$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c13e7d6-25f5-3c86-bf67-8bbf0107257b.roa File: 6c13e7d6-25f5-3c86-bf67-8bbf0107257b.roa (raw, json) Hash identifier: yRrBfBvI4ud9nfhg5YR1cG0Dk1QJDuOF7P+9fZMPYiI= Subject key identifier: C6:D0:E8:A6:B4:A9:08:3E:F6:62:0B:BA:52:77:6D:DF:95:D0:13:B1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A5A3079D6233B072FDEE3C900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c13e7d6-25f5-3c86-bf67-8bbf0107257b.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 22773 IP address blocks: 24.249.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:79:d6:23:3b:07:2f:de:e3:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=be234ab1-8969-435e-a007-327fd4caf2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:e7:9a:23:7d:60:e8:d7:8f:b0:21:1b:3a: 7b:72:93:c8:ef:d4:85:44:e2:e0:66:4e:5e:ec:5c: 37:27:0c:4e:8c:44:b6:bb:f1:60:a9:cf:d9:c6:78: 74:30:99:7a:b1:b1:d3:b6:6b:53:2c:33:47:b1:09: 98:0f:a7:fb:83:6b:f8:a9:d8:2e:a7:10:07:4f:21: 0f:c5:d6:2a:71:72:92:4e:c6:30:30:1e:d8:59:76: 39:59:6a:f3:51:d4:d6:80:bc:fc:5f:b2:16:15:79: 76:36:74:02:05:5f:33:4f:d5:bc:74:90:b1:cf:f1: dc:4c:3a:a2:9c:4c:20:90:b5:3d:b9:67:de:77:91: 68:97:65:63:a8:61:c4:c3:28:73:52:9d:cf:a7:cf: a0:11:6b:29:f2:53:21:19:ef:14:1d:2e:5b:a2:40: b6:71:c1:1d:20:43:6c:ec:b4:6b:86:27:18:e3:4e: 6d:2a:07:94:d4:4b:fe:e6:f7:c2:38:ca:e1:e3:0f: 4a:46:c0:97:65:89:22:92:e7:f5:54:4f:d1:10:91: 5c:92:bc:f3:f4:3a:9f:cc:6c:94:96:19:fd:24:98: b7:72:d4:31:16:c0:95:f9:b5:e9:46:ee:c8:3a:0e: ba:39:c4:dc:bc:62:b5:e4:21:65:4c:32:22:ec:86: 50:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D0:E8:A6:B4:A9:08:3E:F6:62:0B:BA:52:77:6D:DF:95:D0:13:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c13e7d6-25f5-3c86-bf67-8bbf0107257b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.249.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:a4:77:e4:71:d0:05:cb:d7:79:49:2a:8a:25:35:dd:cc:a6: 49:8c:c6:81:f1:d4:b6:34:a0:a9:6e:ba:b5:d2:00:89:a1:b2: 27:62:d0:d3:e6:15:fc:09:21:51:d9:fe:4b:71:3d:20:e7:68: 91:05:bb:91:ed:47:91:8f:72:78:12:01:f7:6e:78:5e:ca:d8: 79:c8:33:68:0a:89:85:d1:df:ed:5d:34:0f:71:1e:7a:0b:c8: ba:95:c9:e5:f4:11:e0:7f:ad:48:4f:2c:e9:cb:bd:b4:81:7a: 7b:6b:9c:81:a1:9f:fa:7d:54:eb:24:b0:f9:85:c6:52:1d:a3: 2f:45:aa:2b:6c:3c:d4:79:5d:5c:e0:d1:72:6d:8d:4e:27:59: 5a:5b:be:db:a6:48:a5:69:95:a2:bf:04:1f:be:93:33:72:d7: b5:e0:2b:ac:03:55:76:a9:31:3e:7e:35:26:cf:96:28:40:c8: e9:14:2d:dd:a5:15:0c:bb:71:98:cf:25:3a:35:95:fb:5b:d0: 0b:58:db:b0:d5:07:de:ef:ed:22:80:fb:de:0b:eb:3b:72:78: c2:a0:ca:8b:06:5d:27:e7:ac:0e:6b:42:0f:fa:b7:4f:26:e2: 82:f8:a5:a8:c4:8b:8d:8d:48:42:bf:92:6e:e7:a4:b2:83:ff: 5b:c1:5b:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMHnWIzsHL97jyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk YmUyMzRhYjEtODk2OS00MzVlLWEwMDctMzI3ZmQ0Y2FmMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzXnmiN9YOjXj7AhGzp7cpPI79SFROLgZk5e 7Fw3JwxOjES2u/Fgqc/Zxnh0MJl6sbHTtmtTLDNHsQmYD6f7g2v4qdgupxAHTyEP xdYqcXKSTsYwMB7YWXY5WWrzUdTWgLz8X7IWFXl2NnQCBV8zT9W8dJCxz/HcTDqi nEwgkLU9uWfed5Fol2VjqGHEwyhzUp3Pp8+gEWsp8lMhGe8UHS5bokC2ccEdIENs 7LRrhicY405tKgeU1Ev+5vfCOMrh4w9KRsCXZYkikuf1VE/REJFckrzz9DqfzGyU lhn9JJi3ctQxFsCV+bXpRu7IOg66OcTcvGK15CFlTDIi7IZQoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbQ6Ka0qQg+9mILulJ3bd+V0BOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmMxM2U3ZDYtMjVmNS0z Yzg2LWJmNjctOGJiZjAxMDcyNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWkd+Rx0AXL13lJKoolNd3MpkmMxoHx1LY0oKluurXSAImhsidi0NPm FfwJIVHZ/ktxPSDnaJEFu5HtR5GPcngSAfdueF7K2HnIM2gKiYXR3+1dNA9xHnoL yLqVyeX0EeB/rUhPLOnLvbSBentrnIGhn/p9VOsksPmFxlIdoy9FqitsPNR5XVzg 0XJtjU4nWVpbvtumSKVplaK/BB++kzNy17XgK6wDVXapMT5+NSbPlihAyOkULd2l FQy7cZjPJTo1lftb0AtY27DVB97v7SKA+94L6ztyeMKgyosGXSfnrA5rQg/6t08m 4oL4pajEi42NSEK/km7npLKD/1vBW+c= -----END CERTIFICATE-----Generated at Tue Jul 1 01:06:26 2025 by rpki-client