$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7f1aaa-9000-3948-aa63-0de9d46a8886.roa File: 2d7f1aaa-9000-3948-aa63-0de9d46a8886.roa (raw, json) Hash identifier: NV0xwyvmju2EsPR2tZ1NKtCtXIPIUDCQY5PGpClC57c= Subject key identifier: DE:C6:F5:F1:4D:F5:0B:ED:DA:8F:1B:28:AF:6C:04:CC:52:67:AE:D9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0F5B3477A2805F16F34980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7f1aaa-9000-3948-aa63-0de9d46a8886.roa Signing time: Wed 18 Jun 2025 18:00:12 +0000 ROA not before: Wed 18 Jun 2025 18:00:12 +0000 ROA not after: Tue 16 Sep 2025 18:00:12 +0000 asID: 22773 IP address blocks: 24.251.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:5b:34:77:a2:80:5f:16:f3:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:12 2025 GMT Not After : Sep 16 18:00:12 2025 GMT Subject: CN=d48811e0-85a1-484a-b301-cd2def5a8ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1c:c7:4c:cd:ba:cc:f5:f0:f2:fc:3c:de:28: 19:6d:c2:17:1d:ee:c9:aa:67:39:64:95:e6:13:d9: d0:8d:60:78:69:c4:3a:52:1d:6e:eb:1d:3f:46:c0: bf:8b:67:70:e9:12:32:7e:38:63:50:01:8b:99:0a: 71:e3:7c:03:88:db:b4:1b:4f:63:b3:37:f6:ff:9e: dc:e2:d6:0a:a6:3c:0d:89:1b:b6:92:22:6e:b5:26: d9:fd:7e:26:1e:8c:45:08:50:5d:38:f5:de:a3:09: 7b:26:f2:99:16:5a:6f:71:b2:47:0c:5e:42:d0:44: 66:1f:f7:36:5e:51:6f:82:b6:6b:a6:61:f2:26:62: ad:c3:99:f4:89:1a:3e:8e:f1:e3:54:e9:6f:e9:cf: a0:92:bd:bf:58:3f:46:e2:35:8f:31:b2:7a:95:52: 55:fe:2c:2b:1d:a9:e4:76:55:52:c9:c4:26:51:60: 37:90:dd:05:2c:61:4e:3e:bd:72:d9:96:e0:2d:6c: bf:ff:b0:76:d9:94:3e:7f:03:2a:c0:f0:b1:36:7d: fb:55:dd:3d:76:1d:84:5a:99:58:e8:bb:0b:0e:22: fd:98:c9:68:91:61:37:ef:d1:31:6d:7d:06:c4:bc: 1f:d2:80:18:c1:6b:b1:0a:e0:e8:22:61:03:f1:0f: 78:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C6:F5:F1:4D:F5:0B:ED:DA:8F:1B:28:AF:6C:04:CC:52:67:AE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7f1aaa-9000-3948-aa63-0de9d46a8886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:59:37:91:d6:12:41:c4:8f:d0:09:6a:dd:77:dd:b0:07:e4: d5:12:66:d6:09:f0:35:06:ab:1c:10:ed:ee:19:6c:e8:cd:d3: 7f:51:70:8f:21:b3:70:b6:23:94:15:4d:90:56:e9:1f:b9:7d: 5c:6d:e9:91:c7:3c:fd:25:e7:d7:6e:5a:5f:74:e5:47:a2:ea: 93:91:4a:79:b3:f2:09:47:56:2d:9e:91:02:2d:f6:79:63:79: d0:02:43:e1:9f:aa:21:ea:b5:ae:ec:16:10:46:3f:c0:96:f3: 67:dc:19:ab:0a:b5:bd:aa:6e:ab:66:11:70:7c:c7:34:6c:00: be:ee:cb:f9:fa:f7:f7:ba:b4:d6:17:01:91:98:35:54:ba:1b: ad:5f:9b:0b:38:a1:22:38:cb:d5:6e:5a:11:b0:47:e5:62:4c: 56:26:9a:bd:06:1a:17:a9:fb:5e:29:20:8a:45:fb:a8:82:02: e1:04:20:98:82:73:8a:55:0a:9a:4e:48:f7:83:21:38:4f:8c: 24:01:76:c3:ab:83:49:43:8a:c8:3f:a2:ea:fb:6b:ad:b7:c0: 82:8a:51:9d:d9:3d:59:e4:a0:e9:28:24:95:f8:03:cd:66:d6: 06:d5:f4:16:46:f8:62:63:d6:ac:31:c7:b5:29:18:ee:de:f4: 2a:8b:25:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D1s0d6KAXxbzSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDAxMloXDTI1MDkxNjE4MDAxMlowLzEtMCsGA1UEAxMk ZDQ4ODExZTAtODVhMS00ODRhLWIzMDEtY2QyZGVmNWE4ZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxzHTM26zPXw8vw83igZbcIXHe7Jqmc5ZJXm E9nQjWB4acQ6Uh1u6x0/RsC/i2dw6RIyfjhjUAGLmQpx43wDiNu0G09jszf2/57c 4tYKpjwNiRu2kiJutSbZ/X4mHoxFCFBdOPXeowl7JvKZFlpvcbJHDF5C0ERmH/c2 XlFvgrZrpmHyJmKtw5n0iRo+jvHjVOlv6c+gkr2/WD9G4jWPMbJ6lVJV/iwrHank dlVSycQmUWA3kN0FLGFOPr1y2ZbgLWy//7B22ZQ+fwMqwPCxNn37Vd09dh2EWplY 6LsLDiL9mMlokWE379ExbX0GxLwf0oAYwWuxCuDoImED8Q949wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7G9fFN9Qvt2o8bKK9sBMxSZ67ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmQ3ZjFhYWEtOTAwMC0z OTQ4LWFhNjMtMGRlOWQ0NmE4ODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxZN5HWEkHEj9AJat133bAH5NUSZtYJ8DUGqxwQ7e4ZbOjN039RcI8h s3C2I5QVTZBW6R+5fVxt6ZHHPP0l59duWl905Uei6pORSnmz8glHVi2ekQIt9nlj edACQ+GfqiHqta7sFhBGP8CW82fcGasKtb2qbqtmEXB8xzRsAL7uy/n69/e6tNYX AZGYNVS6G61fmws4oSI4y9VuWhGwR+ViTFYmmr0GGhep+14pIIpF+6iCAuEEIJiC c4pVCppOSPeDIThPjCQBdsOrg0lDisg/our7a623wIKKUZ3ZPVnkoOkoJJX4A81m 1gbV9BZG+GJj1qwxx7UpGO7e9CqLJaU= -----END CERTIFICATE-----Generated at Wed Jul 2 06:40:33 2025 by rpki-client