$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89da97c7-4987-38f3-af55-c1dbda3bdfd5.roa File: 89da97c7-4987-38f3-af55-c1dbda3bdfd5.roa (raw, json) Hash identifier: MiNduXHbsfpgyjaGPsw93iaKfiLDkaeAXYnaiX+TQk4= Subject key identifier: B3:0F:51:F7:A6:7A:DF:64:5B:DC:83:69:22:F2:FB:7D:2D:04:39:E5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFE5FC7614DB2B3E5878300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89da97c7-4987-38f3-af55-c1dbda3bdfd5.roa Signing time: Thu 19 Jun 2025 10:37:36 +0000 ROA not before: Thu 19 Jun 2025 10:37:36 +0000 ROA not after: Wed 17 Sep 2025 10:37:36 +0000 asID: 22773 IP address blocks: 174.74.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fe:5f:c7:61:4d:b2:b3:e5:87:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:37:36 2025 GMT Not After : Sep 17 10:37:36 2025 GMT Subject: CN=5dabc794-3544-4bba-a062-c0132aa3966b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ff:45:5f:db:ee:ee:1a:92:f6:a1:78:19:04: 1c:d8:8d:c8:a2:c1:8f:99:93:c7:bc:92:49:b2:2a: 83:6f:e5:41:c1:09:c1:ed:46:e1:11:6c:45:41:ed: 40:3a:34:98:df:7b:e2:c6:a2:a9:6e:29:d2:65:e2: 41:4e:d9:3c:85:4f:2b:58:e8:ca:fa:26:95:71:76: 92:17:86:d9:df:43:26:66:6f:02:cd:9b:6c:16:b9: 10:c1:b6:10:70:31:36:e0:7c:65:f3:b0:32:4b:8f: 3e:54:8b:ad:ea:52:b6:92:a3:03:40:cf:6b:4b:59: 30:d0:51:f4:a2:6c:83:01:b6:cc:17:fb:61:82:e7: de:49:24:ed:6c:04:26:32:c3:91:4e:dc:69:05:c8: 10:a7:14:86:10:e6:71:88:91:49:a4:85:43:cf:5d: 54:98:5b:7c:50:b5:42:29:b3:d4:9f:54:89:f0:c1: 90:ff:0b:3c:3c:ff:01:74:97:a5:43:c0:0a:de:52: e6:b8:c9:f3:49:d0:fd:8f:07:4d:ce:7d:5c:1e:39: 6b:ea:38:35:75:aa:09:eb:8a:36:17:de:c0:cb:dc: e6:68:07:f9:aa:65:40:73:f6:eb:8b:31:52:79:8a: ef:9d:92:f3:ff:fb:b3:40:a1:b8:7c:db:aa:78:a9: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0F:51:F7:A6:7A:DF:64:5B:DC:83:69:22:F2:FB:7D:2D:04:39:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89da97c7-4987-38f3-af55-c1dbda3bdfd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.74.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b1:e6:63:ca:15:82:f7:c1:a5:c4:fa:9d:3c:c1:96:8e:30: 99:99:49:0f:4f:a1:f0:64:fb:c5:48:46:0c:62:aa:6b:ce:52: 5f:46:42:77:bb:eb:5e:e7:5c:0a:e4:72:23:6d:07:6a:c0:ba: b6:02:15:6b:e9:0f:06:8f:c3:fd:80:bc:6c:a6:17:fb:f7:6f: 02:ab:21:bc:2c:93:ce:28:4f:5b:f7:33:df:99:72:68:59:f1: 10:c7:8b:89:ce:f0:99:e1:d1:e3:cd:4c:88:d3:7e:a6:c2:2d: 09:e3:de:6f:43:c7:f2:7e:43:b9:da:6d:db:f8:23:3c:a7:c3: fb:d5:06:51:7c:da:a1:2d:31:47:6c:f9:f3:e8:5f:53:1a:28: db:c0:27:ec:46:56:8b:64:7c:95:f0:f0:fa:1c:28:c7:f2:49: a8:02:33:7c:b1:2a:2c:9d:de:c0:e3:8c:1b:63:d0:fb:5f:e3: 67:72:57:4c:86:ab:0b:b2:47:e2:d7:6d:fb:72:ea:0b:a1:a0: 57:54:be:61:94:f6:c9:35:30:e0:e5:0e:64:dc:c3:3e:74:9a: d0:7c:87:81:d2:41:03:8f:ea:7e:b4:d8:6a:f2:ba:2f:80:fb: 1a:32:cb:dc:85:28:70:4b:c6:7c:5a:de:6a:c3:8c:41:ec:c5: c0:06:2d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/l/HYU2ys+WHgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzczNloXDTI1MDkxNzEwMzczNlowLzEtMCsGA1UEAxMk NWRhYmM3OTQtMzU0NC00YmJhLWEwNjItYzAxMzJhYTM5NjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv9FX9vu7hqS9qF4GQQc2I3IosGPmZPHvJJJ siqDb+VBwQnB7UbhEWxFQe1AOjSY33vixqKpbinSZeJBTtk8hU8rWOjK+iaVcXaS F4bZ30MmZm8CzZtsFrkQwbYQcDE24Hxl87AyS48+VIut6lK2kqMDQM9rS1kw0FH0 omyDAbbMF/thgufeSSTtbAQmMsORTtxpBcgQpxSGEOZxiJFJpIVDz11UmFt8ULVC KbPUn1SJ8MGQ/ws8PP8BdJelQ8AK3lLmuMnzSdD9jwdNzn1cHjlr6jg1daoJ64o2 F97Ay9zmaAf5qmVAc/brizFSeYrvnZLz//uzQKG4fNuqeKk4nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMPUfemet9kW9yDaSLy+30tBDnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODlkYTk3YzctNDk4Ny0z OGYzLWFmNTUtYzFkYmRhM2JkZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkqUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCx5mPKFYL3waXE+p08wZaOMJmZSQ9PofBk+8VIRgxiqmvOUl9GQne7 617nXArkciNtB2rAurYCFWvpDwaPw/2AvGymF/v3bwKrIbwsk84oT1v3M9+ZcmhZ 8RDHi4nO8Jnh0ePNTIjTfqbCLQnj3m9Dx/J+Q7nabdv4Izynw/vVBlF82qEtMUds +fPoX1MaKNvAJ+xGVotkfJXw8PocKMfySagCM3yxKiyd3sDjjBtj0Ptf42dyV0yG qwuyR+LXbfty6guhoFdUvmGU9sk1MODlDmTcwz50mtB8h4HSQQOP6n602Gryui+A +xoyy9yFKHBLxnxa3mrDjEHsxcAGLZ4= -----END CERTIFICATE-----Generated at Tue Jul 1 16:56:59 2025 by rpki-client