$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4aa4db6-530f-3544-87a2-cff463763071.roa File: c4aa4db6-530f-3544-87a2-cff463763071.roa (raw, json) Hash identifier: NpuYxsQU3/vMrpgyrnSuHhmJnjhohtyteBlLP/MneLU= Subject key identifier: BE:29:F6:0A:13:15:50:23:12:8D:8E:8C:BF:C5:F1:7A:2B:23:BD:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A69EBEDA99E336E0EFB790 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4aa4db6-530f-3544-87a2-cff463763071.roa Signing time: Fri 20 Jun 2025 09:28:13 +0000 ROA not before: Fri 20 Jun 2025 09:28:13 +0000 ROA not after: Thu 18 Sep 2025 09:28:13 +0000 asID: 22773 IP address blocks: 24.253.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:9e:be:da:99:e3:36:e0:ef:b7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:13 2025 GMT Not After : Sep 18 09:28:13 2025 GMT Subject: CN=4f3ba31a-d813-4e37-9992-5cce08cb8386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d9:af:e3:ef:ec:0d:fb:f0:7d:ea:60:c0:83: e5:8e:4c:66:c6:ee:51:dc:3a:b2:76:52:69:4e:70: 3b:1e:a0:7a:58:30:e5:d0:e8:8a:67:c4:4a:ad:cc: 82:29:b0:60:21:49:69:31:a4:33:fb:d1:e3:3b:69: 80:97:ac:f0:c6:4d:2e:86:39:ae:98:f3:50:3d:50: a5:8c:80:c2:09:0b:96:a0:51:29:a2:a1:bc:51:49: 0c:18:f3:01:e1:4e:7d:91:9d:c2:27:67:25:af:ca: 73:e0:4e:95:af:6f:69:41:26:bc:7f:43:1c:65:f9: bb:cd:58:40:bf:69:43:e0:c9:8c:4b:3d:da:d4:97: d8:75:c5:a1:2f:c7:97:41:fd:d9:a4:d0:c1:0a:4b: 0c:a7:2c:63:e7:64:15:08:5d:21:0a:ed:8b:54:49: d9:81:71:2f:5d:87:05:2f:f7:c5:93:1c:18:7c:e0: 03:4b:55:74:a2:0a:b3:c9:49:ca:4f:60:80:1d:17: 5a:4f:d5:61:91:d1:c4:be:7a:3e:f7:4b:08:f9:f1: 0d:27:23:d1:36:00:cb:69:16:10:cd:8c:0a:cd:88: d0:c7:5f:01:d1:4b:51:35:68:c1:b0:ec:a3:40:c1: ba:0a:83:6c:22:48:1d:43:24:c2:0c:7c:9d:26:4e: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:29:F6:0A:13:15:50:23:12:8D:8E:8C:BF:C5:F1:7A:2B:23:BD:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4aa4db6-530f-3544-87a2-cff463763071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:13:31:1e:a4:ab:f2:b8:cf:03:d0:58:2f:76:5d:92:5b:29: a6:fc:25:7b:09:02:eb:0c:f2:77:ee:33:47:2c:50:fb:b3:9c: 7c:e6:b7:24:08:83:ed:ea:86:97:c8:7f:ea:ed:46:57:b2:c6: f2:49:6e:17:62:13:6f:68:37:6a:10:12:ce:6c:83:83:96:07: de:52:19:20:c4:8d:6f:c3:4d:f1:b5:40:78:13:d0:26:78:c8: 40:fa:60:26:a4:59:32:c0:b5:01:83:f0:df:be:a9:13:cf:57: 66:c5:42:53:2f:7e:d1:65:fe:8c:32:21:5d:79:82:27:2f:d3: 30:ee:1e:1a:ff:e3:05:0d:96:c9:fd:a8:12:5f:aa:b5:7c:32: ef:2b:ca:5d:ef:7c:22:8d:0a:8a:26:72:c1:f2:cf:0f:66:a2: ff:41:4d:1b:73:d4:0e:b4:2d:26:c7:51:4a:f7:3c:e3:b4:ad: 7b:59:b3:47:7a:ee:eb:d6:e1:7e:31:49:fe:ef:89:29:55:8c: b5:52:ed:ca:f8:1a:9a:b7:f2:44:3e:e0:8a:f7:02:a9:ec:ea: 86:0d:6b:e6:fc:27:83:6c:c9:27:94:10:ed:78:e5:50:cc:a4: 42:8e:e3:11:d7:eb:9c:6a:09:d2:4a:a8:8f:38:22:d3:61:b9: 5b:08:1a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApp6+2pnjNuDvt5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjgxM1oXDTI1MDkxODA5MjgxM1owLzEtMCsGA1UEAxMk NGYzYmEzMWEtZDgxMy00ZTM3LTk5OTItNWNjZTA4Y2I4Mzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldmv4+/sDfvwfepgwIPljkxmxu5R3DqydlJp TnA7HqB6WDDl0OiKZ8RKrcyCKbBgIUlpMaQz+9HjO2mAl6zwxk0uhjmumPNQPVCl jIDCCQuWoFEpoqG8UUkMGPMB4U59kZ3CJ2clr8pz4E6Vr29pQSa8f0McZfm7zVhA v2lD4MmMSz3a1JfYdcWhL8eXQf3ZpNDBCksMpyxj52QVCF0hCu2LVEnZgXEvXYcF L/fFkxwYfOADS1V0ogqzyUnKT2CAHRdaT9VhkdHEvno+90sI+fENJyPRNgDLaRYQ zYwKzYjQx18B0UtRNWjBsOyjQMG6CoNsIkgdQyTCDHydJk7C6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4p9goTFVAjEo2OjL/F8XorI70jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzRhYTRkYjYtNTMwZi0z NTQ0LTg3YTItY2ZmNDYzNzYzMDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABATMR6kq/K4zwPQWC92XZJbKab8JXsJAusM8nfuM0csUPuznHzmtyQI g+3qhpfIf+rtRleyxvJJbhdiE29oN2oQEs5sg4OWB95SGSDEjW/DTfG1QHgT0CZ4 yED6YCakWTLAtQGD8N++qRPPV2bFQlMvftFl/owyIV15gicv0zDuHhr/4wUNlsn9 qBJfqrV8Mu8ryl3vfCKNCoomcsHyzw9mov9BTRtz1A60LSbHUUr3POO0rXtZs0d6 7uvW4X4xSf7viSlVjLVS7cr4Gpq38kQ+4Ir3Aqns6oYNa+b8J4NsySeUEO145VDM pEKO4xHX65xqCdJKqI84ItNhuVsIGqM= -----END CERTIFICATE-----Generated at Wed Jul 2 23:23:16 2025 by rpki-client