$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/22a238f3-51a5-3823-8800-7162d152d950.roa File: 22a238f3-51a5-3823-8800-7162d152d950.roa (raw, json) Hash identifier: xdCNj+klb5OvRML7MeXH1Jb2oHcbJRccRkpXI94e2ds= Subject key identifier: EC:38:2A:AF:E6:66:A6:8E:63:50:D8:2E:E6:3C:0A:2C:63:74:3F:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFE6215BA2695ACF64B7D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/22a238f3-51a5-3823-8800-7162d152d950.roa Signing time: Thu 19 Jun 2025 10:37:37 +0000 ROA not before: Thu 19 Jun 2025 10:37:37 +0000 ROA not after: Wed 17 Sep 2025 10:37:37 +0000 asID: 22773 IP address blocks: 174.74.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fe:62:15:ba:26:95:ac:f6:4b:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:37:37 2025 GMT Not After : Sep 17 10:37:37 2025 GMT Subject: CN=b1bd9ffb-adc7-4f54-b71f-6d5579490b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f6:73:24:cd:be:23:87:f1:1b:2c:fb:25:23: fb:0e:63:8c:d1:58:2d:c1:db:ac:bd:5c:9f:e0:f4: 8d:66:83:de:5d:12:04:09:bf:f9:02:10:42:2d:f4: 59:21:3e:75:ea:98:0c:97:da:75:34:96:c4:5f:81: e2:0f:b5:d9:f9:b1:ed:e2:36:57:98:fb:6f:1c:a4: 6c:40:50:dd:98:f8:e6:54:3e:70:ce:86:2f:43:3f: ee:55:1c:80:d2:57:8b:fc:31:bc:f5:5d:1e:37:0e: 19:f8:6c:a4:d5:b6:d4:d3:ff:b4:d8:0f:5b:12:21: 1e:0f:99:45:82:ea:fa:85:e7:d8:f8:88:29:2e:73: 89:51:ee:09:c9:3f:e3:ad:86:b1:7a:f4:3f:c4:9d: a0:a7:95:b4:d1:6d:09:3a:fe:bb:5e:72:89:45:fe: 7b:2e:e5:c2:e2:5a:f0:d9:ec:44:14:22:e8:0a:46: ac:da:60:ee:d9:95:1f:94:b2:84:be:ec:a1:06:d1: 1b:92:70:98:3e:ce:da:ba:ce:da:68:7e:ac:bb:97: 2d:de:63:ab:5c:a1:97:f2:3c:bc:24:d4:b5:60:20: ee:84:a7:f4:53:ee:49:80:47:2b:89:d5:45:f1:75: 44:35:13:e4:ad:2f:ed:59:32:57:af:38:54:59:0f: 30:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:38:2A:AF:E6:66:A6:8E:63:50:D8:2E:E6:3C:0A:2C:63:74:3F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/22a238f3-51a5-3823-8800-7162d152d950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.74.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:98:e3:66:b5:12:b4:36:ef:13:2f:8f:5e:88:84:c3:a1:dc: f6:77:02:d5:92:e7:e0:dd:0e:a3:b7:b2:6e:e4:e5:4e:07:63: bc:eb:ee:e4:2e:99:d9:df:f4:e6:82:96:13:8a:45:2d:9d:89: ea:6a:8b:ed:44:14:88:07:ad:aa:d4:44:5f:0e:2f:08:52:bc: b6:6b:a0:e6:20:cf:a5:7f:e3:bf:cf:38:75:3b:75:96:ea:a4: d6:10:01:4a:e1:a0:bb:8d:ac:4d:a4:8c:16:61:8b:24:2f:e2: 31:40:29:db:d1:f0:1d:28:94:49:f4:1e:83:a3:2a:48:c5:e1: 8e:7b:f6:a3:f7:f5:0b:16:97:2d:71:9c:8c:5a:55:32:69:c2: 43:6c:44:63:72:35:9e:58:c1:68:2f:3c:c5:7f:9e:35:25:7c: ec:2f:29:a8:66:e1:f9:d7:84:44:fa:c2:e6:a5:c3:a9:49:5e: 74:1b:37:64:f9:18:a2:7c:0b:fd:81:fc:95:d0:a7:96:92:24: 3a:ba:f1:56:a0:33:f2:9c:dd:26:04:2d:56:70:15:f2:cf:b6: 20:44:26:46:98:41:0c:a0:7b:2c:2b:3a:4a:d7:07:04:94:7c: f0:a9:5e:d8:9f:32:51:5d:c4:a3:67:d2:37:80:22:91:de:0c: 20:bf:e8:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/mIVuiaVrPZLfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzczN1oXDTI1MDkxNzEwMzczN1owLzEtMCsGA1UEAxMk YjFiZDlmZmItYWRjNy00ZjU0LWI3MWYtNmQ1NTc5NDkwYjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPZzJM2+I4fxGyz7JSP7DmOM0VgtwdusvVyf 4PSNZoPeXRIECb/5AhBCLfRZIT516pgMl9p1NJbEX4HiD7XZ+bHt4jZXmPtvHKRs QFDdmPjmVD5wzoYvQz/uVRyA0leL/DG89V0eNw4Z+Gyk1bbU0/+02A9bEiEeD5lF gur6hefY+IgpLnOJUe4JyT/jrYaxevQ/xJ2gp5W00W0JOv67XnKJRf57LuXC4lrw 2exEFCLoCkas2mDu2ZUflLKEvuyhBtEbknCYPs7aus7aaH6su5ct3mOrXKGX8jy8 JNS1YCDuhKf0U+5JgEcridVF8XVENRPkrS/tWTJXrzhUWQ8wVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOw4Kq/mZqaOY1DYLuY8CixjdD9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjJhMjM4ZjMtNTFhNS0z ODIzLTg4MDAtNzE2MmQxNTJkOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkqXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2Y42a1ErQ27xMvj16IhMOh3PZ3AtWS5+DdDqO3sm7k5U4HY7zr7uQu mdnf9OaClhOKRS2diepqi+1EFIgHrarURF8OLwhSvLZroOYgz6V/47/POHU7dZbq pNYQAUrhoLuNrE2kjBZhiyQv4jFAKdvR8B0olEn0HoOjKkjF4Y579qP39QsWly1x nIxaVTJpwkNsRGNyNZ5YwWgvPMV/njUlfOwvKahm4fnXhET6wualw6lJXnQbN2T5 GKJ8C/2B/JXQp5aSJDq68VagM/Kc3SYELVZwFfLPtiBEJkaYQQygeywrOkrXBwSU fPCpXtifMlFdxKNn0jeAIpHeDCC/6OU= -----END CERTIFICATE-----Generated at Tue Jul 1 08:17:41 2025 by rpki-client