$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1d2933c-d636-322f-9eaf-3fc3b932f8db.roa File: c1d2933c-d636-322f-9eaf-3fc3b932f8db.roa (raw, json) Hash identifier: 875kezWs9S95KZYjlt40yMbAOW9cT7F1zKQ69+9vQPM= Subject key identifier: 4E:0C:4A:0B:92:46:1A:A0:F2:88:0A:26:CA:5B:69:CD:0F:19:ED:14 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A39457FCB24B31F6E51864720 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1d2933c-d636-322f-9eaf-3fc3b932f8db.roa Signing time: Tue 17 Jun 2025 18:01:52 +0000 ROA not before: Tue 17 Jun 2025 18:01:52 +0000 ROA not after: Mon 15 Sep 2025 18:01:52 +0000 asID: 22773 IP address blocks: 24.56.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:45:7f:cb:24:b3:1f:6e:51:86:47:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 17 18:01:52 2025 GMT Not After : Sep 15 18:01:52 2025 GMT Subject: CN=c48e7273-512a-430d-90fb-34ab80c127a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:48:57:8f:8d:76:29:d8:a8:f4:04:55:df: 1b:81:90:e7:57:3b:a9:76:5c:61:c8:bf:21:aa:cc: de:25:1f:7c:3e:81:13:3a:e5:74:63:4c:63:33:10: b3:c9:12:a2:63:ef:7b:11:57:27:e3:f9:37:9d:eb: 9c:90:f9:7e:95:38:c4:d1:2e:68:2d:af:d7:c2:d8: e3:94:64:c0:6f:c3:62:91:06:07:34:51:83:be:cb: f7:a4:94:18:1a:f8:ae:55:9d:77:d5:3f:a0:09:a6: 28:03:38:8c:0a:ea:fe:f7:a6:78:ba:65:ae:d8:cd: e2:2e:d3:03:13:24:3f:1f:04:9f:58:5d:da:d2:ae: fa:c6:34:03:b4:4b:9e:f0:08:36:61:67:cf:d1:66: 12:46:ca:9a:5c:60:f8:e3:3e:ee:bf:5d:b2:b0:28: 5c:88:5c:c5:b9:5b:0f:05:de:86:b7:12:35:2d:ac: c5:fe:9c:23:0f:4f:88:9a:06:68:e2:21:f3:53:ac: 9f:1f:83:79:83:99:ce:76:b1:bf:4e:ba:0d:ef:2d: 36:fb:7d:b3:32:e9:ea:ef:73:5a:dd:53:63:70:98: d5:e2:14:64:f1:06:46:53:0b:e0:00:00:89:c1:32: 46:b5:4a:da:de:c3:de:d2:a0:c5:f7:69:e9:ba:1f: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0C:4A:0B:92:46:1A:A0:F2:88:0A:26:CA:5B:69:CD:0F:19:ED:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1d2933c-d636-322f-9eaf-3fc3b932f8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.56.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e1:47:06:c2:94:ec:26:12:b4:c2:6d:6b:cd:2a:9e:41:b1: f1:68:c5:81:8a:bb:68:36:ce:c6:07:cb:bd:76:82:41:97:37: a1:a6:32:a2:2e:89:9c:69:76:0b:f0:d5:e7:15:d8:23:6b:65: 08:06:18:f4:54:75:9d:1e:90:0c:86:f4:e9:82:77:1a:46:d6: 96:6d:8e:c5:3e:0c:ad:7f:cc:24:fd:e5:e2:6b:55:bd:0d:7b: aa:85:a2:80:86:2b:aa:68:9e:e2:82:d8:c4:6d:ff:2a:04:2a: 76:1b:09:72:75:34:b6:34:e3:a5:af:24:ca:25:f2:4c:e0:18: 13:38:0e:96:33:d4:ac:33:d1:f2:47:83:6f:2c:14:8b:b0:08: 8f:02:59:1d:11:50:2d:5d:fd:aa:59:ed:16:72:b3:66:c8:d7: 40:70:1b:5a:93:96:9c:ca:b9:e6:f5:74:e0:c8:aa:eb:8d:32: f0:45:29:26:48:4e:2e:70:ec:dc:2f:a4:8c:f7:58:04:a3:a6: fd:88:cd:e3:3b:cc:13:fc:e5:05:07:c4:7d:62:68:1a:f2:71: dd:dc:c3:64:5c:4b:03:38:8d:8a:a1:39:c6:28:92:54:72:7d: a0:fa:80:7e:5d:24:55:8e:e6:e4:e9:b0:db:25:22:99:a9:34: a9:de:48:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5RX/LJLMfblGGRyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNzE4MDE1MloXDTI1MDkxNTE4MDE1MlowLzEtMCsGA1UEAxMk YzQ4ZTcyNzMtNTEyYS00MzBkLTkwZmItMzRhYjgwYzEyN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7xIV4+NdinYqPQEVd8bgZDnVzupdlxhyL8h qszeJR98PoETOuV0Y0xjMxCzyRKiY+97EVcn4/k3neuckPl+lTjE0S5oLa/Xwtjj lGTAb8NikQYHNFGDvsv3pJQYGviuVZ131T+gCaYoAziMCur+96Z4umWu2M3iLtMD EyQ/HwSfWF3a0q76xjQDtEue8Ag2YWfP0WYSRsqaXGD44z7uv12ysChciFzFuVsP Bd6GtxI1LazF/pwjD0+ImgZo4iHzU6yfH4N5g5nOdrG/TroN7y02+32zMunq73Na 3VNjcJjV4hRk8QZGUwvgAACJwTJGtUra3sPe0qDF92npuh8owwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4MSguSRhqg8ogKJspbac0PGe0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzFkMjkzM2MtZDYzNi0z MjJmLTllYWYtM2ZjM2I5MzJmOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGDgPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzhRwbClOwmErTCbWvNKp5BsfFoxYGKu2g2zsYHy712gkGXN6GmMqIu iZxpdgvw1ecV2CNrZQgGGPRUdZ0ekAyG9OmCdxpG1pZtjsU+DK1/zCT95eJrVb0N e6qFooCGK6ponuKC2MRt/yoEKnYbCXJ1NLY046WvJMol8kzgGBM4DpYz1Kwz0fJH g28sFIuwCI8CWR0RUC1d/apZ7RZys2bI10BwG1qTlpzKueb1dODIquuNMvBFKSZI Ti5w7NwvpIz3WASjpv2IzeM7zBP85QUHxH1iaBrycd3cw2RcSwM4jYqhOcYoklRy faD6gH5dJFWO5uTpsNslIpmpNKneSFk= -----END CERTIFICATE-----Generated at Tue Jul 1 09:00:10 2025 by rpki-client