$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a23f987f-64af-3866-9cd9-e4fb6f3b645d.roa File: a23f987f-64af-3866-9cd9-e4fb6f3b645d.roa (raw, json) Hash identifier: dg5uqwP8Mz2ULJ/PUTpbIzUD2WeOX4pOa5t+iQPrgbw= Subject key identifier: 5E:19:B6:A3:34:A2:BB:19:18:35:90:BB:6B:C4:40:82:23:8E:F9:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0F979F24E2E01C926D3300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a23f987f-64af-3866-9cd9-e4fb6f3b645d.roa Signing time: Wed 18 Jun 2025 18:00:41 +0000 ROA not before: Wed 18 Jun 2025 18:00:41 +0000 ROA not after: Tue 16 Sep 2025 18:00:41 +0000 asID: 22773 IP address blocks: 24.251.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:97:9f:24:e2:e0:1c:92:6d:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:41 2025 GMT Not After : Sep 16 18:00:41 2025 GMT Subject: CN=9574d938-092c-4dc3-9d34-9e51d5a7bf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:8d:9a:ef:08:c1:18:e0:00:12:94:19:dc: a0:0d:30:d1:41:00:c4:cb:07:50:87:39:18:71:ef: ee:ca:a8:61:ce:d9:13:12:89:74:77:ca:10:c4:07: 48:24:da:8e:b2:37:c5:14:45:f2:31:04:81:d1:df: cc:89:75:8d:0b:d5:ca:10:20:5c:f9:74:50:82:e3: 14:1c:16:16:5f:cf:56:52:90:66:2c:de:82:1b:2a: 8b:19:3f:02:b7:da:60:4f:1e:59:0f:6e:df:20:c5: a0:e0:43:18:01:5a:72:47:6f:e7:cf:33:0b:d2:6d: 17:77:d0:04:c2:17:ff:67:87:10:81:d9:3b:7e:95: 5f:d9:8f:06:5b:02:89:fe:fc:bc:6e:b2:e7:8e:fd: c5:4c:2a:36:c9:96:23:eb:e1:a2:86:40:6a:7f:5a: 4e:69:36:e9:9b:81:64:07:3e:d8:83:98:50:14:eb: 9d:b1:d1:c0:08:1c:48:55:75:e8:f1:90:cd:74:73: 96:8e:8b:5b:dc:e5:3e:69:2b:44:11:0d:58:95:30: 72:31:a1:f7:3a:37:e1:45:a9:4b:72:71:58:a3:59: ff:bd:3c:7c:2e:5f:02:ba:00:39:42:57:e2:9f:d4: d4:e8:bb:c2:1e:9c:ed:1b:1c:ee:b1:db:66:77:68: 5f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:19:B6:A3:34:A2:BB:19:18:35:90:BB:6B:C4:40:82:23:8E:F9:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a23f987f-64af-3866-9cd9-e4fb6f3b645d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:af:b8:bd:b7:9d:63:46:b2:81:07:7f:73:2f:44:2e:cc:12: 48:0f:9b:06:54:12:51:1c:00:dd:32:d5:e9:07:4d:d3:34:2f: 11:db:87:b4:b2:04:d1:f2:38:e4:4d:58:6e:33:d1:63:54:02: 0f:35:84:51:a5:a5:7d:f7:b1:b8:c3:35:65:aa:57:1d:36:56: 5f:1d:8b:c6:ee:6d:94:4d:69:cd:65:fc:4b:61:20:c6:bd:3e: 77:3a:99:b4:b9:46:36:f0:39:b6:ef:93:b3:3c:e6:1b:3f:65: a8:83:a8:0c:6f:2a:68:13:9e:3b:21:e8:71:83:23:a0:25:26: f3:0c:99:86:86:9b:96:72:17:20:b4:46:92:08:16:2e:5a:84: 21:ce:8f:21:89:0c:09:7a:97:26:2a:3f:6b:ce:54:7e:b7:44: 61:3f:8e:c7:7f:d1:50:ae:0b:00:cb:bb:00:fe:da:2d:ab:9c: f6:85:c3:ea:c5:13:17:59:a2:b0:e6:9f:41:f2:e4:b1:19:8f: 5d:ab:7d:67:a6:82:31:0c:a7:61:6b:82:87:9b:5f:f6:0b:4a: 25:b0:46:db:5e:48:c1:b5:19:15:ac:23:3a:f2:c5:5b:87:6f: ce:ae:24:40:25:62:12:88:01:c9:f9:e3:1e:51:dd:76:53:03: 41:ba:1d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D5efJOLgHJJtMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDA0MVoXDTI1MDkxNjE4MDA0MVowLzEtMCsGA1UEAxMk OTU3NGQ5MzgtMDkyYy00ZGMzLTlkMzQtOWU1MWQ1YTdiZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8mNmu8IwRjgABKUGdygDTDRQQDEywdQhzkY ce/uyqhhztkTEol0d8oQxAdIJNqOsjfFFEXyMQSB0d/MiXWNC9XKECBc+XRQguMU HBYWX89WUpBmLN6CGyqLGT8Ct9pgTx5ZD27fIMWg4EMYAVpyR2/nzzML0m0Xd9AE whf/Z4cQgdk7fpVf2Y8GWwKJ/vy8brLnjv3FTCo2yZYj6+GihkBqf1pOaTbpm4Fk Bz7Yg5hQFOudsdHACBxIVXXo8ZDNdHOWjotb3OU+aStEEQ1YlTByMaH3OjfhRalL cnFYo1n/vTx8Ll8CugA5Qlfin9TU6LvCHpztGxzusdtmd2hfLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4ZtqM0orsZGDWQu2vEQIIjjvn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTIzZjk4N2YtNjRhZi0z ODY2LTljZDktZTRmYjZmM2I2NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyvuL23nWNGsoEHf3MvRC7MEkgPmwZUElEcAN0y1ekHTdM0LxHbh7Sy BNHyOORNWG4z0WNUAg81hFGlpX33sbjDNWWqVx02Vl8di8bubZRNac1l/EthIMa9 Pnc6mbS5RjbwObbvk7M85hs/ZaiDqAxvKmgTnjsh6HGDI6AlJvMMmYaGm5ZyFyC0 RpIIFi5ahCHOjyGJDAl6lyYqP2vOVH63RGE/jsd/0VCuCwDLuwD+2i2rnPaFw+rF ExdZorDmn0Hy5LEZj12rfWemgjEMp2FrgoebX/YLSiWwRtteSMG1GRWsIzryxVuH b86uJEAlYhKIAcn54x5R3XZTA0G6Hf0= -----END CERTIFICATE-----Generated at Tue Jul 1 20:36:58 2025 by rpki-client