$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b393d2a1-cbae-3792-8e4a-0b9dfa0a4b77.roa File: b393d2a1-cbae-3792-8e4a-0b9dfa0a4b77.roa (raw, json) Hash identifier: VxmGM2g45zAd4CmqqW+7N5Wcg0Qne7pKSWkcgdcPBQc= Subject key identifier: 05:B9:1C:E2:9E:A5:05:C7:74:16:20:E7:19:D0:BA:5B:47:EB:1B:A5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96365244343FA1E8C665EB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b393d2a1-cbae-3792-8e4a-0b9dfa0a4b77.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 174.66.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:52:44:34:3f:a1:e8:c6:65:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=c2fa7b86-f88b-4caf-ab9e-6dbb29549ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:16:88:47:9b:5c:9e:ab:ae:cb:1e:93:89: 35:4c:9d:41:08:ef:77:5c:ff:52:79:b8:4f:b4:f3: 9d:57:60:a5:fa:73:40:8f:0d:85:2f:e6:92:3f:f6: de:ad:d3:ed:73:62:50:9a:6b:49:31:62:26:a1:da: 8a:7c:d5:66:ca:59:fa:b3:ac:30:86:2b:7d:a1:d1: 6e:4d:6b:f9:a3:0a:6b:3d:14:8c:cf:13:5b:97:4e: 5d:dd:84:fb:a0:dd:29:7e:93:8e:1e:23:c5:fe:b1: 04:63:49:4f:63:87:a7:06:c7:4b:5e:ae:59:57:78: 75:50:94:21:b8:58:ad:2e:60:ab:63:c9:7f:0d:4f: 24:c6:27:89:b6:68:ee:78:30:91:11:35:4e:d4:2c: e8:34:30:28:5b:3f:b4:c1:44:4e:76:f6:2c:ce:1a: 63:6d:71:98:db:da:b3:2e:57:20:b9:ed:56:b2:38: 73:47:9a:c9:cf:c0:39:64:28:98:72:e0:eb:26:54: b3:ce:24:4a:b2:30:41:5f:65:70:9d:b6:7a:7b:6a: e4:1c:bb:a2:0e:c4:29:5a:51:e8:08:ad:36:f5:85: af:a8:56:b9:c2:fd:84:1f:a6:fd:25:70:1f:35:b2: 16:b4:4c:22:05:9c:13:47:fd:cb:a0:8b:14:b9:c5: 4a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B9:1C:E2:9E:A5:05:C7:74:16:20:E7:19:D0:BA:5B:47:EB:1B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b393d2a1-cbae-3792-8e4a-0b9dfa0a4b77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cf:81:d1:3e:1b:db:2b:e2:19:f0:64:c7:52:3c:3d:3b:76: 68:f5:e7:60:4c:ec:23:5b:e1:95:93:38:99:29:c1:bc:93:6d: e0:b1:83:8d:43:d7:bc:ff:d7:22:27:4c:48:b1:ff:0c:18:4b: e1:e7:f2:cf:73:28:55:3a:6b:1f:23:11:40:d1:7f:33:f2:40: 84:9e:c0:18:24:56:10:82:05:4b:bc:be:fd:65:a4:da:89:07: f8:ba:43:cb:c9:51:b1:32:94:eb:30:ec:59:14:db:52:2b:82: de:7f:44:ac:60:c8:49:b3:b6:cc:0d:c5:59:d1:d3:a8:26:7e: 2c:f1:55:43:8f:b5:7a:b8:25:8b:e5:e9:e2:26:dd:5e:4f:cd: e6:1f:35:8b:78:b6:df:83:b5:9e:34:1f:0a:5f:8a:89:b8:73: 59:aa:b5:23:9f:af:82:44:a1:0c:96:23:76:09:4b:e6:bc:8d: 1c:21:00:a6:85:45:c5:eb:1c:59:f5:ce:c4:57:73:0e:9a:74: 0f:d7:66:7c:f2:c7:69:20:ca:42:55:35:02:43:3b:ae:4f:4e: fc:30:c4:c6:d3:f8:f8:cd:63:47:0e:8b:09:45:d2:de:b3:64: 84:20:17:f0:fa:d5:c9:6a:08:6d:4e:b1:69:b0:7a:e5:ae:5b: 52:bd:79:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNlJEND+h6MZl64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YzJmYTdiODYtZjg4Yi00Y2FmLWFiOWUtNmRiYjI5NTQ5YWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHcWiEebXJ6rrssek4k1TJ1BCO93XP9SebhP tPOdV2Cl+nNAjw2FL+aSP/berdPtc2JQmmtJMWImodqKfNVmyln6s6wwhit9odFu TWv5owprPRSMzxNbl05d3YT7oN0pfpOOHiPF/rEEY0lPY4enBsdLXq5ZV3h1UJQh uFitLmCrY8l/DU8kxieJtmjueDCRETVO1CzoNDAoWz+0wUROdvYszhpjbXGY29qz Llcgue1WsjhzR5rJz8A5ZCiYcuDrJlSzziRKsjBBX2VwnbZ6e2rkHLuiDsQpWlHo CK029YWvqFa5wv2EH6b9JXAfNbIWtEwiBZwTR/3LoIsUucVK1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAW5HOKepQXHdBYg5xnQultH6xulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjM5M2QyYTEtY2JhZS0z NzkyLThlNGEtMGI5ZGZhMGE0Yjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkICMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXPgdE+G9sr4hnwZMdSPD07dmj152BM7CNb4ZWTOJkpwbyTbeCxg41D 17z/1yInTEix/wwYS+Hn8s9zKFU6ax8jEUDRfzPyQISewBgkVhCCBUu8vv1lpNqJ B/i6Q8vJUbEylOsw7FkU21Irgt5/RKxgyEmztswNxVnR06gmfizxVUOPtXq4JYvl 6eIm3V5PzeYfNYt4tt+DtZ40Hwpfiom4c1mqtSOfr4JEoQyWI3YJS+a8jRwhAKaF RcXrHFn1zsRXcw6adA/XZnzyx2kgykJVNQJDO65PTvwwxMbT+PjNY0cOiwlF0t6z ZIQgF/D61clqCG1OsWmweuWuW1K9edA= -----END CERTIFICATE-----Generated at Sat Aug 23 20:19:10 2025 by rpki-client