$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b6cf872c-e2a4-385e-b5f3-0f8fa0748923.roa File: b6cf872c-e2a4-385e-b5f3-0f8fa0748923.roa (raw, json) Hash identifier: aHcpWKRVfde5Ck8p1Py3roySdBpmkWmA18yT/yGdNas= Subject key identifier: 7D:19:6C:D3:FF:1C:D3:3D:78:57:05:36:E8:48:EE:FB:57:65:44:B9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6994E386654C618484CC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b6cf872c-e2a4-385e-b5f3-0f8fa0748923.roa Signing time: Fri 20 Jun 2025 09:28:10 +0000 ROA not before: Fri 20 Jun 2025 09:28:10 +0000 ROA not after: Thu 18 Sep 2025 09:28:10 +0000 asID: 22773 IP address blocks: 24.253.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:99:4e:38:66:54:c6:18:48:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:10 2025 GMT Not After : Sep 18 09:28:10 2025 GMT Subject: CN=2c42e0f3-20af-4fda-88c1-e8bdca3e188d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0e:a2:a3:10:ac:dd:2a:01:c3:35:c5:99:0d: 96:4e:c5:52:b8:d9:67:b0:ff:86:b3:de:3c:4b:6f: ca:d6:11:b2:e7:76:41:ec:7d:a4:7a:cf:a9:5f:fa: 4e:b2:04:77:9f:49:25:78:33:7c:8b:39:19:35:f1: cd:4e:39:35:a4:2a:92:1c:1a:a5:b8:1e:95:38:31: dd:0f:56:73:70:25:af:2c:e2:f1:96:f1:49:df:2b: c8:62:5d:79:1a:f0:f6:4a:47:e1:db:70:7b:15:31: 71:91:c4:11:58:d7:05:bf:9a:f3:8c:e2:cd:8b:ce: 1e:f2:30:27:3b:27:6e:59:37:46:24:c3:99:07:32: 15:31:b6:fd:79:62:30:a8:2b:0b:5f:cb:7e:4a:e6: 5d:80:32:a2:a2:1d:75:93:b9:ad:c4:3c:1f:76:d0: 8f:65:53:c5:df:df:a2:e5:7c:50:69:cb:61:a4:96: 7e:83:b0:49:9a:37:5c:37:06:8e:ab:2b:4d:6a:9a: 0e:e9:e5:98:d2:80:bb:bf:41:a7:b3:50:53:2a:b5: b4:f1:13:53:23:23:f0:0b:3e:dc:b1:97:2d:a2:fd: cc:f4:e8:44:70:80:97:6a:22:af:02:d7:2d:0d:1f: 80:e3:98:4f:59:b8:e4:1d:cd:17:e4:3c:37:8a:7a: 93:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:19:6C:D3:FF:1C:D3:3D:78:57:05:36:E8:48:EE:FB:57:65:44:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b6cf872c-e2a4-385e-b5f3-0f8fa0748923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:94:4d:ae:38:a6:e1:d5:1f:e7:84:d7:fb:14:ac:19:06:bb: 91:52:ba:78:de:01:6d:ae:f8:e1:e3:12:ea:c7:90:3a:f4:34: 19:b1:78:4e:f2:d2:1b:c3:4b:68:61:2e:e1:4c:78:38:39:3e: 0d:6f:6a:3f:83:30:9f:0b:44:47:1e:84:a9:05:34:7d:29:34: 75:9c:e5:a3:86:53:83:ae:8d:2f:84:72:76:45:d4:1b:eb:70: 62:92:63:72:18:97:c1:07:32:ce:f9:ba:47:1d:d6:0d:aa:d1: b7:e9:01:2f:b3:03:4b:84:ee:c8:02:c0:98:a2:67:a9:0e:a9: 0b:a6:6d:ae:72:80:7d:f7:c7:40:f3:f3:22:50:9a:61:eb:64: ac:06:0e:e7:6b:08:c5:f6:7b:6d:3f:74:7d:8e:58:c3:f6:d9: 85:1b:a7:91:83:2c:a6:ba:74:d9:6f:ea:6e:42:ae:a6:64:a1: df:55:01:80:40:a0:63:dc:0b:a8:75:ac:dc:0a:51:69:3e:ea: ce:ec:c7:30:da:15:11:b9:85:0c:48:b9:79:f7:c5:fe:e6:9b: 28:c4:43:26:ed:ea:0d:c5:2e:d2:4a:02:8a:61:bd:ea:b1:5d: a3:ff:3d:40:6d:2e:9f:d4:9f:50:77:86:58:59:ff:6b:74:c9: 5f:f4:0c:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApplOOGZUxhhITMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjgxMFoXDTI1MDkxODA5MjgxMFowLzEtMCsGA1UEAxMk MmM0MmUwZjMtMjBhZi00ZmRhLTg4YzEtZThiZGNhM2UxODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw6ioxCs3SoBwzXFmQ2WTsVSuNlnsP+Gs948 S2/K1hGy53ZB7H2kes+pX/pOsgR3n0kleDN8izkZNfHNTjk1pCqSHBqluB6VODHd D1ZzcCWvLOLxlvFJ3yvIYl15GvD2Skfh23B7FTFxkcQRWNcFv5rzjOLNi84e8jAn OyduWTdGJMOZBzIVMbb9eWIwqCsLX8t+SuZdgDKioh11k7mtxDwfdtCPZVPF39+i 5XxQacthpJZ+g7BJmjdcNwaOqytNapoO6eWY0oC7v0Gns1BTKrW08RNTIyPwCz7c sZctov3M9OhEcICXaiKvAtctDR+A45hPWbjkHc0X5Dw3inqTLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0ZbNP/HNM9eFcFNuhI7vtXZUS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjZjZjg3MmMtZTJhNC0z ODVlLWI1ZjMtMGY4ZmEwNzQ4OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImUTa44puHVH+eE1/sUrBkGu5FSunjeAW2u+OHjEurHkDr0NBmxeE7y 0hvDS2hhLuFMeDg5Pg1vaj+DMJ8LREcehKkFNH0pNHWc5aOGU4OujS+EcnZF1Bvr cGKSY3IYl8EHMs75ukcd1g2q0bfpAS+zA0uE7sgCwJiiZ6kOqQumba5ygH33x0Dz 8yJQmmHrZKwGDudrCMX2e20/dH2OWMP22YUbp5GDLKa6dNlv6m5CrqZkod9VAYBA oGPcC6h1rNwKUWk+6s7sxzDaFRG5hQxIuXn3xf7mmyjEQybt6g3FLtJKAophveqx XaP/PUBtLp/Un1B3hlhZ/2t0yV/0DEs= -----END CERTIFICATE-----Generated at Mon Jun 30 15:00:59 2025 by rpki-client