$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3488763e-d46e-3215-b3d9-da4985524061.roa File: 3488763e-d46e-3215-b3d9-da4985524061.roa (raw, json) Hash identifier: G20UY0NSxeX0NkQJ/Q6pbSwoUtqlJ4dBu8flEKMpYkQ= Subject key identifier: B8:4D:F0:39:12:1D:30:F3:A2:A9:73:0D:5E:44:B2:42:76:6E:A7:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0FA3945F8ADFDB8DD7D4A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3488763e-d46e-3215-b3d9-da4985524061.roa Signing time: Wed 18 Jun 2025 18:00:46 +0000 ROA not before: Wed 18 Jun 2025 18:00:46 +0000 ROA not after: Tue 16 Sep 2025 18:00:46 +0000 asID: 22773 IP address blocks: 24.251.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:a3:94:5f:8a:df:db:8d:d7:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:46 2025 GMT Not After : Sep 16 18:00:46 2025 GMT Subject: CN=00840f4a-262e-4d92-9002-06a606068b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:69:f7:8f:d5:3a:21:36:c8:b5:b2:1b:05: 1b:03:03:3d:37:2d:60:80:9d:42:eb:3b:e7:2c:09: 68:00:1f:61:08:4f:a8:27:99:4d:4f:b5:00:2d:07: cc:9b:8a:35:cd:dd:e2:87:74:6d:40:fb:11:41:81: 64:91:22:e7:db:0e:27:33:0c:60:f6:9b:a8:ba:45: 42:b1:30:29:11:7e:de:22:8d:20:4a:e9:79:81:5a: 89:8f:ac:1b:25:a8:da:f9:d4:5c:35:29:4a:5b:9d: 32:f9:13:a6:d7:3f:9c:0b:ef:12:d7:3e:7f:56:64: a6:db:93:65:31:a5:ce:30:2c:74:7e:ef:4b:01:33: 40:53:cd:fc:57:74:0a:48:a8:0f:6b:9f:8d:ec:15: d1:bc:19:35:31:24:4b:53:39:4a:e4:8f:5d:a6:19: bd:61:ba:c4:31:5f:24:fb:d5:c6:1e:de:67:d2:5f: f8:23:f8:08:8f:07:ba:a9:63:9e:f4:1a:37:9b:58: 22:70:42:e6:b8:59:bb:91:f7:0f:4a:34:26:94:79: d6:8c:f7:0d:dd:cc:ed:9e:8d:f3:a0:97:3c:e7:8a: d7:fd:95:6e:52:a1:1c:ed:a6:cb:8d:7c:04:3d:6c: 59:c8:a1:2e:dd:cb:7d:05:ea:3e:90:05:54:69:ed: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4D:F0:39:12:1D:30:F3:A2:A9:73:0D:5E:44:B2:42:76:6E:A7:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3488763e-d46e-3215-b3d9-da4985524061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:56:f7:fe:48:ab:d2:55:6f:f9:65:a0:bc:a7:c9:e3:01:5b: 90:c8:ef:c5:23:f9:3c:ea:25:64:42:6b:5d:e1:ba:71:1f:90: 6a:81:09:03:3a:b7:e1:53:ce:70:d9:9a:0a:42:a3:cd:a3:07: 7e:45:f8:f2:d7:1c:2c:71:2f:ed:35:53:93:bb:90:ff:a7:f8: 80:27:48:76:72:83:86:ea:db:c6:20:14:59:3d:0e:2b:17:d8: bb:34:86:14:51:16:0e:29:71:72:76:96:eb:39:39:9b:1f:a7: 85:c4:e0:87:9d:29:69:d8:f3:c2:40:a2:47:c8:2b:b2:42:82: ad:fa:d0:38:c5:18:2d:33:6d:5b:18:2b:be:11:2c:24:6c:9f: bf:17:93:0f:4f:bb:61:f5:97:f1:ef:24:c3:c9:20:1a:ec:eb: ca:ee:31:ee:7b:52:76:d5:68:d6:89:4f:58:62:7e:3b:70:d4: 6c:57:a9:8f:70:00:12:56:f0:a4:f7:70:40:73:72:e7:65:36: 47:cf:85:16:40:1e:80:b4:88:1d:d0:2a:a7:f6:57:49:30:91: c2:94:93:7f:ad:a1:d7:22:7f:ab:d4:7e:46:53:d8:b6:73:82: db:f2:1b:48:2a:51:09:0f:17:f2:6b:d5:13:a1:05:3e:45:c5: b2:e4:39:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D6OUX4rf243X1KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDA0NloXDTI1MDkxNjE4MDA0NlowLzEtMCsGA1UEAxMk MDA4NDBmNGEtMjYyZS00ZDkyLTkwMDItMDZhNjA2MDY4YjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldxp94/VOiE2yLWyGwUbAwM9Ny1ggJ1C6zvn LAloAB9hCE+oJ5lNT7UALQfMm4o1zd3ih3RtQPsRQYFkkSLn2w4nMwxg9puoukVC sTApEX7eIo0gSul5gVqJj6wbJaja+dRcNSlKW50y+ROm1z+cC+8S1z5/VmSm25Nl MaXOMCx0fu9LATNAU838V3QKSKgPa5+N7BXRvBk1MSRLUzlK5I9dphm9YbrEMV8k +9XGHt5n0l/4I/gIjwe6qWOe9Bo3m1gicELmuFm7kfcPSjQmlHnWjPcN3cztno3z oJc854rX/ZVuUqEc7abLjXwEPWxZyKEu3ct9Beo+kAVUae3azQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhN8DkSHTDzoqlzDV5EskJ2bqcGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzQ4ODc2M2UtZDQ2ZS0z MjE1LWIzZDktZGE0OTg1NTI0MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPu8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5W9/5Iq9JVb/lloLynyeMBW5DI78Uj+TzqJWRCa13hunEfkGqBCQM6 t+FTznDZmgpCo82jB35F+PLXHCxxL+01U5O7kP+n+IAnSHZyg4bq28YgFFk9DisX 2Ls0hhRRFg4pcXJ2lus5OZsfp4XE4IedKWnY88JAokfIK7JCgq360DjFGC0zbVsY K74RLCRsn78Xkw9Pu2H1l/HvJMPJIBrs68ruMe57UnbVaNaJT1hifjtw1GxXqY9w ABJW8KT3cEBzcudlNkfPhRZAHoC0iB3QKqf2V0kwkcKUk3+todcif6vUfkZT2LZz gtvyG0gqUQkPF/Jr1ROhBT5FxbLkOU4= -----END CERTIFICATE-----Generated at Wed Jul 2 21:42:53 2025 by rpki-client