$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b1e3f1a-76cf-308a-8e91-ef93b50069e4.roa File: 7b1e3f1a-76cf-308a-8e91-ef93b50069e4.roa (raw, json) Hash identifier: m4FOuQJz6Fvam0aHBuyhOcmYdiFS+Mv1MmqH8lg5uJc= Subject key identifier: 2B:45:FE:D1:5E:29:BA:27:09:1F:19:39:4A:2F:69:23:8F:CA:4E:98 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0F786AB836BE8D976E1EB0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b1e3f1a-76cf-308a-8e91-ef93b50069e4.roa Signing time: Wed 18 Jun 2025 18:00:26 +0000 ROA not before: Wed 18 Jun 2025 18:00:26 +0000 ROA not after: Tue 16 Sep 2025 18:00:26 +0000 asID: 22773 IP address blocks: 24.251.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:78:6a:b8:36:be:8d:97:6e:1e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:26 2025 GMT Not After : Sep 16 18:00:26 2025 GMT Subject: CN=6b0dd58f-65c1-4f7c-a5d1-10df165eab6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:2c:e7:df:f4:5c:60:fe:15:39:6e:1a:9f: d9:17:c9:aa:b6:94:eb:55:e2:93:59:36:a7:2a:aa: 32:65:53:b9:f2:c9:f8:a1:6f:a8:5d:35:5e:b8:83: 53:4e:56:d5:00:26:be:01:de:3b:3b:e8:ad:a4:3f: 98:4f:e8:0f:cf:35:42:ad:f7:e8:3d:b7:fe:17:4b: 1e:8a:a9:72:7b:d5:86:ef:17:f0:10:fa:58:20:b8: 1b:8f:f5:a5:03:67:31:80:cd:c3:00:4c:8c:3f:cd: ff:c1:2c:0a:23:5a:53:ad:dd:65:1b:ef:c3:d6:83: 6d:df:e4:cc:9a:ae:38:cf:5e:5f:31:49:9e:28:9f: 33:d6:3d:ee:55:7e:bf:dd:5c:60:13:13:82:33:c3: 12:f7:ed:b5:d0:05:ed:5d:44:3e:b4:d1:78:2e:e0: d8:78:9e:41:d6:2f:e1:62:13:6a:1d:a8:27:e7:12: 16:39:59:c9:3f:76:10:6d:85:a5:9e:50:7c:44:03: cd:de:7a:87:8e:a2:9f:ca:ed:41:4e:a7:c5:99:6d: 96:c6:d6:49:1a:45:b4:b6:32:df:47:47:f4:2d:f5: e8:9e:15:13:2e:d9:5d:88:86:6a:06:4c:8b:75:42: 28:c6:5b:95:81:2b:72:3e:aa:cb:ff:a9:fd:92:6f: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:45:FE:D1:5E:29:BA:27:09:1F:19:39:4A:2F:69:23:8F:CA:4E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b1e3f1a-76cf-308a-8e91-ef93b50069e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:67:7f:80:f2:30:4e:57:bc:72:f9:18:54:ff:a1:5d:7c:07: bd:c1:9b:9b:b7:c5:69:83:31:bc:94:31:4a:01:63:0d:4d:6e: d5:92:af:c2:24:13:55:43:e5:73:d2:f3:8a:cc:00:af:eb:43: 64:1c:3d:c4:8c:ec:76:a0:3d:22:85:6f:78:ea:b1:b6:d4:9b: 96:35:ff:b4:22:5f:9e:3a:1a:02:e9:78:13:2b:fb:11:25:d2: 2e:05:df:ae:18:5b:11:8c:59:8c:65:08:77:0d:3a:cd:64:44: 17:65:e2:3e:dc:5f:9f:e9:05:68:bf:ad:02:e1:8b:18:e0:e5: 8c:94:e9:99:eb:e8:48:45:af:b2:0c:c4:d1:28:4a:3c:fb:ae: d2:d2:5e:13:bf:7f:7d:4f:ac:51:3d:0b:b9:2c:ed:8c:e7:e2: ef:a3:35:3c:cf:e3:16:c8:e8:8e:ce:eb:fa:f4:3e:93:0a:da: b3:d9:36:4f:f4:38:b0:7b:3e:02:a0:48:b0:20:32:6c:2c:9c: fe:ad:4e:0b:52:d6:16:96:b6:77:3d:3e:57:d3:e0:c1:8b:ee: 2b:6a:19:19:ea:c4:55:ba:14:fd:a0:d5:04:c2:ed:e8:bb:59: 75:8f:a9:6c:84:0d:62:08:eb:8f:20:88:76:64:48:9d:8c:8b: 87:6d:e9:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D3hquDa+jZduHrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDAyNloXDTI1MDkxNjE4MDAyNlowLzEtMCsGA1UEAxMk NmIwZGQ1OGYtNjVjMS00ZjdjLWE1ZDEtMTBkZjE2NWVhYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc4s59/0XGD+FTluGp/ZF8mqtpTrVeKTWTan KqoyZVO58sn4oW+oXTVeuINTTlbVACa+Ad47O+itpD+YT+gPzzVCrffoPbf+F0se iqlye9WG7xfwEPpYILgbj/WlA2cxgM3DAEyMP83/wSwKI1pTrd1lG+/D1oNt3+TM mq44z15fMUmeKJ8z1j3uVX6/3VxgExOCM8MS9+210AXtXUQ+tNF4LuDYeJ5B1i/h YhNqHagn5xIWOVnJP3YQbYWlnlB8RAPN3nqHjqKfyu1BTqfFmW2WxtZJGkW0tjLf R0f0LfXonhUTLtldiIZqBkyLdUIoxluVgStyPqrL/6n9km8WNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtF/tFeKbonCR8ZOUovaSOPyk6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2IxZTNmMWEtNzZjZi0z MDhhLThlOTEtZWY5M2I1MDA2OWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhnf4DyME5XvHL5GFT/oV18B73Bm5u3xWmDMbyUMUoBYw1NbtWSr8Ik E1VD5XPS84rMAK/rQ2QcPcSM7HagPSKFb3jqsbbUm5Y1/7QiX546GgLpeBMr+xEl 0i4F364YWxGMWYxlCHcNOs1kRBdl4j7cX5/pBWi/rQLhixjg5YyU6Znr6EhFr7IM xNEoSjz7rtLSXhO/f31PrFE9C7ks7Yzn4u+jNTzP4xbI6I7O6/r0PpMK2rPZNk/0 OLB7PgKgSLAgMmwsnP6tTgtS1haWtnc9PlfT4MGL7itqGRnqxFW6FP2g1QTC7ei7 WXWPqWyEDWII648giHZkSJ2Mi4dt6cY= -----END CERTIFICATE-----Generated at Wed Jul 2 21:49:29 2025 by rpki-client