$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8301b2e2-7ea6-3657-91af-c55148f4e62f.roa File: 8301b2e2-7ea6-3657-91af-c55148f4e62f.roa (raw, json) Hash identifier: MMxTaMGvcuN6JQ7yRHPAZUyZAn/yGDgZdgUHiTvTkvU= Subject key identifier: EE:EE:72:D0:C8:50:EB:AD:5E:C2:E4:BD:38:C7:6A:7E:F8:4D:8D:0C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AF2569FBD89483B17C6619F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8301b2e2-7ea6-3657-91af-c55148f4e62f.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.249.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9f:bd:89:48:3b:17:c6:61:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=2d1f7005-f5b4-4212-ac9c-33f9436bd81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6c:ee:2c:35:60:64:30:19:ad:d9:af:a1:dc: e5:7b:5c:31:78:a6:4e:32:b4:71:1f:b2:40:60:2c: 56:48:48:4e:a1:30:42:8c:e3:4f:8a:fc:a0:a9:20: 6f:02:24:4c:fe:49:70:95:ac:8c:7f:40:77:71:48: e4:9f:cb:04:e5:82:57:33:09:1c:77:52:19:f4:be: 88:bd:d6:e1:21:e4:47:e4:9a:f5:36:91:3a:c3:47: 39:c3:fd:98:62:97:72:06:e6:3c:d1:42:90:24:a4: e8:a6:94:ec:7b:0f:4e:fe:e2:4a:3b:e8:01:ed:a7: 92:44:04:17:b4:5c:1d:0a:28:65:26:f9:9f:2d:d2: 53:c3:ea:41:7d:db:71:fc:d7:95:73:c2:0a:e3:8f: 39:7f:ab:3e:f7:38:f3:37:e2:93:f7:c7:1a:32:c6: ef:a3:32:15:ff:c3:c0:12:d2:04:c8:02:68:f1:ce: d3:88:00:7d:d9:cf:d1:96:31:33:a3:89:57:28:4a: 4d:1f:69:a2:a3:8e:81:fe:dd:8b:10:d4:9c:b5:b3: 49:be:74:db:d6:67:e9:04:e6:bf:f8:0f:9f:1d:9b: 92:ad:86:d9:d7:05:bd:ef:8d:a6:37:b6:8a:ec:8c: 95:eb:84:74:02:12:7e:5c:75:c0:95:20:94:ad:2b: 3d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EE:72:D0:C8:50:EB:AD:5E:C2:E4:BD:38:C7:6A:7E:F8:4D:8D:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8301b2e2-7ea6-3657-91af-c55148f4e62f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.249.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4a:40:29:fe:27:7b:d8:b1:9b:ca:40:72:60:36:92:65:43: 2f:59:e3:84:65:f6:a1:16:99:9e:38:09:b2:27:e0:3d:db:83: 59:bb:b4:e5:fd:05:a2:6d:f4:06:2a:7e:cf:0c:49:84:51:79: 05:65:59:ac:c1:8a:2e:72:24:4f:2d:91:44:8b:1f:a3:25:6a: 2d:0a:35:29:74:a2:24:87:84:2a:ed:42:ea:a0:e2:a9:be:70: 57:5d:ad:b8:03:de:16:9c:22:83:f7:a6:12:ce:32:37:ce:83: 64:a0:32:25:da:c8:c5:6b:9a:63:fd:31:a0:fc:62:f1:b4:ec: 2f:ce:19:6c:ec:8b:fc:1a:c0:cb:54:b5:d8:f9:92:2a:77:8d: b4:61:1e:14:75:de:de:df:83:a3:ca:4f:42:e2:77:d2:bb:69: 8a:d4:42:71:7b:7a:14:63:93:36:7a:18:cf:0a:ea:b6:6f:3d: 3b:a1:52:cb:c6:35:24:ce:a5:c2:a9:57:cd:c8:66:98:b8:ad: b0:bc:dd:ec:ce:5d:1e:c3:96:f9:fc:41:3c:e5:36:37:e4:12: 1f:6b:ea:85:8c:50:e4:96:f7:d4:07:69:b1:66:ef:dc:c1:94: 46:86:e4:61:19:ba:45:37:66:5c:bc:e8:a6:fa:b5:9c:6a:b7: 6f:3f:4a:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVp+9iUg7F8ZhnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MmQxZjcwMDUtZjViNC00MjEyLWFjOWMtMzNmOTQzNmJkODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WzuLDVgZDAZrdmvodzle1wxeKZOMrRxH7JA YCxWSEhOoTBCjONPivygqSBvAiRM/klwlayMf0B3cUjkn8sE5YJXMwkcd1IZ9L6I vdbhIeRH5Jr1NpE6w0c5w/2YYpdyBuY80UKQJKToppTsew9O/uJKO+gB7aeSRAQX tFwdCihlJvmfLdJTw+pBfdtx/NeVc8IK4485f6s+9zjzN+KT98caMsbvozIV/8PA EtIEyAJo8c7TiAB92c/RljEzo4lXKEpNH2mio46B/t2LENSctbNJvnTb1mfpBOa/ +A+fHZuSrYbZ1wW9742mN7aK7IyV64R0AhJ+XHXAlSCUrSs93wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7uctDIUOutXsLkvTjHan74TY0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODMwMWIyZTItN2VhNi0z NjU3LTkxYWYtYzU1MTQ4ZjRlNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClKQCn+J3vYsZvKQHJgNpJlQy9Z44Rl9qEWmZ44CbIn4D3bg1m7tOX9 BaJt9AYqfs8MSYRReQVlWazBii5yJE8tkUSLH6Mlai0KNSl0oiSHhCrtQuqg4qm+ cFddrbgD3hacIoP3phLOMjfOg2SgMiXayMVrmmP9MaD8YvG07C/OGWzsi/wawMtU tdj5kip3jbRhHhR13t7fg6PKT0Lid9K7aYrUQnF7ehRjkzZ6GM8K6rZvPTuhUsvG NSTOpcKpV83IZpi4rbC83ezOXR7Dlvn8QTzlNjfkEh9r6oWMUOSW99QHabFm79zB lEaG5GEZukU3Zly86Kb6tZxqt28/SkA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:51 2025 by rpki-client