$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36e599cf-8f02-3b1f-a2cd-1a54caa6f8ad.roa File: 36e599cf-8f02-3b1f-a2cd-1a54caa6f8ad.roa (raw, json) Hash identifier: Tb6wubXR6wvuOxL5scr5Ek613Z6FfwFLW6hN0I9hhik= Subject key identifier: 3A:62:CF:65:0D:F5:D5:84:96:9C:8F:F0:BB:7B:EA:34:A6:91:7D:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0FB32E122015D1AB86D080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36e599cf-8f02-3b1f-a2cd-1a54caa6f8ad.roa Signing time: Wed 18 Jun 2025 18:00:54 +0000 ROA not before: Wed 18 Jun 2025 18:00:54 +0000 ROA not after: Tue 16 Sep 2025 18:00:54 +0000 asID: 22773 IP address blocks: 24.251.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:b3:2e:12:20:15:d1:ab:86:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:54 2025 GMT Not After : Sep 16 18:00:54 2025 GMT Subject: CN=caae58b6-e2bf-40a5-853e-6638e123fc55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:91:e2:c2:42:87:12:a8:2a:39:fa:a4:c9: b6:8d:d7:95:74:eb:44:99:ad:91:bf:ea:54:07:06: 34:4f:c6:a3:a9:2f:b8:43:ba:d4:5f:a0:45:e5:35: 7c:88:7e:0d:27:7b:e5:6a:b7:1c:b7:e1:17:19:bf: e7:b3:7f:f3:98:ef:90:da:a9:3c:0f:7b:94:63:c5: 90:34:02:75:02:9b:0b:88:85:1b:45:4c:56:6d:2c: dc:46:92:51:bf:19:7d:9f:a3:de:20:35:55:73:83: 32:3c:ba:0d:9b:9d:7b:54:f0:6f:2d:a6:51:84:a9: 9a:28:5b:ba:e5:df:00:0e:38:56:65:75:e6:9d:7d: d3:f9:21:99:94:2e:9a:e7:89:6b:ea:59:4f:ef:ec: 96:81:71:63:14:7e:ca:a5:5a:b6:32:94:11:62:3f: 83:ae:2b:31:87:e6:a7:f6:2c:e1:e0:15:17:f6:71: 5e:51:46:88:79:50:87:53:6b:5d:90:82:fb:45:23: fe:fd:40:bf:5f:ab:49:ce:a0:67:e4:e6:49:de:b0: 8f:ff:3b:cf:36:f6:6d:06:9e:ed:5c:3f:de:3c:3a: 3d:a8:db:d3:77:a1:bd:a9:d4:65:ba:23:c9:2c:58: bd:d6:b7:6d:56:55:e3:4e:ae:7b:f0:e3:73:d5:36: 41:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:62:CF:65:0D:F5:D5:84:96:9C:8F:F0:BB:7B:EA:34:A6:91:7D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36e599cf-8f02-3b1f-a2cd-1a54caa6f8ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:69:97:1f:05:fc:b6:b7:91:72:f9:cc:cc:c2:3a:c0:33:3f: ea:c0:d7:7b:fd:b9:d3:78:f4:9d:20:59:42:1f:16:12:fd:d7: 96:3b:83:5c:e5:d3:35:7f:c2:a6:7a:87:1d:9c:6a:81:49:9a: 4e:60:1d:1b:a6:7e:10:bc:92:ed:17:9e:4f:c1:99:d7:86:f2: 9b:c2:37:2f:2e:bd:df:e6:98:40:af:ae:b9:21:4a:a8:31:a0: ad:2c:44:b4:3f:1c:f8:e3:1e:16:90:d4:fc:b1:92:72:23:59: ab:42:96:a4:5b:7d:62:6a:a1:96:65:22:e8:2f:2a:cb:dc:16: 97:73:c0:24:d1:8e:74:6e:c5:35:b5:24:bb:07:0e:8f:a7:19: 06:eb:8a:9a:24:f2:54:39:b5:79:d6:53:e9:a4:40:9a:d0:56: d6:70:61:8a:8f:2b:71:6f:11:47:9c:f2:96:a8:c2:10:f1:99: 22:3e:55:33:db:9c:3d:a4:c0:0c:4c:27:a9:be:59:49:b0:31: 35:79:2a:63:85:9e:b2:68:e7:f6:2e:2c:13:7b:33:e7:34:11: a8:57:f1:c0:7d:ca:6c:28:99:82:86:b3:f1:45:3a:1d:cd:4b: 26:86:9c:b3:37:e7:af:d7:96:ba:6c:56:d2:10:55:75:56:b6: 3c:91:c8:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D7MuEiAV0auG0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDA1NFoXDTI1MDkxNjE4MDA1NFowLzEtMCsGA1UEAxMk Y2FhZTU4YjYtZTJiZi00MGE1LTg1M2UtNjYzOGUxMjNmYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyqR4sJChxKoKjn6pMm2jdeVdOtEma2Rv+pU BwY0T8ajqS+4Q7rUX6BF5TV8iH4NJ3vlarcct+EXGb/ns3/zmO+Q2qk8D3uUY8WQ NAJ1ApsLiIUbRUxWbSzcRpJRvxl9n6PeIDVVc4MyPLoNm517VPBvLaZRhKmaKFu6 5d8ADjhWZXXmnX3T+SGZlC6a54lr6llP7+yWgXFjFH7KpVq2MpQRYj+Drisxh+an 9izh4BUX9nFeUUaIeVCHU2tdkIL7RSP+/UC/X6tJzqBn5OZJ3rCP/zvPNvZtBp7t XD/ePDo9qNvTd6G9qdRluiPJLFi91rdtVlXjTq578ONz1TZBBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpiz2UN9dWElpyP8Lt76jSmkX1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzZlNTk5Y2YtOGYwMi0z YjFmLWEyY2QtMWE1NGNhYTZmOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNplx8F/La3kXL5zMzCOsAzP+rA13v9udN49J0gWUIfFhL915Y7g1zl 0zV/wqZ6hx2caoFJmk5gHRumfhC8ku0Xnk/BmdeG8pvCNy8uvd/mmECvrrkhSqgx oK0sRLQ/HPjjHhaQ1PyxknIjWatClqRbfWJqoZZlIugvKsvcFpdzwCTRjnRuxTW1 JLsHDo+nGQbripok8lQ5tXnWU+mkQJrQVtZwYYqPK3FvEUec8paowhDxmSI+VTPb nD2kwAxMJ6m+WUmwMTV5KmOFnrJo5/YuLBN7M+c0EahX8cB9ymwomYKGs/FFOh3N SyaGnLM356/XlrpsVtIQVXVWtjyRyA4= -----END CERTIFICATE-----Generated at Mon Jun 30 03:05:46 2025 by rpki-client