$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b432d393-555f-335c-b184-c6b6f970e20e.roa File: b432d393-555f-335c-b184-c6b6f970e20e.roa (raw, json) Hash identifier: ifbso92z+NAfWcksjEl5vj60EU4ned9lGdZS0Uz9LQ0= Subject key identifier: 36:9F:5E:86:CF:46:37:78:06:06:B0:85:86:C9:B8:0D:49:29:7C:B4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F283935A3350B0FD247E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b432d393-555f-335c-b184-c6b6f970e20e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 174.66.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:83:93:5a:33:50:b0:fd:24:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=976eff02-7513-4cc6-af81-0c6ed96d97cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:55:de:4b:43:06:65:5b:d2:11:e7:50:75: 22:81:4f:26:77:6d:23:3a:16:cb:24:ee:ad:0c:78: 48:11:17:e1:c1:c9:a7:fd:cc:88:04:e1:13:cc:fa: 66:28:c5:7a:70:e8:60:4e:60:1b:08:65:5b:ac:43: fd:8a:9e:39:15:ac:41:13:a8:9d:7c:ac:d9:5c:8b: f8:8d:bb:89:02:5b:a7:e0:52:5f:dc:90:74:d4:91: 2c:bf:38:f9:c6:7e:03:d6:d0:71:a9:37:77:c2:0d: 72:e6:d0:b8:99:ac:e0:91:85:e0:82:1c:3c:21:56: 05:da:8c:e4:03:24:b3:ed:88:af:3b:c4:c6:a5:80: d9:3f:09:a7:78:35:57:84:11:95:13:3e:47:67:08: 56:6e:ff:bf:b6:d8:f1:72:61:47:1a:ee:a7:86:f9: 60:dc:9a:3d:ea:89:45:80:d0:23:ba:a9:14:92:7f: 04:44:a8:d2:cf:e3:2f:0a:53:0f:d5:aa:6c:2d:6d: e3:d9:b9:c9:5a:13:89:77:3b:5f:44:40:8b:00:8c: ae:17:bc:a6:0c:2b:d0:a7:2f:61:c6:22:56:a4:8f: 62:47:65:2a:d2:1b:9a:31:9d:35:fa:c4:e1:5f:d4: 48:07:99:46:ef:b6:4d:a7:0b:c9:7a:14:0f:80:bc: f3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9F:5E:86:CF:46:37:78:06:06:B0:85:86:C9:B8:0D:49:29:7C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b432d393-555f-335c-b184-c6b6f970e20e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:94:5e:0b:76:af:7f:b8:c7:d5:a9:c7:2e:42:97:8b:73:99: f6:7b:8c:f3:97:6c:a0:4d:71:db:c6:df:a8:68:f2:64:ad:f0: 84:a4:9f:70:66:ca:dc:40:4e:18:87:5e:f2:0c:2a:1d:ff:f2: 3d:49:81:f7:0c:c9:8c:bb:5b:45:99:3a:d5:02:19:44:4b:79: b9:75:32:60:4f:c2:f2:4f:06:9c:f5:7c:41:b3:05:1b:20:fa: a6:cc:e9:fd:40:17:2d:4b:6f:7c:18:d6:51:3b:cd:d2:4a:4e: 2d:8d:a2:6a:c7:1c:bb:c5:fd:05:d9:20:b2:a9:f8:8e:aa:98: 2e:ea:f4:b1:bd:76:a1:d6:b4:31:18:81:95:3a:4d:55:13:7a: 28:4b:20:dd:c4:02:7d:96:4e:cb:62:1f:46:89:78:8a:71:a9: 28:fa:cd:5b:fe:4e:ed:32:7d:73:6c:06:cf:6d:ab:d6:eb:cb: b4:76:d2:28:e6:9b:d9:6b:8c:cc:5f:ae:08:85:f1:36:f5:56: bb:23:08:74:bc:56:58:5f:58:69:00:59:89:2b:61:94:1b:a8: 9c:bc:62:58:58:63:c5:2a:af:c9:ef:fa:c7:f0:00:a2:4e:eb: 92:5c:b1:b3:70:52:09:35:64:80:ba:78:b0:63:b6:31:be:94: 8b:df:61:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oOTWjNQsP0kfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OTc2ZWZmMDItNzUxMy00Y2M2LWFmODEtMGM2ZWQ5NmQ5N2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG9V3ktDBmVb0hHnUHUigU8md20jOhbLJO6t DHhIERfhwcmn/cyIBOETzPpmKMV6cOhgTmAbCGVbrEP9ip45FaxBE6idfKzZXIv4 jbuJAlun4FJf3JB01JEsvzj5xn4D1tBxqTd3wg1y5tC4mazgkYXgghw8IVYF2ozk AySz7YivO8TGpYDZPwmneDVXhBGVEz5HZwhWbv+/ttjxcmFHGu6nhvlg3Jo96olF gNAjuqkUkn8ERKjSz+MvClMP1apsLW3j2bnJWhOJdztfRECLAIyuF7ymDCvQpy9h xiJWpI9iR2Uq0huaMZ01+sThX9RIB5lG77ZNpwvJehQPgLzzCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDafXobPRjd4BgawhYbJuA1JKXy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjQzMmQzOTMtNTU1Zi0z MzVjLWIxODQtYzZiNmY5NzBlMjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkIZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCUXgt2r3+4x9Wpxy5Cl4tzmfZ7jPOXbKBNcdvG36ho8mSt8ISkn3Bm ytxAThiHXvIMKh3/8j1JgfcMyYy7W0WZOtUCGURLebl1MmBPwvJPBpz1fEGzBRsg +qbM6f1AFy1Lb3wY1lE7zdJKTi2NomrHHLvF/QXZILKp+I6qmC7q9LG9dqHWtDEY gZU6TVUTeihLIN3EAn2WTstiH0aJeIpxqSj6zVv+Tu0yfXNsBs9tq9bry7R20ijm m9lrjMxfrgiF8Tb1VrsjCHS8VlhfWGkAWYkrYZQbqJy8YlhYY8Uqr8nv+sfwAKJO 65JcsbNwUgk1ZIC6eLBjtjG+lIvfYX8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:23 2025 by rpki-client