$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/814c966f-43f8-3e47-bd73-ddee66467a4c.roa File: 814c966f-43f8-3e47-bd73-ddee66467a4c.roa (raw, json) Hash identifier: a8sTZfKzOkq2ViMT84CYZqHWfeV2SzdGM1dnpb1Ohwk= Subject key identifier: 07:57:CE:68:B2:18:E6:C5:C8:BE:D0:8C:2D:B4:E8:B4:31:6C:5C:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0F960DFD9BC1F6EACC5180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/814c966f-43f8-3e47-bd73-ddee66467a4c.roa Signing time: Wed 18 Jun 2025 18:00:40 +0000 ROA not before: Wed 18 Jun 2025 18:00:40 +0000 ROA not after: Tue 16 Sep 2025 18:00:40 +0000 asID: 22773 IP address blocks: 24.251.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:96:0d:fd:9b:c1:f6:ea:cc:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:40 2025 GMT Not After : Sep 16 18:00:40 2025 GMT Subject: CN=bd180f7e-70ba-4152-adf8-a4f75d058da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:1e:7b:64:8e:c4:52:d5:56:0b:5b:7a:cf: 0c:cd:2c:64:19:9d:12:d5:df:0b:f5:3e:de:74:4c: 58:66:c4:f4:76:0a:f8:3e:f9:07:3c:cc:e1:63:8d: 88:ea:f3:24:6d:48:ce:69:e9:b4:bc:e5:a5:c7:7e: b0:23:bf:4e:70:99:f5:4f:6c:99:38:92:96:0f:7d: dd:6d:ea:04:f5:0e:d7:e7:5f:30:b7:81:4d:22:4a: 71:f0:62:0a:a0:d5:46:44:c5:2f:18:c3:f0:45:5e: 9b:2f:d0:25:f4:50:86:ff:e8:55:a3:11:ec:11:b7: 97:c4:f4:ba:ce:30:d5:6c:3b:9f:ae:a7:c5:be:52: a5:03:b3:da:e9:e0:9f:18:a1:14:6b:0e:55:bd:e1: 73:de:9c:e0:5e:83:0e:48:35:70:37:56:4b:c0:4f: 46:26:41:6e:ae:f8:03:ab:fe:1a:e7:75:a7:63:96: ea:17:45:4f:1f:0c:ef:e0:5c:4c:5f:ec:e7:be:21: dc:25:de:ca:1e:43:f2:b2:df:c2:de:42:8f:f9:d3: fd:d5:1d:52:9c:dd:8e:a8:d0:a4:7b:fd:86:84:e0: ea:f4:24:67:6d:14:c8:94:76:fa:dc:09:e4:96:09: 5e:1a:85:8a:df:fa:36:9d:a5:e0:7e:9a:7d:20:b3: 44:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:57:CE:68:B2:18:E6:C5:C8:BE:D0:8C:2D:B4:E8:B4:31:6C:5C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/814c966f-43f8-3e47-bd73-ddee66467a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:25:68:9b:be:87:79:15:40:e3:9b:d6:2c:4f:35:be:13:2b: 67:90:dc:f8:1c:b3:73:c0:ca:cd:e8:4c:b1:6f:d2:31:43:3c: be:81:75:54:4a:7f:99:d8:b9:76:00:c1:79:b8:a9:7d:63:87: 12:20:14:be:a9:8f:47:6f:22:ec:a6:a3:52:4c:be:63:1c:6a: d4:ac:1f:15:3a:9d:66:d4:fb:14:ca:50:d5:36:69:f7:60:a2: 43:3a:6b:f8:23:06:f5:5e:c0:24:1d:03:1a:91:37:7d:40:e4: 9c:6b:9f:52:aa:60:46:f1:a5:29:d7:22:b6:aa:b9:10:2c:c9: 12:11:9f:bf:cc:ae:bb:91:42:0f:d2:ee:24:ce:af:26:79:6d: ef:8d:b3:c2:e5:5d:b1:e7:37:87:ca:4e:4b:48:56:96:b1:0d: 93:41:25:06:9c:df:f6:a1:57:00:51:b9:f9:a3:56:68:f1:e8: e5:5e:7e:47:5f:26:7e:05:48:92:a9:42:5c:06:39:97:98:eb: 85:67:a9:df:52:85:a2:6e:88:d2:ea:44:8b:0c:dc:be:5d:ca: 78:45:8f:7c:29:18:89:50:78:97:ec:b4:d3:b7:8b:eb:e5:3c: cd:00:77:87:1f:d2:fc:12:9a:06:4d:a5:65:e5:46:50:d6:f2: 99:c2:8a:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D5YN/ZvB9urMUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDA0MFoXDTI1MDkxNjE4MDA0MFowLzEtMCsGA1UEAxMk YmQxODBmN2UtNzBiYS00MTUyLWFkZjgtYTRmNzVkMDU4ZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaQee2SOxFLVVgtbes8MzSxkGZ0S1d8L9T7e dExYZsT0dgr4PvkHPMzhY42I6vMkbUjOaem0vOWlx36wI79OcJn1T2yZOJKWD33d beoE9Q7X518wt4FNIkpx8GIKoNVGRMUvGMPwRV6bL9Al9FCG/+hVoxHsEbeXxPS6 zjDVbDufrqfFvlKlA7Pa6eCfGKEUaw5VveFz3pzgXoMOSDVwN1ZLwE9GJkFurvgD q/4a53WnY5bqF0VPHwzv4FxMX+znviHcJd7KHkPyst/C3kKP+dP91R1SnN2OqNCk e/2GhODq9CRnbRTIlHb63AnklgleGoWK3/o2naXgfpp9ILNE/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdXzmiyGObFyL7QjC206LQxbFyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODE0Yzk2NmYtNDNmOC0z ZTQ3LWJkNzMtZGRlZTY2NDY3YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPudMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKslaJu+h3kVQOOb1ixPNb4TK2eQ3Pgcs3PAys3oTLFv0jFDPL6BdVRK f5nYuXYAwXm4qX1jhxIgFL6pj0dvIuymo1JMvmMcatSsHxU6nWbU+xTKUNU2afdg okM6a/gjBvVewCQdAxqRN31A5Jxrn1KqYEbxpSnXIraquRAsyRIRn7/MrruRQg/S 7iTOryZ5be+Ns8LlXbHnN4fKTktIVpaxDZNBJQac3/ahVwBRufmjVmjx6OVefkdf Jn4FSJKpQlwGOZeY64Vnqd9ShaJuiNLqRIsM3L5dynhFj3wpGIlQeJfstNO3i+vl PM0Ad4cf0vwSmgZNpWXlRlDW8pnCioM= -----END CERTIFICATE-----Generated at Mon Jun 30 02:14:45 2025 by rpki-client