$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f123c0-2604-3ef5-b61a-7bacb9cb05d0.roa File: a3f123c0-2604-3ef5-b61a-7bacb9cb05d0.roa (raw, json) Hash identifier: dhKEiFogqxaJ2gCviX1jaDU8AEVHSEd/Z15Mz61GiNg= Subject key identifier: 8E:28:EB:20:76:03:26:ED:96:43:D0:D4:1F:CF:18:CD:BD:B4:58:5F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6BA2042BEB7185867C180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f123c0-2604-3ef5-b61a-7bacb9cb05d0.roa Signing time: Fri 20 Jun 2025 09:28:26 +0000 ROA not before: Fri 20 Jun 2025 09:28:26 +0000 ROA not after: Thu 18 Sep 2025 09:28:26 +0000 asID: 22773 IP address blocks: 24.253.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:ba:20:42:be:b7:18:58:67:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:26 2025 GMT Not After : Sep 18 09:28:26 2025 GMT Subject: CN=f1716cf8-6a92-44a6-bc3a-56529b822dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3e:6d:68:1a:21:49:55:fd:b4:dc:6a:a8:6e: 34:64:13:3b:bf:26:68:63:13:ef:e3:14:a6:6e:f1: 47:c7:73:1a:bd:c1:94:e2:ef:9e:b8:65:43:ea:8d: 04:ef:5e:1c:15:58:80:a2:ab:58:d1:98:17:8d:1d: f1:3f:15:47:25:bb:39:b3:be:8d:c4:fc:0d:74:67: d0:4a:d9:22:93:ea:ad:8d:8e:0d:32:32:fd:aa:31: 86:bb:22:ed:b3:08:ab:77:1a:05:2d:4c:e6:74:7b: 79:59:26:c0:19:37:1b:6f:bf:22:cf:2d:56:f3:9e: 92:51:98:51:6c:57:44:f0:a7:44:b1:48:52:58:42: 7e:d0:05:34:6f:05:7b:bf:ec:12:d0:9c:fc:4f:15: 28:ba:21:c1:98:53:40:59:bc:65:9c:df:0b:70:e3: 9c:8a:ec:b9:a6:ec:58:58:88:c6:50:91:09:c3:d5: b8:c9:40:61:4a:a7:ed:b9:3d:39:81:a7:c2:fc:8a: a2:43:15:cd:7f:32:55:b8:31:21:d7:29:5c:53:92: 29:e9:cf:43:18:36:49:4e:90:4e:23:7b:c4:20:3f: d3:3f:04:42:84:c7:5b:32:51:4d:e5:e7:cb:9b:92: 25:c2:2a:30:fb:bc:03:4f:13:29:cd:a5:92:ca:4a: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:28:EB:20:76:03:26:ED:96:43:D0:D4:1F:CF:18:CD:BD:B4:58:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f123c0-2604-3ef5-b61a-7bacb9cb05d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:22:16:09:99:00:8e:c3:03:6f:77:57:1f:60:15:06:e9:d0: f8:f9:37:92:13:b3:5a:e2:99:25:4b:c9:72:51:a0:11:ff:53: f7:d1:8e:85:7a:0a:c9:ca:50:c5:89:64:90:a9:df:bc:d5:af: eb:cd:c1:cd:4f:51:78:af:55:6b:79:b0:b1:be:9f:1d:47:3f: aa:78:8b:0e:d2:47:82:da:fc:1a:75:47:89:9b:52:38:82:5c: 62:3f:49:70:1c:4a:d4:fe:3d:50:e6:8c:65:71:ad:15:cb:c3: a2:79:f8:a0:15:0a:97:f7:3a:38:24:f7:61:5a:77:1c:62:37: c8:08:c2:a0:f4:b4:9d:b1:93:2a:79:95:aa:05:34:32:b2:da: e9:5b:6c:c4:62:85:6d:e0:e0:3e:16:84:71:2f:25:ff:94:b1: 2a:06:a5:80:7f:da:68:d5:26:e9:09:cd:b7:89:4a:df:0f:3f: 8e:03:81:79:ff:99:b2:33:71:40:7a:3e:2e:98:63:c4:b5:3a: 42:75:90:f4:81:5d:84:d8:95:1f:b9:c6:72:56:59:0f:a8:4d: 36:cd:05:23:0c:a0:a0:0f:c3:53:a6:b7:1d:6c:1f:7a:7b:a4: 12:c2:b0:98:cd:b6:f9:25:93:ee:a6:42:cb:b1:3d:bb:4e:ff: 0f:83:c4:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAprogQr63GFhnwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjgyNloXDTI1MDkxODA5MjgyNlowLzEtMCsGA1UEAxMk ZjE3MTZjZjgtNmE5Mi00NGE2LWJjM2EtNTY1MjliODIyZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD5taBohSVX9tNxqqG40ZBM7vyZoYxPv4xSm bvFHx3MavcGU4u+euGVD6o0E714cFViAoqtY0ZgXjR3xPxVHJbs5s76NxPwNdGfQ Stkik+qtjY4NMjL9qjGGuyLtswirdxoFLUzmdHt5WSbAGTcbb78izy1W856SUZhR bFdE8KdEsUhSWEJ+0AU0bwV7v+wS0Jz8TxUouiHBmFNAWbxlnN8LcOOciuy5puxY WIjGUJEJw9W4yUBhSqftuT05gafC/IqiQxXNfzJVuDEh1ylcU5Ip6c9DGDZJTpBO I3vEID/TPwRChMdbMlFN5efLm5Ilwiow+7wDTxMpzaWSykqbvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4o6yB2AybtlkPQ1B/PGM29tFhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTNmMTIzYzAtMjYwNC0z ZWY1LWI2MWEtN2JhY2I5Y2IwNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP1tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUiFgmZAI7DA293Vx9gFQbp0Pj5N5ITs1rimSVLyXJRoBH/U/fRjoV6 CsnKUMWJZJCp37zVr+vNwc1PUXivVWt5sLG+nx1HP6p4iw7SR4La/Bp1R4mbUjiC XGI/SXAcStT+PVDmjGVxrRXLw6J5+KAVCpf3Ojgk92FadxxiN8gIwqD0tJ2xkyp5 laoFNDKy2ulbbMRihW3g4D4WhHEvJf+UsSoGpYB/2mjVJukJzbeJSt8PP44DgXn/ mbIzcUB6Pi6YY8S1OkJ1kPSBXYTYlR+5xnJWWQ+oTTbNBSMMoKAPw1Omtx1sH3p7 pBLCsJjNtvklk+6mQsuxPbtO/w+DxMk= -----END CERTIFICATE-----Generated at Mon Jun 30 18:15:03 2025 by rpki-client