$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88ff4b39-6bc7-34ab-ac22-a1043f7a0844.roa File: 88ff4b39-6bc7-34ab-ac22-a1043f7a0844.roa (raw, json) Hash identifier: tUMQOxaCue0t5Hwfql9cfjaTfrqVO+s9VEdpIWMb444= Subject key identifier: 94:12:88:B8:BB:05:7A:06:2F:C3:83:4C:88:D4:2F:91:F5:C9:09:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFE5F06ED7839D5A91D5600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88ff4b39-6bc7-34ab-ac22-a1043f7a0844.roa Signing time: Thu 19 Jun 2025 10:37:36 +0000 ROA not before: Thu 19 Jun 2025 10:37:36 +0000 ROA not after: Wed 17 Sep 2025 10:37:36 +0000 asID: 22773 IP address blocks: 174.74.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fe:5f:06:ed:78:39:d5:a9:1d:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:37:36 2025 GMT Not After : Sep 17 10:37:36 2025 GMT Subject: CN=e4ff3ac4-78a5-44b7-bcf7-6af164404820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d0:24:e6:1d:61:be:e8:14:89:09:2b:05:d6: 60:34:e7:bc:2d:1d:ee:e2:68:4b:40:29:46:51:c1: 1b:b4:af:97:59:11:7d:8d:a4:b8:4d:c6:4c:58:39: 4c:68:13:0b:25:20:96:02:c9:f7:c1:4a:23:71:dc: ed:d7:f9:24:e7:10:fc:60:e3:33:e0:5e:3e:bc:38: cf:d7:bb:bf:2c:f6:4d:9c:2b:43:86:81:74:6f:92: f4:2a:83:fa:46:21:28:f1:85:96:60:e4:6d:25:72: 86:91:7d:4e:72:3d:90:7b:3f:70:ff:4e:2f:ef:16: 8b:e7:0b:2d:1c:fb:b8:7a:8f:c2:be:d7:04:2b:ba: 72:33:ae:89:09:3f:7b:71:37:b9:b1:27:3d:8c:db: e8:94:8a:a3:e5:a4:34:7b:41:0b:d9:ee:e3:0c:82: f4:5f:41:85:83:be:1b:c9:f1:49:6b:60:dd:2d:da: 95:12:09:b1:74:d3:e3:80:30:78:fa:4c:f0:4a:fd: 47:60:bc:c0:7e:c5:5f:b1:b7:19:f4:58:0b:20:d8: fe:9f:4f:7e:0e:db:e4:71:71:83:c2:44:1b:02:82: dc:f1:b4:bb:5d:ee:ea:27:67:59:e8:6c:02:de:85: 85:3c:86:fa:1d:09:14:01:f2:d7:04:89:10:6e:6b: ad:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:12:88:B8:BB:05:7A:06:2F:C3:83:4C:88:D4:2F:91:F5:C9:09:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88ff4b39-6bc7-34ab-ac22-a1043f7a0844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.74.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:04:5d:15:cc:25:2d:93:35:d0:f8:10:1f:a6:ca:30:12:8b: 2d:b6:59:51:09:9a:47:d8:e4:06:6b:49:01:2c:ca:31:3a:d7: 65:7b:3b:4d:8e:7c:f9:93:8d:5a:92:7f:2b:68:44:de:34:2d: 3b:4f:43:2b:b1:47:29:3b:80:15:ea:79:c2:90:38:3c:1f:08: 15:a5:cd:ee:ec:20:9b:ce:e8:6d:7f:e0:5b:68:82:41:37:b3: ec:bc:9d:6e:ec:c5:07:f2:2a:10:67:12:5b:d0:0a:76:91:26: 73:f6:c6:99:b3:05:a9:40:64:65:d3:2e:e7:e2:7e:19:76:15: 2f:f8:ce:31:5c:78:37:8e:87:51:0f:11:8f:e1:1d:7f:57:16: e8:ac:b1:25:6e:aa:41:1f:4a:8e:ce:6e:9d:7a:62:8c:bd:08: ab:9a:9c:06:c4:96:83:5a:d3:d4:35:3c:55:6c:e1:43:dc:39: 18:0a:cd:81:df:75:c7:cd:a2:7c:f7:29:dc:6f:87:df:e7:56: d7:29:96:28:e2:68:88:eb:2a:2d:cd:d1:71:99:ef:57:a8:ac: 2f:e8:e4:17:39:8a:0d:1e:b5:fd:32:1b:a3:75:27:c7:e3:ba: df:0f:9d:e9:8e:39:e7:a0:28:05:45:42:6d:62:7e:da:14:4d: 6b:33:d1:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/l8G7Xg51akdVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzczNloXDTI1MDkxNzEwMzczNlowLzEtMCsGA1UEAxMk ZTRmZjNhYzQtNzhhNS00NGI3LWJjZjctNmFmMTY0NDA0ODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtAk5h1hvugUiQkrBdZgNOe8LR3u4mhLQClG UcEbtK+XWRF9jaS4TcZMWDlMaBMLJSCWAsn3wUojcdzt1/kk5xD8YOMz4F4+vDjP 17u/LPZNnCtDhoF0b5L0KoP6RiEo8YWWYORtJXKGkX1Ocj2Qez9w/04v7xaL5wst HPu4eo/CvtcEK7pyM66JCT97cTe5sSc9jNvolIqj5aQ0e0EL2e7jDIL0X0GFg74b yfFJa2DdLdqVEgmxdNPjgDB4+kzwSv1HYLzAfsVfsbcZ9FgLINj+n09+DtvkcXGD wkQbAoLc8bS7Xe7qJ2dZ6GwC3oWFPIb6HQkUAfLXBIkQbmut5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQSiLi7BXoGL8ODTIjUL5H1yQksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODhmZjRiMzktNmJjNy0z NGFiLWFjMjItYTEwNDNmN2EwODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkqSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgEXRXMJS2TNdD4EB+myjASiy22WVEJmkfY5AZrSQEsyjE612V7O02O fPmTjVqSfytoRN40LTtPQyuxRyk7gBXqecKQODwfCBWlze7sIJvO6G1/4FtogkE3 s+y8nW7sxQfyKhBnElvQCnaRJnP2xpmzBalAZGXTLufifhl2FS/4zjFceDeOh1EP EY/hHX9XFuissSVuqkEfSo7Obp16Yoy9CKuanAbEloNa09Q1PFVs4UPcORgKzYHf dcfNonz3Kdxvh9/nVtcplijiaIjrKi3N0XGZ71eorC/o5Bc5ig0etf0yG6N1J8fj ut8PnemOOeegKAVFQm1iftoUTWsz0fA= -----END CERTIFICATE-----Generated at Tue Jul 1 13:05:52 2025 by rpki-client