$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86f0b5b8-e126-3005-85d0-f16d7dc1aed9.roa File: 86f0b5b8-e126-3005-85d0-f16d7dc1aed9.roa (raw, json) Hash identifier: S430wpGDyn/iycSYJxm8dWxm90bpq6r9IU7UFF00hXQ= Subject key identifier: 29:1A:A6:84:34:9D:6B:49:18:61:8D:8D:F4:D8:7D:51:3B:CE:89:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636349256937244BF37B580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86f0b5b8-e126-3005-85d0-f16d7dc1aed9.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 24.254.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:34:92:56:93:72:44:bf:37:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=75106f16-ac2f-43d7-9304-6b6807c4f3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:25:d2:b6:b5:ac:33:2c:31:e3:fd:a0:93:15: ee:72:be:7a:2e:f2:ee:64:8e:07:17:9d:d0:a8:70: f7:d9:79:b2:46:ca:31:0d:5a:59:36:de:3b:c6:c8: c2:70:b8:f9:e6:96:8e:b7:76:f2:98:e9:67:70:24: ff:96:45:2f:e2:3d:39:ad:c8:05:21:fd:5f:b9:79: a7:0e:d4:8d:bc:f1:93:eb:04:01:2b:ed:37:72:4d: 36:8c:d8:dd:a3:ea:f8:79:a6:b2:89:38:86:22:44: e8:a3:1c:46:5a:32:f1:f5:74:e4:07:51:1c:a5:a1: 12:11:c0:cf:c3:1e:35:f5:93:f7:9b:e4:37:32:62: 21:f4:84:98:74:6a:01:74:56:6a:5a:d9:6c:59:e0: c1:ff:58:28:b7:81:24:81:6a:ff:05:e6:35:58:d4: 77:41:d4:ee:21:5a:c1:d1:2a:ad:60:ed:8d:cd:98: 31:1e:8c:18:cf:fd:19:75:cb:1d:12:49:6d:ca:ee: e0:34:2a:9c:8d:23:68:59:82:fb:21:c1:56:78:73: 1b:b9:e8:aa:1b:3f:92:3b:97:c6:ef:ac:83:3c:d9: 66:f5:6f:d4:54:bb:f4:ad:81:bd:f8:49:a7:b6:30: 0d:da:91:69:33:80:df:38:39:c1:92:26:22:50:4f: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1A:A6:84:34:9D:6B:49:18:61:8D:8D:F4:D8:7D:51:3B:CE:89:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86f0b5b8-e126-3005-85d0-f16d7dc1aed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.254.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ac:8d:f0:9a:16:3b:c1:18:df:9b:d8:cb:ca:60:fc:93:87: c3:e9:fd:0a:a1:23:68:07:55:c3:8f:87:34:43:85:ce:f7:2b: 81:00:09:38:e5:6d:a8:aa:22:fe:70:08:28:43:35:7d:18:5b: ca:9c:e2:6f:7a:7d:7d:b0:72:dd:1d:24:f6:34:cc:ed:7c:26: 7c:a5:60:bf:56:db:e2:f3:b4:fa:7c:0d:ae:2c:71:bb:f8:b0: eb:96:25:34:ae:4f:2a:ce:42:4d:22:b1:d5:f2:cf:af:7b:c2: e9:69:15:e2:01:e2:63:df:f0:28:e3:c6:e2:fb:82:44:6d:04: 1e:6f:f0:49:28:ef:bf:d6:8f:f4:7b:04:16:ac:24:a7:89:4f: 00:73:4b:4f:eb:89:9a:63:8b:61:a3:2b:81:d7:d7:99:a1:9b: 26:18:c2:49:0f:80:86:f9:1d:34:15:da:26:51:1c:57:ee:c1: b1:3d:f3:5c:9b:f3:c3:a7:92:84:a5:53:10:d3:95:6b:24:9b: 28:d1:69:b8:84:91:06:9f:a5:1b:43:79:6f:8e:3b:33:aa:eb: 09:36:0a:a5:37:c4:a1:90:21:1e:ed:ec:13:d5:65:61:fa:1f: b6:da:27:42:e5:f3:ca:e9:8a:61:6a:d9:7f:40:a5:92:a1:cc: 84:c7:af:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjSSVpNyRL83tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NzUxMDZmMTYtYWMyZi00M2Q3LTkzMDQtNmI2ODA3YzRmM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyXStrWsMywx4/2gkxXucr56LvLuZI4HF53Q qHD32XmyRsoxDVpZNt47xsjCcLj55paOt3bymOlncCT/lkUv4j05rcgFIf1fuXmn DtSNvPGT6wQBK+03ck02jNjdo+r4eaayiTiGIkTooxxGWjLx9XTkB1EcpaESEcDP wx419ZP3m+Q3MmIh9ISYdGoBdFZqWtlsWeDB/1got4EkgWr/BeY1WNR3QdTuIVrB 0SqtYO2NzZgxHowYz/0ZdcsdEkltyu7gNCqcjSNoWYL7IcFWeHMbueiqGz+SO5fG 76yDPNlm9W/UVLv0rYG9+EmntjAN2pFpM4DfODnBkiYiUE+68wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkapoQ0nWtJGGGNjfTYfVE7zomFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODZmMGI1YjgtZTEyNi0z MDA1LTg1ZDAtZjE2ZDdkYzFhZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGP7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASsjfCaFjvBGN+b2MvKYPyTh8Pp/QqhI2gHVcOPhzRDhc73K4EACTjl baiqIv5wCChDNX0YW8qc4m96fX2wct0dJPY0zO18JnylYL9W2+LztPp8Da4scbv4 sOuWJTSuTyrOQk0isdXyz697wulpFeIB4mPf8CjjxuL7gkRtBB5v8Eko77/Wj/R7 BBasJKeJTwBzS0/riZpji2GjK4HX15mhmyYYwkkPgIb5HTQV2iZRHFfuwbE981yb 88OnkoSlUxDTlWskmyjRabiEkQafpRtDeW+OOzOq6wk2CqU3xKGQIR7t7BPVZWH6 H7baJ0Ll88rpimFq2X9ApZKhzITHrwg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:14 2025 by rpki-client