$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/93b5ec5c-4026-3b96-b54e-6e47612a8c88.roa File: 93b5ec5c-4026-3b96-b54e-6e47612a8c88.roa (raw, json) Hash identifier: 23OJskC0juArwtHuFi+QC5DBVMkDCitGvkv8NAyS0B0= Subject key identifier: 3A:E4:F4:7F:94:82:6C:42:0B:27:33:E7:8C:A5:B2:23:0A:2E:81:1F Certificate issuer: /CN=eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db Certificate serial: 010D0C9F4328584B2496CFE061EB445BE8E17C00 Authority key identifier: C3:AC:70:BA:29:7A:37:17:8B:2F:8E:C0:BF:67:0F:AA:B9:0C:C9:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/93b5ec5c-4026-3b96-b54e-6e47612a8c88.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 204.90.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:cf:e0:61:eb:44:5b:e8:e1:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=fa03a95e-eeb4-4aba-b874-8c8e9814ca1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:fa:da:4b:44:4f:0d:64:3e:b3:92:ac:10: ee:ab:ed:52:42:22:f1:4b:32:e2:6f:20:f6:9d:54: 7c:46:01:61:ff:8b:37:a9:20:06:54:90:a2:76:38: 67:59:5d:35:c0:0b:9f:fa:d7:70:07:a3:98:10:2e: 72:21:7f:81:d8:69:36:70:c5:83:19:24:3d:e1:a4: e1:15:a1:1e:c7:79:f4:34:67:85:a7:f1:47:96:06: a7:80:59:b6:40:55:39:26:9f:98:4b:b7:57:6a:a4: e8:f9:18:25:a7:2b:5e:99:44:ff:47:de:05:ff:a6: e2:d7:a9:8e:bc:dc:7a:74:6e:f0:3c:a2:03:9b:a4: 1a:d9:46:0e:90:f0:4d:7f:3b:9f:3b:4a:ad:7e:66: c2:9b:e9:59:47:c8:d1:3a:d5:15:f3:b1:ea:cc:67: e9:5c:d6:2a:11:8e:55:b6:21:83:9a:41:be:c3:e6: 40:4a:97:f2:33:f1:bd:cd:2b:0c:d4:00:90:30:95: fe:e3:d3:88:dc:31:61:9b:a4:8b:33:77:a5:b7:46: 54:45:e2:d7:75:b9:c2:4c:ab:df:f0:6f:1d:b8:1a: 49:ce:b5:b1:77:b7:cb:5d:c3:c2:4f:3b:9b:b1:f4: 34:c2:cf:8c:41:ae:a6:f5:0e:ed:98:98:79:63:44: aa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E4:F4:7F:94:82:6C:42:0B:27:33:E7:8C:A5:B2:23:0A:2E:81:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/93b5ec5c-4026-3b96-b54e-6e47612a8c88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.crl X509v3 Authority Key Identifier: keyid:C3:AC:70:BA:29:7A:37:17:8B:2F:8E:C0:BF:67:0F:AA:B9:0C:C9:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer sbgp-ipAddrBlock: critical IPv4: 204.90.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:26:ea:4a:87:ae:d5:32:83:7f:df:18:25:b2:c1:db:d0:79: cb:e8:1d:5a:c5:98:fb:9b:3e:83:3f:50:43:8d:06:e6:be:31: 87:83:ce:9b:22:c6:36:3c:11:36:b9:96:37:a4:c5:a8:ab:be: ca:ed:bb:95:3c:f0:13:67:1b:28:d7:ff:16:9c:d5:87:1a:b2: 8f:07:93:4a:7f:e1:49:c4:25:90:52:f6:0b:82:68:0e:eb:ac: 0a:49:a6:c2:42:b6:59:30:7d:6c:1c:ec:c5:7f:fd:14:f7:46: a5:35:8c:80:34:0a:68:c8:ec:c7:8b:61:79:cd:93:18:f3:38: 66:16:ad:c3:34:dd:3d:38:7a:75:72:f9:ae:0c:75:1e:b9:48: 73:b1:8d:cf:bb:08:85:57:99:93:44:e2:c7:51:3b:d8:88:7a: 68:09:4b:a9:6e:8b:d3:2a:1d:68:07:a3:e7:d1:e7:b6:cf:9c: 05:90:e7:d8:74:f3:25:5a:3e:df:12:0a:27:7a:76:c5:ea:b0: 33:57:43:e4:40:e3:92:e9:f9:88:c7:15:4b:a2:39:2d:5f:97: e9:c9:0e:fc:6d:42:c4:f6:1a:c8:e0:eb:26:a2:e2:28:f2:6c: e6:94:71:98:f4:fe:06:91:42:4f:ec:94:c4:db:d3:10:02:71: 35:fb:cc:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskls/gYetEW+jhfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmOWYzYzgtOGIyMi00OTU3LTgwMGUtMmI0YzNjYTNk MWRiMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmEwM2E5NWUtZWViNC00YWJhLWI4NzQtOGM4ZTk4MTRjYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw/62ktETw1kPrOSrBDuq+1SQiLxSzLibyD2 nVR8RgFh/4s3qSAGVJCidjhnWV01wAuf+tdwB6OYEC5yIX+B2Gk2cMWDGSQ94aTh FaEex3n0NGeFp/FHlgangFm2QFU5Jp+YS7dXaqTo+RglpytemUT/R94F/6bi16mO vNx6dG7wPKIDm6Qa2UYOkPBNfzufO0qtfmbCm+lZR8jROtUV87HqzGfpXNYqEY5V tiGDmkG+w+ZASpfyM/G9zSsM1ACQMJX+49OI3DFhm6SLM3elt0ZUReLXdbnCTKvf 8G8duBpJzrWxd7fLXcPCTzubsfQ0ws+MQa6m9Q7tmJh5Y0SqzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrk9H+UgmxCCycz54ylsiMKLoEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lYWY5 ZjNjOC04YjIyLTQ5NTctODAwZS0yYjRjM2NhM2QxZGIvOTNiNWVjNWMtNDAyNi0z Yjk2LWI1NGUtNmU0NzYxMmE4Yzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWFmOWYzYzgtOGIyMi00OTU3LTgw MGUtMmI0YzNjYTNkMWRiL2VhZjlmM2M4LThiMjItNDk1Ny04MDBlLTJiNGMzY2Ez ZDFkYi5jcmwwHwYDVR0jBBgwFoAUw6xwuil6NxeLL47Av2cPqrkMyYQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lYWY5ZjNjOC04YjIyLTQ5NTctODAwZS0yYjRj M2NhM2QxZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFpqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0m6kqHrtUyg3/fGCWywdvQecvoHVrFmPubPoM/UEONBua+MYeDzpsi xjY8ETa5ljekxairvsrtu5U88BNnGyjX/xac1Ycaso8Hk0p/4UnEJZBS9guCaA7r rApJpsJCtlkwfWwc7MV//RT3RqU1jIA0CmjI7MeLYXnNkxjzOGYWrcM03T04enVy +a4MdR65SHOxjc+7CIVXmZNE4sdRO9iIemgJS6lui9MqHWgHo+fR57bPnAWQ59h0 8yVaPt8SCid6dsXqsDNXQ+RA45Lp+YjHFUuiOS1fl+nJDvxtQsT2Gsjg6yai4ijy bOaUcZj0/gaRQk/slMTb0xACcTX7zIQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:06:26 2025 by rpki-client