$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31ee88bc-f153-3fa8-b9b6-7fe23e1494d8.roa File: 31ee88bc-f153-3fa8-b9b6-7fe23e1494d8.roa (raw, json) Hash identifier: ZBIZjg0IfOumGHPzzOT+tIzANh7DsAoEmh+J3VgQDOU= Subject key identifier: 9D:26:20:9F:25:60:AB:A1:07:8C:61:DF:FC:53:B0:87:4E:49:B2:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849E38A3AE8C9C137BA106D2100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31ee88bc-f153-3fa8-b9b6-7fe23e1494d8.roa Signing time: Sun 18 May 2025 01:00:47 +0000 ROA not before: Sun 18 May 2025 01:00:47 +0000 ROA not after: Sat 16 Aug 2025 01:00:47 +0000 asID: 22773 IP address blocks: 24.248.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:8a:3a:e8:c9:c1:37:ba:10:6d:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 18 01:00:47 2025 GMT Not After : Aug 16 01:00:47 2025 GMT Subject: CN=551e1195-4e0d-47ba-b2d6-5cb31ba1ea90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9d:60:87:5b:3c:bd:ab:0a:a5:4b:69:01:e0: fe:85:b0:61:5a:f2:75:f7:db:6e:f5:e6:50:d8:37: ab:62:e0:28:0d:58:22:d5:92:82:b5:ff:4c:ff:3b: 0b:f5:72:11:04:ff:fe:9d:94:f6:9e:fd:71:67:a2: 67:aa:ce:50:a4:c8:26:a7:46:91:a3:c5:0a:0a:45: 5e:ee:9e:44:0f:75:e8:e9:30:d0:76:0e:0b:0f:35: ed:38:70:52:df:6a:af:f1:23:02:ec:0c:62:e0:a1: 21:64:26:72:91:dc:1e:df:fc:a9:cc:79:47:ef:22: f6:17:ea:cc:07:75:70:b1:32:40:1d:3d:4d:23:16: 1c:ef:96:34:0c:9c:cc:7c:76:96:14:e0:57:cc:f7: c3:9c:37:58:0c:71:c4:f0:35:75:c3:a2:5e:50:4c: 52:33:25:63:3a:93:3f:48:c4:47:af:e3:1d:22:5a: 73:fb:79:b0:33:13:b3:d2:80:4c:d7:66:a9:a7:39: d4:ee:bd:73:ef:5d:63:2f:62:41:bd:9f:0f:0d:28: a2:89:ab:54:0f:e2:a1:0f:6c:c7:8c:95:b4:98:01: 5c:b5:a4:cf:f5:a4:ee:43:f2:b6:27:fd:65:ea:6b: 68:1b:30:dd:35:90:52:b8:a8:c5:0b:d9:ef:1c:fe: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:26:20:9F:25:60:AB:A1:07:8C:61:DF:FC:53:B0:87:4E:49:B2:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31ee88bc-f153-3fa8-b9b6-7fe23e1494d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.248.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5c:22:73:43:f5:ff:60:f1:9a:0b:95:25:93:28:cf:84:7f: e9:75:3e:ff:90:b2:bd:a9:ed:34:74:8a:36:1b:ff:14:ed:d9: 85:59:d6:c5:01:bf:6d:53:75:09:c0:8d:a5:37:87:5d:0f:85: a9:03:63:b5:00:dc:b3:62:f0:19:6e:05:43:e3:75:51:3c:32: 35:45:8a:ee:19:c4:2a:f4:31:77:39:2f:c4:04:c2:4b:dc:86: dd:b7:36:71:82:0f:34:1e:ef:c5:ac:d0:44:d0:6c:84:d5:f9: 68:b5:a0:4c:8f:b6:58:f2:0a:16:98:5a:89:72:6f:f1:1f:af: 47:d6:1f:4e:39:72:9a:1c:02:c8:d8:1b:48:6e:21:61:c5:da: da:c1:23:ee:7d:84:e9:4e:a4:f8:77:b1:60:32:b8:7b:79:5a: d2:38:c0:2a:95:5e:2d:9f:f9:75:bf:b4:55:59:b4:51:38:cf: d1:d1:db:52:ed:5a:70:07:fb:4d:08:98:fd:8d:4f:58:44:b1: f1:5d:13:4c:9a:d5:07:5f:b2:93:3a:f2:7f:81:f9:07:26:81: d6:6c:a8:b4:4a:74:50:59:12:a7:cb:81:70:b1:d6:2e:02:6a: 97:58:23:87:4b:a2:5b:b7:6a:40:0f:12:33:ac:9b:8c:9a:6b: bf:0b:0f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjijroycE3uhBtIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUxODAxMDA0N1oXDTI1MDgxNjAxMDA0N1owLzEtMCsGA1UEAxMk NTUxZTExOTUtNGUwZC00N2JhLWIyZDYtNWNiMzFiYTFlYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ1gh1s8vasKpUtpAeD+hbBhWvJ199tu9eZQ 2DerYuAoDVgi1ZKCtf9M/zsL9XIRBP/+nZT2nv1xZ6Jnqs5QpMgmp0aRo8UKCkVe 7p5ED3Xo6TDQdg4LDzXtOHBS32qv8SMC7Axi4KEhZCZykdwe3/ypzHlH7yL2F+rM B3VwsTJAHT1NIxYc75Y0DJzMfHaWFOBXzPfDnDdYDHHE8DV1w6JeUExSMyVjOpM/ SMRHr+MdIlpz+3mwMxOz0oBM12appznU7r1z711jL2JBvZ8PDSiiiatUD+KhD2zH jJW0mAFctaTP9aTuQ/K2J/1l6mtoGzDdNZBSuKjFC9nvHP4aKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0mIJ8lYKuhB4xh3/xTsIdOSbJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzFlZTg4YmMtZjE1My0z ZmE4LWI5YjYtN2ZlMjNlMTQ5NGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxcInND9f9g8ZoLlSWTKM+Ef+l1Pv+Qsr2p7TR0ijYb/xTt2YVZ1sUB v21TdQnAjaU3h10PhakDY7UA3LNi8BluBUPjdVE8MjVFiu4ZxCr0MXc5L8QEwkvc ht23NnGCDzQe78Ws0ETQbITV+Wi1oEyPtljyChaYWolyb/Efr0fWH045cpocAsjY G0huIWHF2trBI+59hOlOpPh3sWAyuHt5WtI4wCqVXi2f+XW/tFVZtFE4z9HR21Lt WnAH+00ImP2NT1hEsfFdE0ya1QdfspM68n+B+QcmgdZsqLRKdFBZEqfLgXCx1i4C apdYI4dLolu3akAPEjOsm4yaa78LD3A= -----END CERTIFICATE-----Generated at Wed Jul 2 11:47:47 2025 by rpki-client