$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bc2b1d0-bf78-346c-8496-5b14f638582c.roa File: 5bc2b1d0-bf78-346c-8496-5b14f638582c.roa (raw, json) Hash identifier: 8AvbPvfADVwB/JQjdFJfJf+H/iQaKwgL2HyNehcW0R0= Subject key identifier: 59:33:A0:66:C7:C1:18:68:BE:BD:A2:66:C5:02:F3:7B:AE:32:64:A3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F4F219AC7478486AFDA680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bc2b1d0-bf78-346c-8496-5b14f638582c.roa Signing time: Thu 01 May 2025 17:08:40 +0000 ROA not before: Thu 01 May 2025 17:08:40 +0000 ROA not after: Wed 30 Jul 2025 17:08:40 +0000 asID: 22773 IP address blocks: 24.253.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f4:f2:19:ac:74:78:48:6a:fd:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:40 2025 GMT Not After : Jul 30 17:08:40 2025 GMT Subject: CN=b9a809ee-7cdb-478c-b365-9bcf7479b3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9b:ce:cb:54:51:7f:b7:0b:da:16:55:63:be: ae:62:65:d3:ce:21:b7:71:8c:cf:95:84:af:3e:bf: 58:b0:71:13:2d:29:4a:d7:0d:ea:58:24:24:4d:f1: 21:13:9a:0d:da:03:83:6c:9e:69:9f:3f:e4:f9:4b: f8:fb:31:c1:01:a4:f6:5f:c6:7c:0f:78:21:39:53: 6b:32:e3:30:91:18:2c:68:8c:26:25:6d:66:20:0b: 4d:c2:1c:a5:c5:96:b1:d3:e8:76:4c:55:bb:14:34: 46:50:f5:1d:c7:db:cc:c3:e3:af:92:62:55:63:b2: fc:5f:c2:e9:25:be:91:b5:20:89:e8:8d:9b:bb:88: 2a:a8:a4:15:9d:46:ab:17:02:04:d7:f0:9d:6c:54: 97:a3:6d:a9:70:7e:5c:7b:30:74:05:e3:8e:59:c5: b3:76:86:6a:0a:97:2d:5d:25:bd:ed:4c:32:64:33: 3e:3b:44:a0:b9:64:e4:89:42:87:4a:7d:df:ff:75: 3e:2c:5f:a7:f6:d8:2a:ee:4b:2d:e5:1f:7e:69:6b: ab:f7:e3:02:d2:22:33:2a:fe:a6:54:e8:bb:ec:20: bd:a9:b2:34:9b:40:66:0d:fa:d8:54:df:1e:f0:1e: 3d:1d:56:fb:17:16:5d:52:3a:e2:9b:0a:bc:6e:cb: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:33:A0:66:C7:C1:18:68:BE:BD:A2:66:C5:02:F3:7B:AE:32:64:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bc2b1d0-bf78-346c-8496-5b14f638582c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d7:ea:b4:e0:c4:9a:d0:ca:f7:02:7f:e0:69:ad:ae:f0:4d: 65:c0:e1:31:97:04:ca:56:4e:a6:eb:2a:7c:73:a9:eb:40:29: 71:95:33:ff:e2:21:37:c2:83:86:f9:5a:97:56:7e:28:fd:1f: 46:48:c7:c0:43:37:46:e8:56:2d:86:4a:d0:76:34:cc:a5:31: fe:85:b8:79:23:4b:8b:78:d8:f8:74:23:88:70:1d:73:33:02: 0c:21:d6:65:b7:35:36:6e:8f:df:7e:ea:f7:4c:f7:d7:1f:ed: 53:99:ea:8b:34:10:30:16:99:46:cc:43:9b:6f:fa:11:7e:86: e1:e5:f2:1b:a4:31:8d:c0:71:fa:ce:c9:d7:8b:82:d7:24:61: 51:4c:4a:05:47:1a:cc:e2:b1:18:09:99:48:49:34:00:ee:d0: 45:33:ee:8d:1b:b8:16:1c:31:41:98:8d:c5:c1:e0:8b:18:7c: cb:f5:b2:46:2c:2c:a3:a8:75:29:4a:88:cb:61:9c:62:27:2b: e1:33:61:24:4c:71:0d:fb:85:f5:ee:22:88:09:89:87:12:13: 1a:9c:fc:ff:e4:e6:45:ef:9d:aa:da:7d:7e:26:74:7d:2e:06: 65:d9:a7:85:4a:b6:7d:7d:8e:e0:39:7a:19:e0:a2:7c:61:4c: a4:95:e8:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19PIZrHR4SGr9poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDg0MFoXDTI1MDczMDE3MDg0MFowLzEtMCsGA1UEAxMk YjlhODA5ZWUtN2NkYi00NzhjLWIzNjUtOWJjZjc0NzliM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJvOy1RRf7cL2hZVY76uYmXTziG3cYzPlYSv Pr9YsHETLSlK1w3qWCQkTfEhE5oN2gODbJ5pnz/k+Uv4+zHBAaT2X8Z8D3ghOVNr MuMwkRgsaIwmJW1mIAtNwhylxZax0+h2TFW7FDRGUPUdx9vMw+OvkmJVY7L8X8Lp Jb6RtSCJ6I2bu4gqqKQVnUarFwIE1/CdbFSXo22pcH5cezB0BeOOWcWzdoZqCpct XSW97UwyZDM+O0SguWTkiUKHSn3f/3U+LF+n9tgq7kst5R9+aWur9+MC0iIzKv6m VOi77CC9qbI0m0BmDfrYVN8e8B49HVb7FxZdUjrimwq8bst4ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkzoGbHwRhovr2iZsUC83uuMmSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWJjMmIxZDAtYmY3OC0z NDZjLTg0OTYtNWIxNGY2Mzg1ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP29MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbX6rTgxJrQyvcCf+Bpra7wTWXA4TGXBMpWTqbrKnxzqetAKXGVM//i ITfCg4b5WpdWfij9H0ZIx8BDN0boVi2GStB2NMylMf6FuHkjS4t42Ph0I4hwHXMz Agwh1mW3NTZuj99+6vdM99cf7VOZ6os0EDAWmUbMQ5tv+hF+huHl8hukMY3AcfrO ydeLgtckYVFMSgVHGszisRgJmUhJNADu0EUz7o0buBYcMUGYjcXB4IsYfMv1skYs LKOodSlKiMthnGInK+EzYSRMcQ37hfXuIogJiYcSExqc/P/k5kXvnarafX4mdH0u BmXZp4VKtn19juA5ehngonxhTKSV6JA= -----END CERTIFICATE-----Generated at Tue Jul 1 20:50:42 2025 by rpki-client