$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c683d1a-5aea-3c20-83e8-af1f00b0600d.roa File: 5c683d1a-5aea-3c20-83e8-af1f00b0600d.roa (raw, json) Hash identifier: lAmzZN604F5fHgd7gFeSq67UkI2Uj1GOkCuCpqM5Z/4= Subject key identifier: 81:C8:67:73:39:E5:44:44:62:08:61:FE:44:4C:AB:66:CE:AB:BE:3E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7C6597A55DC13EA948200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c683d1a-5aea-3c20-83e8-af1f00b0600d.roa Signing time: Thu 01 May 2025 17:14:22 +0000 ROA not before: Thu 01 May 2025 17:14:22 +0000 ROA not after: Wed 30 Jul 2025 17:14:22 +0000 asID: 22773 IP address blocks: 24.254.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:c6:59:7a:55:dc:13:ea:94:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:22 2025 GMT Not After : Jul 30 17:14:22 2025 GMT Subject: CN=1dd5cd90-6a78-421b-8f3e-de9f45779b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:68:b7:55:3b:eb:2e:5e:3d:1b:e4:ff:98:80: b0:82:84:89:f9:cd:71:e4:f1:23:19:4f:2e:65:6d: 70:38:80:6c:1a:d2:5c:0b:db:0b:15:36:ea:df:b5: 95:67:4a:94:09:1a:09:29:9e:2e:3e:27:0f:81:94: df:d8:1c:a6:88:8d:3a:16:ae:2c:87:42:7e:42:0c: ff:e7:aa:a4:65:69:f8:8d:93:ab:45:05:a6:dd:fe: 24:ad:b7:68:52:f6:b2:c4:27:b1:a8:49:78:d8:1c: 98:52:61:cd:7f:cb:d4:22:64:d8:1c:f2:ad:31:5b: 79:0b:e4:48:75:ab:56:0a:15:65:13:80:41:68:fb: 5f:b5:03:f6:0d:a1:a0:2c:41:4d:50:64:0f:58:75: e2:f9:84:9f:de:d5:4c:5d:3e:06:a7:52:a0:5d:e3: b0:5e:49:b2:0a:35:a5:68:8d:d8:89:a6:24:45:fb: 96:f9:87:42:de:37:9d:86:ee:de:9f:ac:c6:2f:05: db:75:85:ea:d2:0a:8f:aa:05:65:9f:00:21:e1:e3: 00:2e:8d:e2:5b:71:61:e8:2c:0f:db:46:dc:5d:94: e7:1f:3c:d8:f0:1e:85:76:9b:63:fc:6f:e1:9c:b8: d2:be:92:b0:b2:72:a8:4c:f8:4c:ea:a2:37:43:13: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C8:67:73:39:E5:44:44:62:08:61:FE:44:4C:AB:66:CE:AB:BE:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c683d1a-5aea-3c20-83e8-af1f00b0600d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.254.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:7e:98:77:d5:b0:d2:a6:8c:28:8d:99:d9:8c:95:3d:57:e7: 4d:0d:a5:ba:9d:6f:52:e8:df:6b:19:cb:b1:28:a6:47:c9:70: 28:02:33:b1:78:cd:cf:67:17:9f:d7:e3:47:a8:dc:a7:38:74: 72:7b:67:c3:d6:6b:03:75:5c:3c:f6:56:1c:02:1f:30:57:87: b2:b9:95:35:7b:6f:08:44:a0:d9:95:d9:c8:ad:e2:83:65:6b: 99:b8:3d:f0:5e:89:d0:fa:d8:bd:fb:3e:8a:c8:06:40:47:12: b8:02:e5:5e:2c:77:1a:02:25:37:23:02:9b:f9:26:a5:00:6e: f0:e6:c5:91:f7:d1:2f:bf:42:53:df:eb:cd:4a:91:ef:0c:e4: ae:d9:66:79:20:81:0c:84:18:50:d8:96:07:a6:75:42:d4:09: 36:56:da:3d:d4:69:80:ff:a0:05:1a:2b:a6:f8:33:4f:19:87: ab:70:ce:84:d8:b5:cb:57:9e:65:3f:21:69:ec:ee:de:c6:13: 43:57:56:59:de:f1:44:5b:e2:6c:55:6d:1b:1d:99:ed:3a:19: 43:90:93:40:fd:21:ed:f6:1e:22:64:f5:5b:08:2a:c4:aa:3b: e6:72:cc:72:55:1b:42:7b:8c:d4:85:5a:e5:5a:df:52:34:41: 33:11:d8:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm198ZZelXcE+qUggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQyMloXDTI1MDczMDE3MTQyMlowLzEtMCsGA1UEAxMk MWRkNWNkOTAtNmE3OC00MjFiLThmM2UtZGU5ZjQ1Nzc5YjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmi3VTvrLl49G+T/mICwgoSJ+c1x5PEjGU8u ZW1wOIBsGtJcC9sLFTbq37WVZ0qUCRoJKZ4uPicPgZTf2BymiI06Fq4sh0J+Qgz/ 56qkZWn4jZOrRQWm3f4krbdoUvayxCexqEl42ByYUmHNf8vUImTYHPKtMVt5C+RI datWChVlE4BBaPtftQP2DaGgLEFNUGQPWHXi+YSf3tVMXT4Gp1KgXeOwXkmyCjWl aI3YiaYkRfuW+YdC3jedhu7en6zGLwXbdYXq0gqPqgVlnwAh4eMALo3iW3Fh6CwP 20bcXZTnHzzY8B6Fdptj/G/hnLjSvpKwsnKoTPhM6qI3QxPr1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHIZ3M55UREYghh/kRMq2bOq74+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWM2ODNkMWEtNWFlYS0z YzIwLTgzZTgtYWYxZjAwYjA2MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP7FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1+mHfVsNKmjCiNmdmMlT1X500Npbqdb1Lo32sZy7EopkfJcCgCM7F4 zc9nF5/X40eo3Kc4dHJ7Z8PWawN1XDz2VhwCHzBXh7K5lTV7bwhEoNmV2cit4oNl a5m4PfBeidD62L37PorIBkBHErgC5V4sdxoCJTcjApv5JqUAbvDmxZH30S+/QlPf 681Kke8M5K7ZZnkggQyEGFDYlgemdULUCTZW2j3UaYD/oAUaK6b4M08Zh6twzoTY tctXnmU/IWns7t7GE0NXVlne8URb4mxVbRsdme06GUOQk0D9Ie32HiJk9VsIKsSq O+ZyzHJVG0J7jNSFWuVa31I0QTMR2CA= -----END CERTIFICATE-----Generated at Fri May 9 20:43:20 2025 by rpki-client