$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/7b652754-9f57-3773-9a15-03fc0f21b9a4.roa File: 7b652754-9f57-3773-9a15-03fc0f21b9a4.roa (raw, json) Hash identifier: /VQ+O2X26LM5ZNYAxxA92CR01GP2/0FjpzgKSmt6u58= Subject key identifier: 88:F8:4F:0E:A3:B1:1C:35:EE:CA:57:FD:CD:76:4E:5B:68:86:3E:20 Certificate issuer: /CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f Certificate serial: 010D0C9F4328584AE891340EE22574BAD96D8F00 Authority key identifier: 67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/7b652754-9f57-3773-9a15-03fc0f21b9a4.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 204.90.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:34:0e:e2:25:74:ba:d9:6d:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=d1fa3d85-d9e8-48e4-b5ef-35dd9a7a6e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:ae:0f:dc:13:94:90:a6:80:cf:48:ad:cd: 31:87:23:43:c5:68:f6:4b:60:cc:98:1c:90:b6:68: b0:9a:2b:ef:3e:15:5c:2e:02:44:c0:ac:14:69:c7: fc:d0:84:26:da:e1:ff:93:ca:91:4b:cf:42:d2:af: 64:a6:55:44:5a:f9:24:65:a2:c4:7d:1b:18:08:ec: b8:52:cf:a1:81:ff:65:0e:cb:86:8a:07:f5:94:b6: d6:16:a9:80:29:5a:50:69:6b:65:83:89:56:6f:c4: 02:64:4a:8e:f1:9a:7f:80:d4:c9:79:48:9c:2e:fd: 0b:a0:21:dc:0d:65:44:56:1b:2a:aa:2d:28:3d:10: 18:a0:82:bf:0a:65:11:bb:3b:c6:fb:fd:a6:97:99: d9:6b:e8:b1:e8:fb:96:52:5b:54:ae:b0:cc:2a:6f: c2:dc:bb:81:fe:73:a8:2d:ba:4c:8e:d1:d1:65:cf: 9b:0a:6e:3b:36:82:6d:ad:2c:69:3f:98:57:6e:70: 6f:13:a1:0a:dc:57:34:99:62:72:19:b4:c4:16:23: a6:49:e6:2c:5e:a6:fd:fe:5a:0b:1b:88:ed:bf:74: cc:17:75:51:87:25:57:a4:92:5a:47:3e:9c:6a:db: 6d:17:18:51:b4:5e:21:23:f0:c5:07:ba:4f:5c:97: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F8:4F:0E:A3:B1:1C:35:EE:CA:57:FD:CD:76:4E:5B:68:86:3E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/7b652754-9f57-3773-9a15-03fc0f21b9a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl X509v3 Authority Key Identifier: keyid:67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer sbgp-ipAddrBlock: critical IPv4: 204.90.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b6:65:81:df:0a:81:76:95:f5:e8:7e:14:db:e5:8e:f3:c4: 20:01:c7:2e:50:91:3b:5e:8c:47:e3:28:b0:ca:97:2c:0c:19: 2d:67:2c:8e:f5:23:1a:65:d6:0c:2f:22:39:c6:94:df:06:ef: 2d:a9:20:10:60:b4:88:dd:1a:f2:14:58:3a:4d:d3:05:f7:d0: 8e:c2:94:cd:f0:74:0d:38:ef:b7:b0:c8:d8:f2:f2:33:7e:73: b5:6f:f2:88:c5:43:ee:bf:5e:5c:4e:c9:ec:5d:e8:e9:03:ab: 90:92:50:cb:8e:ab:f4:11:03:93:f3:81:67:a9:c6:ef:64:7b: 70:45:fc:6d:c1:cf:42:61:a3:15:4b:e8:65:60:74:fe:e4:55: 65:3b:24:00:db:3a:61:dc:2a:1e:66:23:aa:e2:dc:49:5e:ba: 8f:33:ff:d0:bd:9e:87:46:3d:2e:b3:09:ab:e5:38:93:d9:19: 05:0d:40:26:db:09:23:f3:bf:c4:f2:87:51:09:75:b6:9b:aa: 20:ef:96:e4:86:91:f1:fb:2a:39:73:b2:92:d4:7c:54:bc:e4: a6:66:0e:e7:12:b4:98:2d:65:f6:86:78:04:5e:81:a9:82:46: 43:af:65:bf:7d:9a:72:be:e5:d2:98:11:10:ff:b1:c4:f5:72: 0f:22:62:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTQO4iV0utltjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM5MGNhOWUtNjQxMi00YmQ2LTg2MjEtZWVhZjQ0OTMw YjFmMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZDFmYTNkODUtZDllOC00OGU0LWI1ZWYtMzVkZDlhN2E2ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqGuD9wTlJCmgM9Irc0xhyNDxWj2S2DMmByQ tmiwmivvPhVcLgJEwKwUacf80IQm2uH/k8qRS89C0q9kplVEWvkkZaLEfRsYCOy4 Us+hgf9lDsuGigf1lLbWFqmAKVpQaWtlg4lWb8QCZEqO8Zp/gNTJeUicLv0LoCHc DWVEVhsqqi0oPRAYoIK/CmURuzvG+/2ml5nZa+ix6PuWUltUrrDMKm/C3LuB/nOo LbpMjtHRZc+bCm47NoJtrSxpP5hXbnBvE6EK3Fc0mWJyGbTEFiOmSeYsXqb9/loL G4jtv3TMF3VRhyVXpJJaRz6catttFxhRtF4hI/DFB7pPXJeVQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj4Tw6jsRw17spX/c12Tltohj4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzkw Y2E5ZS02NDEyLTRiZDYtODYyMS1lZWFmNDQ5MzBiMWYvN2I2NTI3NTQtOWY1Ny0z NzczLTlhMTUtMDNmYzBmMjFiOWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmM5MGNhOWUtNjQxMi00YmQ2LTg2 MjEtZWVhZjQ0OTMwYjFmL2JjOTBjYTllLTY0MTItNGJkNi04NjIxLWVlYWY0NDkz MGIxZi5jcmwwHwYDVR0jBBgwFoAUZ1ggbyYWDhdeFkLwk/8nyE63iWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzkwY2E5ZS02NDEyLTRiZDYtODYyMS1lZWFm NDQ5MzBiMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFpcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+2ZYHfCoF2lfXofhTb5Y7zxCABxy5QkTtejEfjKLDKlywMGS1nLI71 Ixpl1gwvIjnGlN8G7y2pIBBgtIjdGvIUWDpN0wX30I7ClM3wdA0477ewyNjy8jN+ c7Vv8ojFQ+6/XlxOyexd6OkDq5CSUMuOq/QRA5PzgWepxu9ke3BF/G3Bz0JhoxVL 6GVgdP7kVWU7JADbOmHcKh5mI6ri3Eleuo8z/9C9nodGPS6zCavlOJPZGQUNQCbb CSPzv8Tyh1EJdbabqiDvluSGkfH7KjlzspLUfFS85KZmDucStJgtZfaGeARegamC RkOvZb99mnK+5dKYERD/scT1cg8iYtU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:31 2025 by rpki-client