$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4699007-6b69-33c3-8302-6c0b72f2c27b.roa File: a4699007-6b69-33c3-8302-6c0b72f2c27b.roa (raw, json) Hash identifier: x1ly+lDF4fFBLEAJ2OoCGSMCmQyWvvRIqS8VSYI69+I= Subject key identifier: 23:A6:6E:BC:CC:7B:DC:00:91:3A:01:D4:3C:59:38:49:D5:BB:EC:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0FB4B6854B4FD205FE62C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4699007-6b69-33c3-8302-6c0b72f2c27b.roa Signing time: Wed 18 Jun 2025 18:00:55 +0000 ROA not before: Wed 18 Jun 2025 18:00:55 +0000 ROA not after: Tue 16 Sep 2025 18:00:55 +0000 asID: 22773 IP address blocks: 24.251.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:b4:b6:85:4b:4f:d2:05:fe:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:55 2025 GMT Not After : Sep 16 18:00:55 2025 GMT Subject: CN=09ffa378-a913-4577-97cc-a6a58ec8294d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:de:bc:dc:95:67:b7:99:22:91:53:58:e5: 7e:0d:ea:34:cd:71:59:d8:c2:09:7f:2a:2d:e5:0c: 0e:6b:d8:71:7f:b7:69:d2:bf:6e:74:1b:70:e2:18: 93:7c:59:2a:91:37:77:d2:49:6f:63:14:90:bd:15: ef:96:5c:c9:0c:9a:08:60:f9:16:cc:19:82:42:83: 90:2c:b1:d3:10:2a:72:76:33:23:1c:c4:cf:3c:ab: 60:c0:75:04:6b:a4:5e:a3:bd:c1:17:c2:c9:16:de: da:8e:06:85:15:2a:d5:81:3f:a8:5e:75:18:e4:ee: 94:68:8e:57:ba:7d:97:c7:6e:a3:0f:ef:18:b4:e4: 5e:f0:7b:81:0b:f2:d0:62:64:ea:b7:d5:c1:48:3f: 82:63:60:fc:14:57:fb:03:46:90:87:63:9a:76:10: ce:8e:13:04:7b:db:fa:98:a8:b1:e5:fe:87:b3:ba: bd:0e:ef:c0:2b:09:a8:a0:b3:f6:12:72:1d:8b:cc: dc:36:23:6a:fe:3e:d0:f3:8d:69:63:fd:7f:ee:a7: db:48:03:f3:78:aa:b2:18:2e:26:15:b0:31:28:69: 9f:d4:61:12:70:0a:84:d2:e0:da:43:dc:83:88:48: ec:4e:80:aa:b3:fc:dd:38:a9:54:1c:6a:f6:b3:9f: e1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A6:6E:BC:CC:7B:DC:00:91:3A:01:D4:3C:59:38:49:D5:BB:EC:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4699007-6b69-33c3-8302-6c0b72f2c27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:73:0f:74:6c:89:45:69:73:38:2b:87:c1:08:09:16:20:7c: 44:bb:20:74:ae:dc:45:cc:ce:18:3f:09:40:06:74:ee:15:11: 14:54:59:aa:9c:69:05:9b:b0:5b:57:b5:a6:a8:ae:3e:4a:90: 8e:00:d7:aa:fc:da:7b:46:f0:0a:ed:05:f1:3a:07:59:86:f2: de:bb:6e:55:2f:d6:68:3c:82:f9:7d:6c:33:54:9d:07:98:d0: 4b:83:6e:15:ab:d8:ed:24:48:f7:1a:e8:cd:0d:a5:a6:21:19: 5b:98:32:3f:b3:eb:db:a6:e0:d6:fe:d9:d3:00:7c:b7:2c:7a: 3a:76:ae:29:e5:a3:a1:3e:1f:e5:2f:43:93:58:43:71:a6:1a: ed:b3:b6:41:cf:6e:87:d3:28:13:69:00:c6:bf:cb:d7:a4:7c: ae:19:3e:92:be:f9:6c:74:fa:34:a1:dd:19:ce:f4:dc:ed:50: b5:c0:cd:63:c7:4f:af:2e:aa:52:06:62:45:88:ef:10:37:7f: 9b:dd:3a:ea:21:ba:5d:70:17:1e:d8:70:51:5e:3d:6b:51:10: 9b:b0:4e:8b:6a:57:c5:cf:fe:ec:38:a6:2d:cf:96:38:0d:df: 18:02:a6:07:0f:87:6f:bd:35:41:7d:2a:42:6c:ec:c0:2e:26: cd:7e:3b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D7S2hUtP0gX+YsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDA1NVoXDTI1MDkxNjE4MDA1NVowLzEtMCsGA1UEAxMk MDlmZmEzNzgtYTkxMy00NTc3LTk3Y2MtYTZhNThlYzgyOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr3evNyVZ7eZIpFTWOV+Deo0zXFZ2MIJfyot 5QwOa9hxf7dp0r9udBtw4hiTfFkqkTd30klvYxSQvRXvllzJDJoIYPkWzBmCQoOQ LLHTECpydjMjHMTPPKtgwHUEa6Reo73BF8LJFt7ajgaFFSrVgT+oXnUY5O6UaI5X un2Xx26jD+8YtORe8HuBC/LQYmTqt9XBSD+CY2D8FFf7A0aQh2OadhDOjhMEe9v6 mKix5f6Hs7q9Du/AKwmooLP2EnIdi8zcNiNq/j7Q841pY/1/7qfbSAPzeKqyGC4m FbAxKGmf1GEScAqE0uDaQ9yDiEjsToCqs/zdOKlUHGr2s5/hDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOmbrzMe9wAkToB1DxZOEnVu+wwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTQ2OTkwMDctNmI2OS0z M2MzLTgzMDItNmMwYjcyZjJjMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVzD3RsiUVpczgrh8EICRYgfES7IHSu3EXMzhg/CUAGdO4VERRUWaqc aQWbsFtXtaaorj5KkI4A16r82ntG8ArtBfE6B1mG8t67blUv1mg8gvl9bDNUnQeY 0EuDbhWr2O0kSPca6M0NpaYhGVuYMj+z69um4Nb+2dMAfLcsejp2rinlo6E+H+Uv Q5NYQ3GmGu2ztkHPbofTKBNpAMa/y9ekfK4ZPpK++Wx0+jSh3RnO9NztULXAzWPH T68uqlIGYkWI7xA3f5vdOuohul1wFx7YcFFePWtREJuwTotqV8XP/uw4pi3PljgN 3xgCpgcPh2+9NUF9KkJs7MAuJs1+OyM= -----END CERTIFICATE-----Generated at Tue Jul 1 17:44:37 2025 by rpki-client