$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1cef33b8-4bb4-3337-85e5-b2214bd6801b.roa File: 1cef33b8-4bb4-3337-85e5-b2214bd6801b.roa (raw, json) Hash identifier: Qt8LmB2WkGiMKtdkow3dQHDKDyHUbm4eNhXBzXHNMgo= Subject key identifier: 2D:65:3B:A3:CE:1F:BE:45:53:BD:89:43:85:B7:11:09:F6:06:22:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F4E8A416E0E0F2F1A64F20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1cef33b8-4bb4-3337-85e5-b2214bd6801b.roa Signing time: Thu 01 May 2025 17:08:36 +0000 ROA not before: Thu 01 May 2025 17:08:36 +0000 ROA not after: Wed 30 Jul 2025 17:08:36 +0000 asID: 22773 IP address blocks: 24.250.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f4:e8:a4:16:e0:e0:f2:f1:a6:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:36 2025 GMT Not After : Jul 30 17:08:36 2025 GMT Subject: CN=ba3ed0af-f841-4f3c-ae0f-159b3301178f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f8:39:18:8f:0f:38:45:d0:b7:94:fd:58:42: d0:a4:38:8a:f2:8b:7d:6b:dd:ae:59:e1:97:76:d6: 16:de:ea:80:0d:41:12:d8:4f:49:58:9d:f6:92:30: 29:38:a5:9c:e4:7f:59:a8:e3:20:b8:e2:3d:e9:1c: 3c:c1:24:94:64:61:01:d6:9c:6b:98:03:57:7e:b9: b4:e8:df:2b:18:91:78:a8:5e:2f:af:01:87:23:63: 24:38:47:9f:2a:3d:8d:0a:6f:fa:7b:41:e7:6e:1b: 10:59:1c:a8:f2:2a:dc:1d:e4:d8:fd:08:ee:73:06: 84:ab:84:92:73:a3:36:ee:ed:b2:06:41:22:c5:a0: 3f:b6:0d:ed:09:8e:6d:ac:9d:b8:ab:ae:0a:23:f8: 1a:a3:18:05:82:79:85:7d:73:b3:29:3d:9b:4d:b2: 98:e1:a9:f8:7b:6f:4f:67:7a:28:b4:2e:56:cf:46: 6b:27:fd:3d:98:c3:02:65:67:8b:34:9a:de:36:0b: 60:d3:6e:03:bb:4e:e6:4f:07:45:c1:c4:5f:27:88: ef:8f:4a:45:20:6b:91:77:6e:e6:ac:63:95:dc:f8: 1a:db:42:7f:2b:38:f8:4f:5b:54:ec:4d:b1:61:7e: db:cb:30:be:76:aa:3d:68:20:33:0f:4b:ac:69:ee: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:65:3B:A3:CE:1F:BE:45:53:BD:89:43:85:B7:11:09:F6:06:22:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1cef33b8-4bb4-3337-85e5-b2214bd6801b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.250.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:24:cc:fb:f8:8d:0e:d1:e0:89:e7:17:64:7e:8c:2a:3d:7b: 82:00:fa:16:41:b6:25:a0:e9:1d:0d:c1:b4:8b:e5:55:49:77: 94:5c:02:4b:74:15:7a:74:a9:7c:0c:94:d3:d8:d7:55:4b:c1: 63:2d:f7:8d:3a:b2:3e:4c:db:63:32:54:88:0e:8a:bd:cd:06: f5:84:67:8a:f7:11:12:d5:36:2b:f2:fd:0d:df:36:a9:9c:3f: ff:a1:00:eb:f7:74:ef:bc:00:88:c8:25:2e:04:4b:68:f1:f2: a2:38:77:94:56:f4:ae:07:cd:4e:0b:85:23:14:bf:d5:bc:a0: 42:b9:b9:39:ec:df:42:b2:d7:94:ca:01:4f:42:62:8d:e9:60: 48:89:4a:18:14:a9:0a:71:45:59:ec:0a:a3:be:74:84:83:05: 77:5a:3f:0f:fd:d3:6a:c6:db:43:8b:3f:f3:fe:b5:05:75:a5: 04:ab:f1:dc:e0:a5:71:f8:4b:11:ad:97:5d:97:2f:32:62:ae: c4:33:fb:6c:36:31:44:4d:30:94:db:1a:38:7f:57:a2:f7:d9: 8b:da:32:9e:ff:8a:f9:cc:2e:18:36:da:8f:7e:99:9b:d8:5f: cc:b0:16:38:37:66:8f:d4:97:5a:d0:c8:69:d9:27:4a:8d:49: cb:ec:02:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19OikFuDg8vGmTyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDgzNloXDTI1MDczMDE3MDgzNlowLzEtMCsGA1UEAxMk YmEzZWQwYWYtZjg0MS00ZjNjLWFlMGYtMTU5YjMzMDExNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/g5GI8POEXQt5T9WELQpDiK8ot9a92uWeGX dtYW3uqADUES2E9JWJ32kjApOKWc5H9ZqOMguOI96Rw8wSSUZGEB1pxrmANXfrm0 6N8rGJF4qF4vrwGHI2MkOEefKj2NCm/6e0HnbhsQWRyo8ircHeTY/QjucwaEq4SS c6M27u2yBkEixaA/tg3tCY5trJ24q64KI/gaoxgFgnmFfXOzKT2bTbKY4an4e29P Z3ootC5Wz0ZrJ/09mMMCZWeLNJreNgtg024Du07mTwdFwcRfJ4jvj0pFIGuRd27m rGOV3Pga20J/Kzj4T1tU7E2xYX7byzC+dqo9aCAzD0usae7BcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1lO6POH75FU72JQ4W3EQn2BiJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWNlZjMzYjgtNGJiNC0z MzM3LTg1ZTUtYjIyMTRiZDY4MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPoqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQkzPv4jQ7R4InnF2R+jCo9e4IA+hZBtiWg6R0NwbSL5VVJd5RcAkt0 FXp0qXwMlNPY11VLwWMt9406sj5M22MyVIgOir3NBvWEZ4r3ERLVNivy/Q3fNqmc P/+hAOv3dO+8AIjIJS4ES2jx8qI4d5RW9K4HzU4LhSMUv9W8oEK5uTns30Ky15TK AU9CYo3pYEiJShgUqQpxRVnsCqO+dISDBXdaPw/902rG20OLP/P+tQV1pQSr8dzg pXH4SxGtl12XLzJirsQz+2w2MURNMJTbGjh/V6L32YvaMp7/ivnMLhg22o9+mZvY X8ywFjg3Zo/Ul1rQyGnZJ0qNScvsAmo= -----END CERTIFICATE-----Generated at Sun May 11 14:53:27 2025 by rpki-client