$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39cdea94-0828-34c7-a8ab-cefeb6995433.roa File: 39cdea94-0828-34c7-a8ab-cefeb6995433.roa (raw, json) Hash identifier: 8ng2zHjGOg0hHj2/TistTyFpBYeAz6WuZvxm7tEvuSM= Subject key identifier: A8:73:DF:C9:82:A4:69:9E:88:91:68:A9:36:26:14:B4:9B:DC:F6:C0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFE62E29E5983A0A1CA7B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39cdea94-0828-34c7-a8ab-cefeb6995433.roa Signing time: Thu 19 Jun 2025 10:37:38 +0000 ROA not before: Thu 19 Jun 2025 10:37:38 +0000 ROA not after: Wed 17 Sep 2025 10:37:38 +0000 asID: 22773 IP address blocks: 174.74.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fe:62:e2:9e:59:83:a0:a1:ca:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:37:38 2025 GMT Not After : Sep 17 10:37:38 2025 GMT Subject: CN=dd443565-adbb-47a7-8a92-20409408644d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:eb:d2:a8:c4:a0:47:d3:e6:05:33:c0:6d:fc: b2:00:10:95:82:6a:94:f6:ac:3b:9e:30:eb:40:f9: db:a7:42:d7:12:e0:f9:a0:46:be:0c:08:21:fc:99: b6:58:d0:50:80:19:88:77:35:d5:b8:70:1d:21:60: 18:ad:92:2d:46:fd:9c:53:fe:e0:33:13:dc:eb:4e: 61:9d:c3:22:c8:61:ba:73:d0:f2:d4:31:a7:cb:1c: 79:e0:33:1e:69:88:14:a7:eb:4f:9a:0f:31:50:f5: ae:5b:90:ee:9c:2e:d7:f5:c6:56:d7:cb:88:14:c7: 2b:8d:7f:5a:7c:60:e6:6a:8a:f0:09:41:f3:89:2c: ab:47:26:09:88:31:c7:89:08:06:4a:f2:e3:17:57: 79:71:b1:83:51:98:ab:d7:4b:32:ef:a7:9a:9e:c3: e8:5f:40:71:d6:e0:6a:02:1c:ba:a1:bd:b9:7b:27: 1d:74:b2:9b:bb:77:ce:12:84:7f:44:52:ee:c7:7f: 4a:f8:27:22:2a:72:28:42:7f:4a:8e:cf:6e:18:0a: 76:5b:bf:d1:f5:69:df:f1:7d:02:80:ec:2b:01:69: af:9d:57:e6:b1:c0:f5:96:aa:13:0b:4c:bf:d9:79: dc:98:e9:eb:9d:d3:c2:8c:0c:48:35:c4:a9:78:f0: 1d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:73:DF:C9:82:A4:69:9E:88:91:68:A9:36:26:14:B4:9B:DC:F6:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39cdea94-0828-34c7-a8ab-cefeb6995433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.74.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3c:87:92:32:59:c7:c9:c8:14:04:8f:e5:34:79:39:90:99: 93:2e:f7:8e:4d:59:98:65:c7:1b:09:12:90:9a:06:97:55:c6: 13:2c:9d:44:fb:d5:d9:1e:1b:1c:6d:c8:0e:7b:8d:22:74:d6: 08:df:80:5f:67:31:eb:55:0d:09:00:a5:59:2f:a5:f2:f1:41: 60:ef:f8:53:86:a5:22:f5:1d:af:f3:8f:81:bd:da:e6:8f:04: da:fc:af:26:16:1b:c3:22:a1:b9:bc:e8:1f:ac:50:a1:69:ce: 4f:e9:e9:6b:4c:b4:55:3c:bf:c7:91:e0:8d:23:c8:11:1c:24: 6d:3f:34:79:f1:c2:c3:23:a3:1c:43:64:c4:2a:4e:8e:9e:41: c6:1f:0c:9b:15:59:84:6f:59:fe:9d:a4:ad:64:02:7d:af:be: 42:6e:13:72:1b:30:fb:67:b0:56:4d:20:08:e1:ab:37:31:6c: 40:08:35:f0:e8:25:35:f3:b5:a4:09:f7:1d:e7:3a:d8:04:5a: d6:3d:e8:83:2a:a1:23:d1:e7:2e:ec:2b:24:20:30:4f:50:a0: e3:4c:22:5f:52:b3:6a:8f:22:91:84:bb:c2:e6:3c:63:43:b6: 1c:32:a2:69:83:e8:a3:29:ca:46:f4:6e:95:50:2b:96:37:f4: 63:93:af:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/mLinlmDoKHKe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzczOFoXDTI1MDkxNzEwMzczOFowLzEtMCsGA1UEAxMk ZGQ0NDM1NjUtYWRiYi00N2E3LThhOTItMjA0MDk0MDg2NDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuvSqMSgR9PmBTPAbfyyABCVgmqU9qw7njDr QPnbp0LXEuD5oEa+DAgh/Jm2WNBQgBmIdzXVuHAdIWAYrZItRv2cU/7gMxPc605h ncMiyGG6c9Dy1DGnyxx54DMeaYgUp+tPmg8xUPWuW5DunC7X9cZW18uIFMcrjX9a fGDmaorwCUHziSyrRyYJiDHHiQgGSvLjF1d5cbGDUZir10sy76eansPoX0Bx1uBq Ahy6ob25eycddLKbu3fOEoR/RFLux39K+CciKnIoQn9Kjs9uGAp2W7/R9Wnf8X0C gOwrAWmvnVfmscD1lqoTC0y/2XncmOnrndPCjAxINcSpePAdVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhz38mCpGmeiJFoqTYmFLSb3PbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzljZGVhOTQtMDgyOC0z NGM3LWE4YWItY2VmZWI2OTk1NDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE48h5IyWcfJyBQEj+U0eTmQmZMu945NWZhlxxsJEpCaBpdVxhMsnUT7 1dkeGxxtyA57jSJ01gjfgF9nMetVDQkApVkvpfLxQWDv+FOGpSL1Ha/zj4G92uaP BNr8ryYWG8Miobm86B+sUKFpzk/p6WtMtFU8v8eR4I0jyBEcJG0/NHnxwsMjoxxD ZMQqTo6eQcYfDJsVWYRvWf6dpK1kAn2vvkJuE3IbMPtnsFZNIAjhqzcxbEAINfDo JTXztaQJ9x3nOtgEWtY96IMqoSPR5y7sKyQgME9QoONMIl9Ss2qPIpGEu8LmPGND thwyommD6KMpykb0bpVQK5Y39GOTr6A= -----END CERTIFICATE-----Generated at Wed Jul 2 03:30:05 2025 by rpki-client