:a2:09:b1:c9:90:79:06:24:c6:f3:b4:de: 13:46:ef:87:df:9d:0f:c1:9b:54:e2:56:ae:85:e2: a4:d8:f9:9c:25:4f:8a:e0:68:54:5f:ef:59:e3:85: 90:7e:f1:26:f1:78:1b:1b:af:63:1d:2e:33:61:5d: 53:5b:ee:83:ff:cd:40:a2:53:54:bb:3d:32:49:fa: 5d:4a:73:fb:c4:5e:1f:02:49:5b:23:f2:99:8c:5e: 7c:64:f3:ca:88:9e:58:a0:f1:e2:c5:d3:44:19:f3: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EE:8C:02:AE:6E:42:72:40:11:0A:44:B6:5C:20:3E:EF:82:11:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39cdea94-0828-34c7-a8ab-cefeb6995433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.74.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:10:ee:58:1b:ee:c9:f8:96:45:f2:58:0e:3d:6b:a8:57:19: 80:10:11:3c:fe:0b:2d:19:73:d3:2b:8c:8e:b2:70:66:22:4d: 13:a1:f6:90:de:95:4a:a8:74:25:4e:fd:1f:ed:6e:c5:ca:e0: a4:24:9e:68:03:0b:47:f8:40:81:03:2d:1b:27:92:00:dc:af: 16:9e:9f:3f:04:5d:36:22:25:a7:7f:0d:f1:57:ff:87:26:e9: 47:c8:ab:7c:15:3f:1a:e8:64:f6:b9:69:99:bc:f5:4a:bd:d6: aa:8d:27:f2:b6:8b:f7:98:31:c9:38:73:64:4c:83:e1:9b:d3: 3e:cc:80:71:fb:ff:29:90:e1:8a:62:d0:0f:46:4c:f7:dd:06: 0e:de:d9:19:4e:e8:a3:9c:d2:5b:48:c1:7b:ce:e5:e8:22:74: f5:6d:2b:66:7d:81:bd:cf:79:d0:66:49:3b:d8:1d:f5:6f:45: e8:0a:f1:5c:92:ff:c3:be:50:1c:ea:fa:df:50:36:5d:bb:e9: b6:5c:3a:2b:af:c4:6b:c6:9a:0f:0c:e0:90:4c:1f:d1:d0:39: 7c:b4:72:21:dc:cd:3f:1c:bb:1f:c5:d4:98:9d:fe:61:81:72: d9:ef:00:b1:4e:e8:5a:da:e5:06:3e:d3:bf:3d:15:6e:cc:59: 1e:df:6a:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnKjiUwqxLsKS+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTNjZDg3ZmEtNWRmMy00YmUzLTg1ZWYtYzg5MjgxNmM4YWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOduIQxpvEcJYWmhAJ70XWQdGDERd+sFAF3v YecgLbiPRjRnNdpaXVI1IDM3H9AYgaGvgPBNPSItVQFktcBN9ySckbwAADn3BPcC QO2VQT41XKHJ0kZA/CM4dE4LOYgBr05hePfpNwktha1Vs03HIfvmJknPfb6IW2Hc nG7hqzPjidJiWuFRW8hQ5dax0ZcU0CRq34VcRAGiCbHJkHkGJMbztN4TRu+H350P wZtU4lauheKk2PmcJU+K4GhUX+9Z44WQfvEm8XgbG69jHS4zYV1TW+6D/81AolNU uz0ySfpdSnP7xF4fAklbI/KZjF58ZPPKiJ5YoPHixdNEGfPKPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPujAKubkJyQBEKRLZcID7vghGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzljZGVhOTQtMDgyOC0z NGM3LWE4YWItY2VmZWI2OTk1NDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEQ7lgb7sn4lkXyWA49a6hXGYAQETz+Cy0Zc9MrjI6ycGYiTROh9pDe lUqodCVO/R/tbsXK4KQknmgDC0f4QIEDLRsnkgDcrxaenz8EXTYiJad/DfFX/4cm 6UfIq3wVPxroZPa5aZm89Uq91qqNJ/K2i/eYMck4c2RMg+Gb0z7MgHH7/ymQ4Ypi 0A9GTPfdBg7e2RlO6KOc0ltIwXvO5egidPVtK2Z9gb3PedBmSTvYHfVvRegK8VyS /8O+UBzq+t9QNl276bZcOiuvxGvGmg8M4JBMH9HQOXy0ciHczT8cux/F1Jid/mGB ctnvALFO6Fra5QY+0789FW7MWR7faqU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:32:53 2025 by rpki-client