$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bd708ac-95c9-3ff5-a5e8-367201124ff5.roa File: 1bd708ac-95c9-3ff5-a5e8-367201124ff5.roa (raw, json) Hash identifier: LxZDNZP+Amml2IJ2XDZVGtLQ0LgJG0M4IxoaP1ma++Q= Subject key identifier: 12:81:75:A6:04:22:5C:31:68:A0:E2:69:01:B8:CE:46:16:03:D4:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A5B95B7F91D76BD43B5A0C280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bd708ac-95c9-3ff5-a5e8-367201124ff5.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 22773 IP address blocks: 24.248.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b7:f9:1d:76:bd:43:b5:a0:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=2a333e4c-4ed0-4012-ad61-96ddad599061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f8:24:82:51:65:bc:d5:e5:72:c0:19:4c:bc: bf:4e:da:8d:08:67:b2:29:46:31:7c:af:03:be:04: 9a:38:92:97:ca:8b:33:c9:0f:83:83:26:84:56:fa: 13:ca:ad:a7:42:f1:b4:1f:d5:be:74:38:8c:43:b4: 9b:dc:1c:0a:ab:82:78:1e:9d:04:40:99:c4:b6:20: bd:91:a3:ee:d2:00:81:13:5b:bc:f4:25:8a:f3:2c: 1b:61:be:de:cc:ba:a8:9c:ca:c6:cb:80:41:97:4f: f5:73:22:be:64:a3:b4:e2:8d:08:8e:ec:e4:28:87: c7:80:31:f3:20:a6:c4:1b:f6:c3:68:1d:31:80:b6: 83:17:a8:04:63:15:f3:3c:68:f4:09:ee:c3:5b:30: bb:3a:95:70:16:86:9c:c0:9c:81:5a:6a:70:3f:c7: 09:c6:56:5a:f5:55:84:bc:fc:cc:df:d4:01:87:f1: 3a:26:36:77:0f:a9:1e:42:5b:8e:a7:54:34:a6:f7: ae:9b:fb:29:b7:e6:27:d7:5d:a4:16:45:02:91:61: 27:5e:ff:52:a6:ff:cd:e6:a2:41:7a:8e:b3:fa:91: 63:56:67:76:24:43:96:e2:dc:3a:06:fa:2f:1f:cc: 71:61:6e:c1:be:e6:09:e3:64:48:f2:08:bd:cb:b4: 54:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:81:75:A6:04:22:5C:31:68:A0:E2:69:01:B8:CE:46:16:03:D4:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bd708ac-95c9-3ff5-a5e8-367201124ff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.248.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:2e:d2:69:11:6b:c7:91:58:d5:fc:88:9f:e9:0f:b5:6a:3e: f2:4d:8e:7d:c2:0d:e9:cd:8b:6c:6b:2c:c9:74:88:a3:05:91: 3b:99:c1:87:52:9c:5a:a9:c4:07:15:9c:1e:77:ab:bb:bc:cd: 23:fc:f4:5a:31:83:7c:77:fe:61:3e:03:2a:70:50:77:55:23: a6:26:6e:f1:46:2a:d9:f7:d2:6c:38:e4:9a:84:2e:3c:23:95: b2:ff:cc:20:08:d4:b2:12:eb:81:26:f7:e9:12:2d:9d:68:e5: a9:59:15:61:86:38:5d:01:d0:cb:fe:43:47:cc:23:97:89:dd: df:ae:05:07:a6:47:4c:f0:ce:35:20:49:e9:1b:ae:43:4c:25: 2a:38:71:8f:e8:d1:89:0f:e0:c1:87:04:ea:a4:d4:2e:3a:4d: 09:a4:00:64:d1:b4:f6:83:29:8d:05:1d:55:2b:10:1d:35:eb: 16:32:0b:39:6f:03:e7:ef:85:ca:7d:13:c0:ff:44:03:fe:b1: d7:0e:eb:c9:cc:ff:e0:16:66:e2:a6:95:7d:d6:90:2f:c9:fa: ec:49:09:7f:03:f8:69:81:38:9c:65:2e:4e:03:e2:d8:03:24: db:9e:93:7e:8d:24:b1:e8:f2:33:97:9c:04:25:26:ff:23:0f: 4d:cb:e1:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbf5HXa9Q7WgwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk MmEzMzNlNGMtNGVkMC00MDEyLWFkNjEtOTZkZGFkNTk5MDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPgkglFlvNXlcsAZTLy/TtqNCGeyKUYxfK8D vgSaOJKXyoszyQ+DgyaEVvoTyq2nQvG0H9W+dDiMQ7Sb3BwKq4J4Hp0EQJnEtiC9 kaPu0gCBE1u89CWK8ywbYb7ezLqonMrGy4BBl0/1cyK+ZKO04o0IjuzkKIfHgDHz IKbEG/bDaB0xgLaDF6gEYxXzPGj0Ce7DWzC7OpVwFoacwJyBWmpwP8cJxlZa9VWE vPzM39QBh/E6JjZ3D6keQluOp1Q0pveum/spt+Yn112kFkUCkWEnXv9Spv/N5qJB eo6z+pFjVmd2JEOW4tw6BvovH8xxYW7BvuYJ42RI8gi9y7RUfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKBdaYEIlwxaKDiaQG4zkYWA9SRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWJkNzA4YWMtOTVjOS0z ZmY1LWE1ZTgtMzY3MjAxMTI0ZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcu0mkRa8eRWNX8iJ/pD7VqPvJNjn3CDenNi2xrLMl0iKMFkTuZwYdS nFqpxAcVnB53q7u8zSP89Foxg3x3/mE+AypwUHdVI6YmbvFGKtn30mw45JqELjwj lbL/zCAI1LIS64Em9+kSLZ1o5alZFWGGOF0B0Mv+Q0fMI5eJ3d+uBQemR0zwzjUg SekbrkNMJSo4cY/o0YkP4MGHBOqk1C46TQmkAGTRtPaDKY0FHVUrEB016xYyCzlv A+fvhcp9E8D/RAP+sdcO68nM/+AWZuKmlX3WkC/J+uxJCX8D+GmBOJxlLk4D4tgD JNuek36NJLHo8jOXnAQlJv8jD03L4Yw= -----END CERTIFICATE-----Generated at Wed Jul 2 05:23:09 2025 by rpki-client