$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dfa9eda-4a74-33a9-81ae-64c181840fd9.roa File: 3dfa9eda-4a74-33a9-81ae-64c181840fd9.roa (raw, json) Hash identifier: 1Z+k8H4fORb47bJPy78NEkb1jwTAywQTOO1KNvCWvUE= Subject key identifier: A4:8A:25:89:4F:0A:F5:49:F7:DC:CE:EE:40:95:45:4F:1A:D8:38:CB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BB45D45F27CDDF1DBD7E76D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dfa9eda-4a74-33a9-81ae-64c181840fd9.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 22773 IP address blocks: 174.78.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:45:f2:7c:dd:f1:db:d7:e7:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=5088d9d9-4c0a-48e3-bd6a-45d73909d593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7a:59:05:85:0d:3e:67:f3:92:65:a7:70:10: 10:14:8c:3b:c4:28:7e:81:dc:7c:ab:c1:73:ab:58: de:84:e6:65:5a:12:20:2d:42:f9:4e:18:76:d7:45: 7e:d7:60:3c:b9:8d:e7:e6:83:77:4b:98:0f:fb:39: e0:ed:9b:72:5e:44:25:3a:76:ce:64:bf:b3:bd:61: 02:6f:f8:1a:fb:b8:7a:f3:50:aa:aa:cf:3d:b9:74: 8b:d1:2e:4c:f8:c9:f2:d4:f6:23:b3:6d:97:4c:07: 7b:c6:92:35:19:ec:d8:c9:b4:bb:e6:be:33:29:ab: 14:d4:4e:67:13:8c:79:2d:d4:c2:70:db:75:ce:f9: 27:63:56:7d:2e:bd:62:16:8e:44:98:09:5c:47:d0: b1:aa:af:f4:b6:cf:71:40:b5:c7:a7:56:ab:57:7c: f9:07:37:f2:ff:b5:f1:39:be:20:28:8c:bd:c4:66: f6:65:3a:5d:e4:2a:0e:5a:53:22:f1:68:12:b8:a9: e4:d1:06:76:ed:be:3a:10:8b:1e:b3:e1:20:6d:65: fd:31:23:a9:29:e3:5c:55:c3:bf:37:22:3e:99:34: 21:8d:96:8f:2f:e1:c4:95:09:a1:5a:a2:dc:0a:00: c3:82:90:f5:55:3b:f8:62:a4:5e:8b:68:89:e8:58: 6e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8A:25:89:4F:0A:F5:49:F7:DC:CE:EE:40:95:45:4F:1A:D8:38:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dfa9eda-4a74-33a9-81ae-64c181840fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.78.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:54:cd:ff:0a:bc:61:50:b9:14:78:cd:b6:99:d5:39:1c:2f: e2:73:ac:8a:e1:db:47:d6:03:e9:28:8f:47:f5:17:32:c7:6d: 9b:f0:6e:c2:5c:17:df:b8:b1:4e:60:f6:46:7e:2c:d4:2d:ee: 96:bf:78:f7:96:65:91:4c:d7:94:5d:e6:e9:3f:e4:0f:e4:a6: 93:e4:af:3a:57:0b:28:98:40:08:5f:b1:1e:26:f7:f1:c5:88: 76:db:86:39:ab:44:cc:87:ab:d4:c4:f8:5b:72:3b:74:a6:0d: e8:9c:72:de:b9:62:8f:34:40:4f:6c:eb:44:f8:7b:46:b8:1f: c9:99:d6:e7:f6:2a:4c:0e:20:f3:12:c3:9a:62:84:19:d8:e0: fd:7a:6d:5d:57:aa:73:b7:3c:75:30:14:f9:31:8a:f3:aa:93: 29:4d:db:80:fd:af:43:25:2d:41:2e:91:7d:a7:cc:28:67:5f: e8:9d:bc:8e:ae:89:00:7e:41:a6:3e:d3:5e:1e:ae:68:0f:5a: cd:d6:d0:a4:f2:15:22:fb:f6:e5:f3:2a:cb:fb:fa:ae:68:a8: af:4d:48:51:39:60:78:f9:6d:58:bc:9c:35:53:dc:16:6c:96: cb:fa:d4:eb:1d:a3:d9:39:f7:67:f9:14:2f:bc:3c:88:4f:32: 6b:7c:b3:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUXyfN3x29fnbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NTA4OGQ5ZDktNGMwYS00OGUzLWJkNmEtNDVkNzM5MDlkNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHpZBYUNPmfzkmWncBAQFIw7xCh+gdx8q8Fz q1jehOZlWhIgLUL5Thh210V+12A8uY3n5oN3S5gP+zng7ZtyXkQlOnbOZL+zvWEC b/ga+7h681Cqqs89uXSL0S5M+Mny1PYjs22XTAd7xpI1GezYybS75r4zKasU1E5n E4x5LdTCcNt1zvknY1Z9Lr1iFo5EmAlcR9Cxqq/0ts9xQLXHp1arV3z5Bzfy/7Xx Ob4gKIy9xGb2ZTpd5CoOWlMi8WgSuKnk0QZ27b46EIses+EgbWX9MSOpKeNcVcO/ NyI+mTQhjZaPL+HElQmhWqLcCgDDgpD1VTv4YqRei2iJ6FhuZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSKJYlPCvVJ99zO7kCVRU8a2DjLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2RmYTllZGEtNGE3NC0z M2E5LTgxYWUtNjRjMTgxODQwZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrk6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpUzf8KvGFQuRR4zbaZ1TkcL+JzrIrh20fWA+koj0f1FzLHbZvwbsJc F9+4sU5g9kZ+LNQt7pa/ePeWZZFM15Rd5uk/5A/kppPkrzpXCyiYQAhfsR4m9/HF iHbbhjmrRMyHq9TE+FtyO3SmDeicct65Yo80QE9s60T4e0a4H8mZ1uf2KkwOIPMS w5pihBnY4P16bV1XqnO3PHUwFPkxivOqkylN24D9r0MlLUEukX2nzChnX+idvI6u iQB+QaY+014ermgPWs3W0KTyFSL79uXzKsv7+q5oqK9NSFE5YHj5bVi8nDVT3BZs lsv61Osdo9k592f5FC+8PIhPMmt8sx4= -----END CERTIFICATE-----Generated at Tue Nov 4 08:01:16 2025 by rpki-client