$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/985d1942-69e8-3c86-8ff6-c6e81d2fc58a.roa File: 985d1942-69e8-3c86-8ff6-c6e81d2fc58a.roa (raw, json) Hash identifier: S11dpWP7LEcM3+kkatpRx/6/SAv+dysZw5Aom77kiA4= Subject key identifier: C3:C8:03:1F:3E:8A:37:29:D8:C9:C3:B5:81:E0:A8:28:F3:FE:31:5D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A69B90A7B8F1E78140AA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/985d1942-69e8-3c86-8ff6-c6e81d2fc58a.roa Signing time: Fri 20 Jun 2025 09:28:11 +0000 ROA not before: Fri 20 Jun 2025 09:28:11 +0000 ROA not after: Thu 18 Sep 2025 09:28:11 +0000 asID: 22773 IP address blocks: 24.253.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:9b:90:a7:b8:f1:e7:81:40:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:11 2025 GMT Not After : Sep 18 09:28:11 2025 GMT Subject: CN=2f676966-e8f2-4e18-b429-55e8383e39b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:1c:64:00:07:39:93:e6:70:d6:a4:c8:de: 0e:c0:c1:6e:44:0d:92:9f:c5:8c:af:da:da:ca:d2: c1:5b:db:77:e1:8e:31:61:2b:01:77:8e:03:46:cc: 2d:64:87:6a:3a:e2:42:2e:d2:ae:04:bb:e7:41:8e: 28:61:87:f7:19:ca:b4:63:e1:b1:4a:5e:3e:cc:36: e1:43:81:4f:bb:c3:8a:2b:54:eb:6a:a6:8c:b4:9e: a2:81:16:46:b5:72:64:15:6f:c9:53:d6:a5:76:8d: 31:35:c9:23:65:32:4a:7b:bb:8a:9c:40:5d:f1:90: d3:34:74:24:8c:ca:c5:8d:7d:d0:16:29:ab:73:a1: e6:8f:1d:5d:d7:38:18:8a:86:de:a0:a6:db:56:1e: 88:33:f5:54:74:f8:63:f8:13:92:93:d6:e8:3d:2a: 03:e2:b1:46:62:3d:f7:53:c4:39:fc:90:99:3a:08: ba:54:42:61:0d:f7:dc:2a:db:3e:f3:ee:71:56:ac: 5d:30:b0:0a:43:21:e6:3d:6a:ac:d9:bf:dc:e6:85: 1f:ca:17:72:4e:27:3a:b2:45:3c:ce:e1:9a:89:f7: 5d:d9:7d:dd:e7:84:43:8e:ee:1f:bb:15:16:e8:aa: 6c:d8:28:89:77:ed:84:98:4c:37:9c:80:ae:31:08: 46:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C8:03:1F:3E:8A:37:29:D8:C9:C3:B5:81:E0:A8:28:F3:FE:31:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/985d1942-69e8-3c86-8ff6-c6e81d2fc58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9e:62:05:dd:08:29:58:10:72:88:20:78:ec:a8:f1:92:e0: 60:c6:a0:bd:d1:be:a1:8b:1e:a2:61:8a:12:2d:a7:d1:0d:12: ae:f2:d1:7d:63:2b:17:46:0a:a6:e6:70:bf:93:57:59:b4:0d: b0:18:ec:a3:e9:20:12:a0:c2:50:a8:6d:d5:96:04:1c:50:72: f8:3d:e3:bb:b2:00:1c:67:5a:db:da:04:2d:46:7d:40:41:3e: 35:13:00:4c:87:1d:58:08:0e:53:d7:49:a7:5c:fd:2b:13:f8: 98:11:f7:f0:49:9e:ed:33:08:7a:63:da:5f:25:29:d9:88:6a: 54:33:c7:19:c5:b5:77:04:83:54:82:ff:e4:db:c0:cc:35:e2: b2:e2:1f:ce:c3:54:26:0c:b0:cf:13:3f:20:38:6c:49:f6:69: 84:ee:76:5d:eb:a7:59:74:f0:25:03:5a:9b:36:43:f0:0d:c1: cc:91:33:36:4a:40:b2:72:4a:dc:93:b8:d5:f6:fc:c8:0c:b1: 0f:2c:95:de:26:af:d4:4a:57:9d:4f:93:28:57:42:36:ae:c6: 24:6e:ba:8d:0e:90:4c:e8:24:6d:d2:c7:ac:05:2d:d8:39:4e: 54:5a:56:b1:7d:47:81:e2:79:e2:8d:5b:7a:46:33:93:41:13: 44:a8:ac:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAppuQp7jx54FAqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjgxMVoXDTI1MDkxODA5MjgxMVowLzEtMCsGA1UEAxMk MmY2NzY5NjYtZThmMi00ZTE4LWI0MjktNTVlODM4M2UzOWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyocZAAHOZPmcNakyN4OwMFuRA2Sn8WMr9ra ytLBW9t34Y4xYSsBd44DRswtZIdqOuJCLtKuBLvnQY4oYYf3Gcq0Y+GxSl4+zDbh Q4FPu8OKK1TraqaMtJ6igRZGtXJkFW/JU9aldo0xNckjZTJKe7uKnEBd8ZDTNHQk jMrFjX3QFimrc6Hmjx1d1zgYiobeoKbbVh6IM/VUdPhj+BOSk9boPSoD4rFGYj33 U8Q5/JCZOgi6VEJhDffcKts+8+5xVqxdMLAKQyHmPWqs2b/c5oUfyhdyTic6skU8 zuGaifdd2X3d54RDju4fuxUW6Kps2CiJd+2EmEw3nICuMQhGEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPIAx8+ijcp2MnDtYHgqCjz/jFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTg1ZDE5NDItNjllOC0z Yzg2LThmZjYtYzZlODFkMmZjNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP0nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESeYgXdCClYEHKIIHjsqPGS4GDGoL3RvqGLHqJhihItp9ENEq7y0X1j KxdGCqbmcL+TV1m0DbAY7KPpIBKgwlCobdWWBBxQcvg947uyABxnWtvaBC1GfUBB PjUTAEyHHVgIDlPXSadc/SsT+JgR9/BJnu0zCHpj2l8lKdmIalQzxxnFtXcEg1SC /+TbwMw14rLiH87DVCYMsM8TPyA4bEn2aYTudl3rp1l08CUDWps2Q/ANwcyRMzZK QLJyStyTuNX2/MgMsQ8sld4mr9RKV51PkyhXQjauxiRuuo0OkEzoJG3Sx6wFLdg5 TlRaVrF9R4HieeKNW3pGM5NBE0SorOE= -----END CERTIFICATE-----Generated at Tue Jul 1 04:00:53 2025 by rpki-client