$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b78283f-0e08-311f-8373-3d6f4cbca2b3.roa File: 5b78283f-0e08-311f-8373-3d6f4cbca2b3.roa (raw, json) Hash identifier: Nj2KO5fOwIoeSqYqsGCo0mrw43dwaHk2N+G4yVo34Sk= Subject key identifier: E7:2B:4B:EE:D9:D7:01:4A:02:EB:AA:F7:60:19:27:CC:25:88:79:42 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0FC400786305F7CAA6A0C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b78283f-0e08-311f-8373-3d6f4cbca2b3.roa Signing time: Wed 18 Jun 2025 18:01:02 +0000 ROA not before: Wed 18 Jun 2025 18:01:02 +0000 ROA not after: Tue 16 Sep 2025 18:01:02 +0000 asID: 22773 IP address blocks: 24.255.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:c4:00:78:63:05:f7:ca:a6:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:02 2025 GMT Not After : Sep 16 18:01:02 2025 GMT Subject: CN=9c5427c9-0583-4b2b-9dc5-a61c9f250ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:61:67:04:c7:bf:ae:6a:95:4a:73:c7:2d:d2: 69:18:f7:c2:9a:9a:0e:eb:e8:8a:3a:1b:f1:1d:49: 39:94:ad:08:7d:b1:f3:2e:0b:88:c0:fa:85:1b:ef: 83:5b:e9:4c:92:29:75:82:11:90:d9:0f:d8:d4:d9: da:ce:61:c4:38:78:18:38:1a:e0:d7:45:a1:d3:7f: 0b:5e:6c:58:88:20:ac:a9:57:f6:6b:fb:cd:ab:b9: e7:8d:76:ca:25:c0:99:e8:f2:84:c2:82:c4:3e:f9: c7:89:9c:f5:fd:40:7d:fb:a9:22:28:7a:2f:95:66: 9d:1a:83:50:29:d9:e8:89:d0:d7:03:88:a1:13:67: 50:11:15:01:72:61:f1:ba:e7:89:13:f1:56:26:73: d2:4f:4d:d0:b0:38:06:58:3e:97:4f:25:79:4c:a0: dd:97:0a:28:16:b1:37:68:3d:94:29:4b:ba:9b:50: 43:9c:62:78:2c:2e:ca:6b:58:5d:94:98:33:2e:7b: 0e:42:9d:c8:d3:b5:0c:9c:1c:42:33:99:81:34:ce: ed:2f:9e:4f:dd:4c:9d:c8:a3:e4:aa:eb:41:a9:84: 85:b2:98:b7:f4:5a:9a:02:74:0e:5d:9f:79:af:69: 02:50:cf:ff:98:a0:86:26:40:ff:f0:29:6e:52:7c: 44:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2B:4B:EE:D9:D7:01:4A:02:EB:AA:F7:60:19:27:CC:25:88:79:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b78283f-0e08-311f-8373-3d6f4cbca2b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.255.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e7:60:95:37:b5:44:06:44:a7:98:d5:4c:47:06:9b:b8:9b: 3b:a7:e6:a5:78:f3:a8:ed:f0:81:2e:71:06:b6:e3:55:48:59: bb:10:ec:c9:92:56:2a:f1:cc:71:70:12:2c:7f:88:d9:da:85: 7c:50:78:c8:5d:f8:83:17:4b:a9:46:df:08:38:28:c8:74:13: 6d:ed:ce:5d:47:26:65:9f:c1:ec:88:ae:bf:1c:26:35:85:47: 3d:1a:e2:b0:39:25:66:94:8c:15:6a:a3:2a:be:19:14:3f:80: f2:c2:9f:ac:04:33:5e:9b:6d:0c:a4:a0:89:15:c7:54:43:fc: 57:a9:1d:01:6f:bd:19:b2:f6:27:c0:d4:ed:de:54:14:ef:aa: d5:89:5e:8f:78:61:91:3d:9b:c3:02:d7:d3:fc:f6:ed:59:83: d2:a3:27:a1:64:ad:8b:35:ce:0a:41:c7:fc:80:64:95:e4:20: 24:ed:28:bb:1e:a7:e6:8a:f7:56:19:2c:29:c6:7a:08:14:f1: 15:ee:3b:5e:ff:b5:d9:7b:a4:ea:a4:b2:78:ed:d3:3e:e0:1a: 26:2e:5f:98:58:e5:73:aa:37:bb:e4:a5:23:b5:58:2b:03:35: ca:c2:4e:b5:1d:cf:93:54:b9:07:57:92:34:36:1f:47:1b:e3: 48:d2:fd:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D8QAeGMF98qmoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDEwMloXDTI1MDkxNjE4MDEwMlowLzEtMCsGA1UEAxMk OWM1NDI3YzktMDU4My00YjJiLTlkYzUtYTYxYzlmMjUwYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2FnBMe/rmqVSnPHLdJpGPfCmpoO6+iKOhvx HUk5lK0IfbHzLguIwPqFG++DW+lMkil1ghGQ2Q/Y1NnazmHEOHgYOBrg10Wh038L XmxYiCCsqVf2a/vNq7nnjXbKJcCZ6PKEwoLEPvnHiZz1/UB9+6kiKHovlWadGoNQ KdnoidDXA4ihE2dQERUBcmHxuueJE/FWJnPST03QsDgGWD6XTyV5TKDdlwooFrE3 aD2UKUu6m1BDnGJ4LC7Ka1hdlJgzLnsOQp3I07UMnBxCM5mBNM7tL55P3UydyKPk qutBqYSFspi39FqaAnQOXZ95r2kCUM//mKCGJkD/8CluUnxEpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcrS+7Z1wFKAuuq92AZJ8wliHlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWI3ODI4M2YtMGUwOC0z MTFmLTgzNzMtM2Q2ZjRjYmNhMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGP8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGznYJU3tUQGRKeY1UxHBpu4mzun5qV486jt8IEucQa241VIWbsQ7MmS VirxzHFwEix/iNnahXxQeMhd+IMXS6lG3wg4KMh0E23tzl1HJmWfweyIrr8cJjWF Rz0a4rA5JWaUjBVqoyq+GRQ/gPLCn6wEM16bbQykoIkVx1RD/FepHQFvvRmy9ifA 1O3eVBTvqtWJXo94YZE9m8MC19P89u1Zg9KjJ6FkrYs1zgpBx/yAZJXkICTtKLse p+aK91YZLCnGeggU8RXuO17/tdl7pOqksnjt0z7gGiYuX5hY5XOqN7vkpSO1WCsD NcrCTrUdz5NUuQdXkjQ2H0cb40jS/V0= -----END CERTIFICATE-----Generated at Tue Jul 1 00:29:36 2025 by rpki-client