$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7fdd8c1-1b37-3153-b621-66485d285a3a.roa File: b7fdd8c1-1b37-3153-b621-66485d285a3a.roa (raw, json) Hash identifier: 3gnOrdGCpKZPxjqzRjhxYzD4RiVeaELpUyUccFel8Zc= Subject key identifier: 72:28:CC:7C:51:41:BF:F3:CA:2F:F4:98:09:9C:27:E3:FF:2E:5E:CF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACE0BA3A1ED873354652F5F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7fdd8c1-1b37-3153-b621-66485d285a3a.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 397124 IP address blocks: 24.120.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a3:a1:ed:87:33:54:65:2f:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=756225e4-7c44-494c-99bd-75a5297bdad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:33:7c:85:a3:fb:92:cc:dc:80:0d:bb:ae:42: a4:4b:5a:5b:4e:01:93:2e:6c:8f:6c:c6:17:b6:65: df:5e:4c:a0:83:0b:8c:b4:ad:13:1e:2d:f5:7f:a0: 5d:01:e2:1d:c0:ee:02:b8:c9:a0:9e:df:a7:07:06: a4:48:ca:fa:4c:27:86:8c:9a:67:fc:97:0a:46:88: 7e:ae:75:9e:fc:5b:eb:2f:e9:0c:5a:79:58:d7:59: a4:6d:4e:ae:9e:9b:aa:63:96:e5:85:99:be:67:6d: fd:1b:07:57:fd:84:5d:f6:92:b5:af:f4:8e:02:79: f5:9e:e1:95:d8:7c:27:3a:58:d4:51:96:49:86:11: 1a:7f:48:99:ac:2a:8a:b4:a4:30:90:84:fb:48:44: 6a:c2:e2:ab:76:c4:18:b6:60:10:3b:e6:1a:61:cf: dd:ed:58:bd:af:e6:ff:5b:28:2c:8a:cf:49:69:c9: ee:21:e1:f8:b7:84:82:57:09:26:f0:9b:b0:33:7f: c5:eb:95:72:03:c5:e5:cc:5b:d9:84:6c:70:53:47: 8d:d7:13:72:9b:43:98:ed:57:4d:88:a3:32:7f:77: 82:81:4c:e8:c0:b4:5e:2a:5b:f8:5f:1b:30:af:39: 44:6e:38:b6:10:d0:aa:f1:af:fb:a2:50:67:93:c9: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:28:CC:7C:51:41:BF:F3:CA:2F:F4:98:09:9C:27:E3:FF:2E:5E:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7fdd8c1-1b37-3153-b621-66485d285a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.120.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d3:75:93:e0:f8:ce:c6:39:ee:9e:58:eb:66:ea:5b:99:c2: b8:f0:fc:14:40:49:e1:90:de:19:e9:8c:62:53:d2:46:06:32: c6:0d:9c:8c:51:2f:56:d0:6d:0b:1d:2e:a5:9f:43:e0:e6:32: 01:19:db:ed:23:0f:50:ba:76:06:f1:f6:75:65:86:26:a3:41: ce:38:27:32:d8:a1:52:47:74:62:aa:45:3a:95:1e:d4:60:55: 85:b0:98:56:4d:6b:8d:12:e7:e2:dd:06:28:3b:25:78:7d:ac: e1:fa:ab:ea:1c:9d:89:e1:16:81:a9:f0:b9:e8:22:42:ef:0c: 73:12:a0:12:fe:d7:ed:19:da:1d:5f:8a:c9:bd:79:fb:91:bb: 97:f1:9e:fe:91:45:c5:73:2a:0b:16:64:5c:8f:af:07:3b:4b: 2b:9f:15:d5:c0:9c:1b:b4:23:6f:af:ea:18:8f:80:d9:ee:7d: ec:c2:81:b1:a6:7a:34:44:1e:73:28:0c:a7:81:a6:f0:b6:67: cc:91:27:c1:44:d9:58:d1:a9:bb:a9:da:52:56:32:5f:93:29: c4:01:6e:82:6f:49:f1:0d:c5:11:29:5c:e2:f6:51:07:eb:3e: 6a:3c:57:7d:17:3f:9e:77:ea:2a:d8:5e:0f:5b:6c:a6:9f:ae: 87:9b:fe:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6Oh7YczVGUvXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk NzU2MjI1ZTQtN2M0NC00OTRjLTk5YmQtNzVhNTI5N2JkYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zN8haP7kszcgA27rkKkS1pbTgGTLmyPbMYX tmXfXkyggwuMtK0THi31f6BdAeIdwO4CuMmgnt+nBwakSMr6TCeGjJpn/JcKRoh+ rnWe/FvrL+kMWnlY11mkbU6unpuqY5blhZm+Z239GwdX/YRd9pK1r/SOAnn1nuGV 2HwnOljUUZZJhhEaf0iZrCqKtKQwkIT7SERqwuKrdsQYtmAQO+YaYc/d7Vi9r+b/ Wygsis9JacnuIeH4t4SCVwkm8JuwM3/F65VyA8XlzFvZhGxwU0eN1xNym0OY7VdN iKMyf3eCgUzowLReKlv4XxswrzlEbji2ENCq8a/7olBnk8mamQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIozHxRQb/zyi/0mAmcJ+P/Ll7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjdmZGQ4YzEtMWIzNy0z MTUzLWI2MjEtNjY0ODVkMjg1YTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHi5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzTdZPg+M7GOe6eWOtm6luZwrjw/BRASeGQ3hnpjGJT0kYGMsYNnIxR L1bQbQsdLqWfQ+DmMgEZ2+0jD1C6dgbx9nVlhiajQc44JzLYoVJHdGKqRTqVHtRg VYWwmFZNa40S5+LdBig7JXh9rOH6q+ocnYnhFoGp8LnoIkLvDHMSoBL+1+0Z2h1f ism9efuRu5fxnv6RRcVzKgsWZFyPrwc7SyufFdXAnBu0I2+v6hiPgNnufezCgbGm ejREHnMoDKeBpvC2Z8yRJ8FE2VjRqbup2lJWMl+TKcQBboJvSfENxREpXOL2UQfr Pmo8V30XP5536irYXg9bbKafroeb/hk= -----END CERTIFICATE-----Generated at Sat Aug 23 16:32:42 2025 by rpki-client