$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068c603-5ef9-3feb-a13e-21b239a7beb4.roa File: 2068c603-5ef9-3feb-a13e-21b239a7beb4.roa (raw, json) Hash identifier: hQcUAJY1cN+TdXILjKsihZbS+MZOY9dGONr46D76av4= Subject key identifier: D9:2A:02:EF:98:1C:65:4F:12:75:0B:ED:D6:21:D0:00:B2:2C:38:0E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0F99304A45A836E8E7A380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068c603-5ef9-3feb-a13e-21b239a7beb4.roa Signing time: Wed 18 Jun 2025 18:00:42 +0000 ROA not before: Wed 18 Jun 2025 18:00:42 +0000 ROA not after: Tue 16 Sep 2025 18:00:42 +0000 asID: 22773 IP address blocks: 24.251.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:99:30:4a:45:a8:36:e8:e7:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:42 2025 GMT Not After : Sep 16 18:00:42 2025 GMT Subject: CN=5d4dc559-52e6-4ef2-b8fe-dc15544ad327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:6a:c9:e2:49:07:81:53:c2:5a:a1:bd:32: 6c:09:c5:aa:ca:28:7b:85:e4:ef:df:73:0f:11:fa: 13:99:fa:0e:e6:18:d8:d1:eb:52:64:54:ee:e9:1e: 5a:ca:66:bc:2a:27:2d:70:4b:f2:59:e5:f6:fc:29: 82:d7:d7:d8:91:c0:6f:ef:be:cb:38:ff:73:b3:5f: 78:39:e8:2d:d3:35:da:39:8c:c2:50:af:a0:ed:a8: 27:ee:59:0c:14:86:48:83:98:fe:ab:ae:ec:56:75: a8:54:11:fd:e4:e0:72:6f:aa:aa:ab:55:99:36:2e: 0b:20:02:6b:1a:42:42:3f:35:54:03:67:26:d3:23: 35:01:03:ac:0b:19:56:d8:98:8b:1e:7d:e7:20:f7: b4:b8:16:22:88:c5:14:55:ba:37:de:ea:60:9e:b3: ca:bf:2c:9c:43:55:bc:c0:da:96:c2:c1:b4:91:ea: 6c:01:95:37:04:b2:4e:dd:9c:75:12:b5:23:cd:1a: 7e:ee:8c:c0:ec:75:bf:eb:0a:fd:7e:14:df:18:19: 93:bf:9b:27:c5:5f:31:0f:50:f4:da:ab:e4:ba:29: 92:5c:34:e1:6a:12:0c:3f:8b:f9:cd:a4:6a:74:76: 9c:61:6b:08:b6:d7:1f:c5:3d:a1:d7:e5:d1:57:6a: 4d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2A:02:EF:98:1C:65:4F:12:75:0B:ED:D6:21:D0:00:B2:2C:38:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068c603-5ef9-3feb-a13e-21b239a7beb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:97:5b:99:e3:61:fd:dc:c2:23:cc:a6:3b:9a:5d:24:47:bc: 06:e5:6d:f3:23:cc:f9:ce:d2:b6:5d:fe:77:46:0c:11:09:8b: c3:2f:cf:9e:6c:b8:d6:37:2f:17:78:e5:75:2b:ac:fb:1a:d9: 83:3a:d8:f7:d7:b7:4f:a6:0a:cb:bd:b3:8a:7c:7a:f4:81:0f: db:73:31:e0:7c:77:58:ad:e9:b7:aa:74:91:98:e6:2d:29:97: 03:37:85:00:a6:8a:d5:38:b0:c9:35:cd:e1:f0:67:b6:76:4f: 42:20:ac:00:8b:7d:e8:cd:aa:34:c7:78:46:2c:99:e1:33:0c: 52:d9:0d:13:e9:42:56:c0:6c:c1:5b:c7:05:9b:50:aa:4a:01: 1e:d0:86:a0:dd:67:2b:21:25:b2:f4:26:2e:01:bf:da:8c:8f: 6b:08:ec:de:bc:f2:2a:d1:dd:2b:ad:8c:62:9a:c0:4e:c8:82: 78:c3:02:9d:0c:6f:3d:3e:81:96:2e:a1:77:a6:b8:58:0a:15: 48:ad:28:5d:78:da:50:a2:6b:53:69:7e:25:aa:5c:c6:fa:23: 46:4f:e8:ae:c8:00:4a:98:c3:b1:f9:85:be:8b:02:9b:de:20: 0a:7b:ae:ad:55:61:f3:df:55:99:4e:4e:52:e7:34:fe:bd:0a: 93:6f:c2:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D5kwSkWoNujno4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDA0MloXDTI1MDkxNjE4MDA0MlowLzEtMCsGA1UEAxMk NWQ0ZGM1NTktNTJlNi00ZWYyLWI4ZmUtZGMxNTU0NGFkMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuRqyeJJB4FTwlqhvTJsCcWqyih7heTv33MP EfoTmfoO5hjY0etSZFTu6R5ayma8KictcEvyWeX2/CmC19fYkcBv777LOP9zs194 Oegt0zXaOYzCUK+g7agn7lkMFIZIg5j+q67sVnWoVBH95OByb6qqq1WZNi4LIAJr GkJCPzVUA2cm0yM1AQOsCxlW2JiLHn3nIPe0uBYiiMUUVbo33upgnrPKvyycQ1W8 wNqWwsG0kepsAZU3BLJO3Zx1ErUjzRp+7ozA7HW/6wr9fhTfGBmTv5snxV8xD1D0 2qvkuimSXDThahIMP4v5zaRqdHacYWsIttcfxT2h1+XRV2pNdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkqAu+YHGVPEnUL7dYh0ACyLDgOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjA2OGM2MDMtNWVmOS0z ZmViLWExM2UtMjFiMjM5YTdiZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPukMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCXW5njYf3cwiPMpjuaXSRHvAblbfMjzPnO0rZd/ndGDBEJi8Mvz55s uNY3Lxd45XUrrPsa2YM62PfXt0+mCsu9s4p8evSBD9tzMeB8d1it6beqdJGY5i0p lwM3hQCmitU4sMk1zeHwZ7Z2T0IgrACLfejNqjTHeEYsmeEzDFLZDRPpQlbAbMFb xwWbUKpKAR7QhqDdZyshJbL0Ji4Bv9qMj2sI7N688irR3SutjGKawE7IgnjDAp0M bz0+gZYuoXemuFgKFUitKF142lCia1NpfiWqXMb6I0ZP6K7IAEqYw7H5hb6LApve IAp7rq1VYfPfVZlOTlLnNP69CpNvwvY= -----END CERTIFICATE-----Generated at Tue Jul 1 07:02:50 2025 by rpki-client