$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/90b08af3-9eb5-3830-97fb-0ffda9905b82.roa File: 90b08af3-9eb5-3830-97fb-0ffda9905b82.roa (raw, json) Hash identifier: 6MssffKnRqXEXkJkO0yyUUkpvoelDsn24+EmBAG1Aqk= Subject key identifier: E2:34:E8:8F:C8:D9:17:1F:D8:52:F5:A0:4E:35:17:17:0C:73:8F:7F Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012 Certificate serial: 010D0C9F4328584B5571E734F1B0BBD0CD6BF300 Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/90b08af3-9eb5-3830-97fb-0ffda9905b82.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 11606 IP address blocks: 67.210.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e7:34:f1:b0:bb:d0:cd:6b:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=d3778224-b80b-4063-81d3-72d5c84eae89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8d:d2:c2:18:87:81:a7:78:97:33:41:d7:25: 33:91:2e:4b:14:87:eb:70:f7:fb:f5:28:c6:45:b8: dd:c9:9b:ff:b5:ef:8b:ae:a3:ac:0f:9a:49:0a:0f: 2d:f2:fe:eb:3f:13:5c:e8:22:9e:f8:10:b0:10:2a: 34:bf:38:04:56:21:34:6d:3a:95:56:ac:1f:d5:94: bc:1e:8b:0b:85:e5:1d:8c:78:dc:25:d0:96:46:d4: 4f:18:ab:1e:d6:6a:18:94:df:a3:df:f1:ab:7f:db: 1d:a0:a8:6c:10:ca:9e:be:68:5e:48:51:28:e3:7f: 31:18:42:93:68:cc:63:50:b4:c2:1a:f8:94:44:13: 16:6d:b1:32:03:19:db:8c:b5:6e:b7:cb:d8:87:16: 1e:f9:08:15:72:d6:17:0e:eb:7c:ff:48:f1:88:14: 82:d2:de:0a:dc:76:cf:d6:e6:b3:d2:43:a8:4c:42: fc:74:88:81:7e:1f:00:98:4f:ed:da:2b:7b:76:2a: d2:b7:4e:dd:1d:5d:e7:8f:5b:23:3b:1a:f8:2d:43: 89:35:b4:58:94:15:e6:db:4c:7b:9e:39:33:4f:bb: 9a:06:6d:14:b3:c8:76:d5:dc:33:65:0d:fa:00:03: 94:a8:3a:64:81:72:f7:d5:50:bc:a8:d6:15:98:03: bf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:34:E8:8F:C8:D9:17:1F:D8:52:F5:A0:4E:35:17:17:0C:73:8F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/90b08af3-9eb5-3830-97fb-0ffda9905b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl X509v3 Authority Key Identifier: keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer sbgp-ipAddrBlock: critical IPv4: 67.210.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:63:83:07:ff:80:8b:79:b5:88:21:df:3d:31:a2:54:c1:0b: 42:01:64:d7:61:a5:75:0d:40:9d:60:cb:cf:1b:87:71:53:1f: f6:ee:8d:9d:ac:61:2a:ab:22:69:10:22:c5:25:fc:d2:b6:77: 98:4f:67:32:7c:f0:d7:39:71:a1:7c:17:69:4f:d3:d9:44:9f: 19:3a:d1:89:51:57:30:89:de:8c:8e:8f:69:c6:c2:36:37:42: 79:0e:13:25:f4:02:fc:eb:01:db:8b:bf:14:33:27:73:21:44: 87:2d:71:93:d5:81:1d:80:ce:21:6a:5b:4b:b6:55:a2:d1:87: 5f:45:7b:de:ad:d5:4b:39:c5:dd:86:80:e0:28:35:11:c0:84: a0:b8:14:a4:4a:6d:59:d0:13:cb:5d:b2:56:ea:ca:3d:b0:84: f6:a2:ec:a0:ca:72:29:97:8d:f5:c7:f4:50:3b:d8:cc:fe:e3: 9e:38:6e:31:62:f6:64:ff:28:86:4a:7e:59:f5:2e:95:a2:a3: 21:a4:e1:ec:95:85:16:2d:b1:86:c7:f4:fc:91:76:a3:69:55: 1a:dc:c8:9a:84:32:4c:57:87:f9:bf:44:fc:5a:04:93:17:a8: 60:7d:df:37:79:3b:43:31:a8:54:ed:1a:7e:c5:e1:fe:f8:d5: 8b:9c:17:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcec08bC70M1r8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw MDEyMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDM3NzgyMjQtYjgwYi00MDYzLTgxZDMtNzJkNWM4NGVhZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY3SwhiHgad4lzNB1yUzkS5LFIfrcPf79SjG RbjdyZv/te+LrqOsD5pJCg8t8v7rPxNc6CKe+BCwECo0vzgEViE0bTqVVqwf1ZS8 HosLheUdjHjcJdCWRtRPGKse1moYlN+j3/Grf9sdoKhsEMqevmheSFEo438xGEKT aMxjULTCGviURBMWbbEyAxnbjLVut8vYhxYe+QgVctYXDut8/0jxiBSC0t4K3HbP 1uaz0kOoTEL8dIiBfh8AmE/t2it7dirSt07dHV3nj1sjOxr4LUOJNbRYlBXm20x7 njkzT7uaBm0Us8h21dwzZQ36AAOUqDpkgXL31VC8qNYVmAO/DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOI06I/I2Rcf2FL1oE41FxcMc49/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1 MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvOTBiMDhhZjMtOWViNS0z ODMwLTk3ZmItMGZmZGE5OTA1YjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx NzI5YTAwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9IgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZjgwf/gIt5tYgh3z0xolTBC0IBZNdhpXUNQJ1gy88bh3FTH/bujZ2s YSqrImkQIsUl/NK2d5hPZzJ88Nc5caF8F2lP09lEnxk60YlRVzCJ3oyOj2nGwjY3 QnkOEyX0AvzrAduLvxQzJ3MhRIctcZPVgR2AziFqW0u2VaLRh19Fe96t1Us5xd2G gOAoNRHAhKC4FKRKbVnQE8tdslbqyj2whPai7KDKcimXjfXH9FA72Mz+4544bjFi 9mT/KIZKfln1LpWioyGk4eyVhRYtsYbH9PyRdqNpVRrcyJqEMkxXh/m/RPxaBJMX qGB93zd5O0MxqFTtGn7F4f741YucFz8= -----END CERTIFICATE-----Generated at Tue Oct 21 17:59:05 2025 by rpki-client