$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/637672b5-6b6c-3d78-95f0-6eb340346b87.roa File: 637672b5-6b6c-3d78-95f0-6eb340346b87.roa (raw, json) Hash identifier: C5jlStzi6JGYCmf4bzbJheRyORcotiDehQINoVq0SvA= Subject key identifier: ED:0B:B4:F2:7C:85:A8:A0:F1:13:DB:E7:4E:D0:F1:8A:54:D5:42:78 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0FAC438B02CFB9F91A5E40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/637672b5-6b6c-3d78-95f0-6eb340346b87.roa Signing time: Wed 18 Jun 2025 18:00:51 +0000 ROA not before: Wed 18 Jun 2025 18:00:51 +0000 ROA not after: Tue 16 Sep 2025 18:00:51 +0000 asID: 22773 IP address blocks: 24.251.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:ac:43:8b:02:cf:b9:f9:1a:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:51 2025 GMT Not After : Sep 16 18:00:51 2025 GMT Subject: CN=30298fac-12fd-4579-99ce-d68e456f089e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:ce:a7:2b:6f:50:4e:e4:8c:6e:16:57:dc: be:e8:91:75:08:1a:3d:02:87:a8:04:a4:df:22:aa: 01:a7:2c:64:5a:b2:de:32:ea:f1:ee:81:de:51:9d: be:27:70:de:0c:ed:86:be:a8:ed:fa:48:27:74:7e: ea:3e:01:92:d9:58:be:4e:d8:e8:3a:97:18:9a:7a: 17:36:2c:4f:f4:24:e7:41:4c:c0:b4:8f:52:30:c7: 41:8a:22:ed:33:db:b1:55:b1:40:f8:c6:92:66:4a: 7e:15:26:14:94:15:a0:d5:47:b1:8f:bd:af:cc:00: 24:e2:27:6f:c3:0b:2a:99:11:6a:c9:0f:4f:3f:b4: c0:90:c2:2b:82:37:68:36:38:58:84:e3:cd:68:a7: ae:f2:c5:b8:8f:36:24:b2:e3:e1:bc:4c:1a:3e:59: 37:5b:8c:fb:70:90:cf:55:d6:00:eb:f0:df:e5:bf: e1:b6:3a:b6:48:5a:40:94:5c:ed:db:fa:1b:d1:cc: cf:04:b9:45:cd:54:e3:61:62:d5:24:7f:02:be:ea: 97:1f:cd:53:6f:46:a1:c9:f3:80:30:a1:63:c6:35: 00:9f:87:a7:78:e9:ca:db:e6:3b:61:67:c6:a8:34: c0:67:74:fa:85:8f:9b:39:66:24:73:c7:34:07:2f: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0B:B4:F2:7C:85:A8:A0:F1:13:DB:E7:4E:D0:F1:8A:54:D5:42:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/637672b5-6b6c-3d78-95f0-6eb340346b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c4:8b:3a:7e:54:d4:7a:02:f2:0b:48:06:50:22:20:1f:88: 92:36:94:ca:96:67:3e:76:db:e7:b3:e2:14:19:da:f2:23:42: 6e:f3:47:c6:72:71:0d:7d:90:cd:04:03:f3:04:67:1b:5c:3e: 15:d1:9f:46:91:1c:fe:97:f8:62:34:ba:87:31:86:64:b2:ec: 25:01:5b:db:49:16:78:38:48:c1:94:c2:db:05:c8:96:36:25: 33:2b:5c:84:69:6e:6c:1d:46:c0:f6:22:bb:7d:e7:87:aa:55: 02:99:0a:ee:8b:07:34:6d:5e:80:2a:6b:62:a2:38:13:c7:35: cc:53:3e:e5:ce:2d:dd:cf:20:15:45:92:f7:69:2a:30:05:d6: 1e:a5:97:8b:5a:98:e5:de:72:94:6f:ac:44:3a:c3:0d:3c:c9: 7c:5d:d8:dc:4d:55:b9:47:59:ae:80:b3:be:e2:b1:d1:5a:93: dc:88:88:90:66:a2:ed:9d:6c:7e:a1:5c:05:8d:b1:5c:88:39: 4c:f0:71:0f:af:bb:47:ea:e4:70:60:84:3f:e3:46:0a:70:80: 52:59:d2:bd:0b:ca:9e:96:66:2b:e1:71:d1:b8:be:fc:05:f4: 37:10:7f:d5:2f:05:63:00:09:cc:b5:3c:6d:46:6c:7c:22:f2: d6:33:0a:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D6xDiwLPufkaXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDA1MVoXDTI1MDkxNjE4MDA1MVowLzEtMCsGA1UEAxMk MzAyOThmYWMtMTJmZC00NTc5LTk5Y2UtZDY4ZTQ1NmYwODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn7OpytvUE7kjG4WV9y+6JF1CBo9AoeoBKTf IqoBpyxkWrLeMurx7oHeUZ2+J3DeDO2Gvqjt+kgndH7qPgGS2Vi+TtjoOpcYmnoX NixP9CTnQUzAtI9SMMdBiiLtM9uxVbFA+MaSZkp+FSYUlBWg1Uexj72vzAAk4idv wwsqmRFqyQ9PP7TAkMIrgjdoNjhYhOPNaKeu8sW4jzYksuPhvEwaPlk3W4z7cJDP VdYA6/Df5b/htjq2SFpAlFzt2/ob0czPBLlFzVTjYWLVJH8CvuqXH81Tb0ahyfOA MKFjxjUAn4eneOnK2+Y7YWfGqDTAZ3T6hY+bOWYkc8c0By/S1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0LtPJ8haig8RPb507Q8YpU1UJ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjM3NjcyYjUtNmI2Yy0z ZDc4LTk1ZjAtNmViMzQwMzQ2Yjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPvOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPEizp+VNR6AvILSAZQIiAfiJI2lMqWZz522+ez4hQZ2vIjQm7zR8Zy cQ19kM0EA/MEZxtcPhXRn0aRHP6X+GI0uocxhmSy7CUBW9tJFng4SMGUwtsFyJY2 JTMrXIRpbmwdRsD2Irt954eqVQKZCu6LBzRtXoAqa2KiOBPHNcxTPuXOLd3PIBVF kvdpKjAF1h6ll4tamOXecpRvrEQ6ww08yXxd2NxNVblHWa6As77isdFak9yIiJBm ou2dbH6hXAWNsVyIOUzwcQ+vu0fq5HBghD/jRgpwgFJZ0r0Lyp6WZivhcdG4vvwF 9DcQf9UvBWMACcy1PG1GbHwi8tYzCr0= -----END CERTIFICATE-----Generated at Tue Jul 1 06:51:29 2025 by rpki-client