$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7058cade-677f-3d6b-b3c9-f1c79a883448.roa File: 7058cade-677f-3d6b-b3c9-f1c79a883448.roa (raw, json) Hash identifier: wOnhCDz59OR7m7R7D+wjMi8rC4D9SA8t/y/Vn+LVMqI= Subject key identifier: C1:DE:2A:01:5C:3E:5C:EA:16:AF:BB:2B:95:D7:4C:DE:2D:13:55:E1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A480AEBEAA4B3BF05A4A3A600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7058cade-677f-3d6b-b3c9-f1c79a883448.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 63182 IP address blocks: 174.76.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:eb:ea:a4:b3:bf:05:a4:a3:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=a1d2b8fa-a105-46e2-8b05-401c34b70464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:64:c0:e9:81:1e:ba:32:b3:45:41:72:c1: 7e:33:ab:23:2e:a8:82:7a:c7:38:95:0a:51:27:2c: 4c:d1:c5:2e:de:7a:46:11:5c:96:84:05:92:c8:17: 88:50:74:ee:85:98:12:b0:d5:6e:b0:0d:66:c5:95: db:4b:c1:cb:38:36:ae:43:c7:46:01:c4:e1:5b:4c: 02:85:72:89:c9:66:47:cd:56:54:d6:7c:05:7f:c9: 2e:10:57:5e:ac:d9:e0:9f:68:b6:46:38:fa:17:13: a6:e8:a3:1e:a6:fa:27:37:9f:48:c1:8f:c8:e6:29: 71:e4:a3:6b:cc:44:15:9e:e9:65:dc:84:61:7f:43: e5:97:6a:ec:00:25:e5:96:79:78:be:85:f0:9f:54: 5c:a5:34:6d:4a:87:20:78:a0:15:0c:e2:ee:79:d9: a8:04:23:18:88:99:bb:20:3a:7d:b9:00:f1:17:67: 10:c4:f9:95:ec:30:fd:d2:ce:e9:40:4f:25:80:7d: 04:ea:ab:bb:51:6e:22:15:a7:5b:3b:de:bd:d3:2c: 6d:af:ea:67:d5:f6:e6:1c:09:b1:76:2b:c1:ca:ba: 60:32:81:78:88:76:01:62:d0:2c:39:90:19:f5:31: 6a:74:88:12:6e:d1:a9:40:60:cf:1a:5b:cc:ac:45: ef:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DE:2A:01:5C:3E:5C:EA:16:AF:BB:2B:95:D7:4C:DE:2D:13:55:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7058cade-677f-3d6b-b3c9-f1c79a883448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.76.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:4c:25:35:41:70:15:65:eb:de:9b:d7:64:cb:65:d9:d9:c1: 77:75:05:59:0d:b1:cd:2e:38:0a:c0:19:26:d8:3d:04:ab:7c: 67:c5:42:59:74:98:29:42:03:f1:3a:b2:49:d3:8f:b3:ce:ba: c1:34:41:ff:2b:f9:63:be:f9:51:8a:fc:cc:3e:2e:d1:d1:08: 02:1c:e3:55:99:7c:00:06:35:c6:5f:ac:08:2a:07:ad:e4:9d: 38:67:7d:5b:09:78:bf:47:c4:9e:c8:85:3e:38:52:e2:87:f9: e3:86:fd:2f:de:49:e5:7d:55:ce:0c:64:0d:17:49:8b:18:22: 6f:14:eb:b1:9f:08:cb:eb:9a:70:29:83:8d:a9:45:2d:ab:73: 07:ef:2a:49:f5:9b:8e:27:f1:ec:8e:9f:57:08:42:88:71:85: 76:76:bc:aa:96:7d:d5:b6:d1:1f:3a:95:52:15:25:69:ca:39: da:68:9a:7c:5f:02:d3:4f:01:ae:02:cc:96:01:79:46:d3:83: 00:fb:c6:4e:b5:a2:a5:ae:bc:88:c0:fe:b5:76:92:8b:33:58: 8f:0e:6f:62:a0:cc:5f:20:f7:8d:b5:16:6c:12:1d:74:d5:2d: 94:57:fb:18:44:42:d5:df:2a:3b:eb:ff:dc:4e:97:27:ec:48: b5:f1:25:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuvqpLO/BaSjpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk YTFkMmI4ZmEtYTEwNS00NmUyLThiMDUtNDAxYzM0YjcwNDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+ZkwOmBHroys0VBcsF+M6sjLqiCesc4lQpR JyxM0cUu3npGEVyWhAWSyBeIUHTuhZgSsNVusA1mxZXbS8HLODauQ8dGAcThW0wC hXKJyWZHzVZU1nwFf8kuEFderNngn2i2Rjj6FxOm6KMepvonN59IwY/I5ilx5KNr zEQVnull3IRhf0Pll2rsACXllnl4voXwn1RcpTRtSocgeKAVDOLuedmoBCMYiJm7 IDp9uQDxF2cQxPmV7DD90s7pQE8lgH0E6qu7UW4iFadbO9690yxtr+pn1fbmHAmx divByrpgMoF4iHYBYtAsOZAZ9TFqdIgSbtGpQGDPGlvMrEXvhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHeKgFcPlzqFq+7K5XXTN4tE1XhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzA1OGNhZGUtNjc3Zi0z ZDZiLWIzYzktZjFjNzlhODgzNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkzyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1MJTVBcBVl696b12TLZdnZwXd1BVkNsc0uOArAGSbYPQSrfGfFQll0 mClCA/E6sknTj7POusE0Qf8r+WO++VGK/Mw+LtHRCAIc41WZfAAGNcZfrAgqB63k nThnfVsJeL9HxJ7IhT44UuKH+eOG/S/eSeV9Vc4MZA0XSYsYIm8U67GfCMvrmnAp g42pRS2rcwfvKkn1m44n8eyOn1cIQohxhXZ2vKqWfdW20R86lVIVJWnKOdpomnxf AtNPAa4CzJYBeUbTgwD7xk61oqWuvIjA/rV2koszWI8Ob2KgzF8g9421FmwSHXTV LZRX+xhEQtXfKjvr/9xOlyfsSLXxJfU= -----END CERTIFICATE-----Generated at Thu Jul 3 03:47:25 2025 by rpki-client