$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c689abfa-ba48-3be9-af92-08a54237bb3c.roa File: c689abfa-ba48-3be9-af92-08a54237bb3c.roa (raw, json) Hash identifier: Rm6/TPG4jLs5oCc6G3wvfG4zlKy0KCpqbThPrpxbuyU= Subject key identifier: 53:29:6A:D9:40:30:59:87:B1:4D:87:19:21:4C:25:9A:9D:57:0D:2B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7C136E0EDF33D3CCD8100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c689abfa-ba48-3be9-af92-08a54237bb3c.roa Signing time: Thu 01 May 2025 17:14:20 +0000 ROA not before: Thu 01 May 2025 17:14:20 +0000 ROA not after: Wed 30 Jul 2025 17:14:20 +0000 asID: 22773 IP address blocks: 24.253.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:c1:36:e0:ed:f3:3d:3c:cd:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:20 2025 GMT Not After : Jul 30 17:14:20 2025 GMT Subject: CN=1a2956a3-ab63-498b-9b91-e4de00e569e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4d:5d:53:86:7c:99:08:ea:3d:dc:78:d3:54: c2:a2:da:c9:20:5b:6f:b9:54:48:5e:52:7a:60:ec: 22:24:ab:e3:29:6f:b4:7e:71:ec:74:73:d6:ca:fb: cf:40:83:70:f8:68:41:da:cf:06:12:a5:45:16:af: b5:de:2a:79:30:40:06:33:7a:a6:f3:55:cb:2c:5d: 23:b6:f5:a6:41:67:de:c0:30:e0:86:b7:8b:bc:fd: cd:55:e8:e3:24:df:bb:53:67:1f:32:19:f9:b5:b8: 29:9d:72:20:29:12:ad:b8:6d:c0:e6:2d:6f:ea:1c: 0b:e6:0c:bd:29:de:1f:e2:c0:a1:54:36:5b:a1:f6: 14:f2:ba:63:04:11:39:51:50:c5:ad:66:66:d5:a6: 48:91:fe:1b:50:0a:dc:b6:50:c6:9b:23:7d:b1:63: e3:10:ab:ec:6f:79:9f:95:42:32:e2:c9:6f:11:4d: 27:85:d1:54:06:a8:90:70:32:71:ca:3b:fb:69:8f: 3a:d1:eb:09:bc:9d:db:e6:40:fc:22:eb:3d:38:cb: 32:60:ef:1b:1a:a6:62:c1:53:6d:a9:af:12:49:34: 5c:b6:09:6c:19:e4:bb:af:14:53:96:df:73:32:6b: e7:66:7a:4b:81:42:d7:83:ab:bc:f8:51:15:9d:e7: a5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:29:6A:D9:40:30:59:87:B1:4D:87:19:21:4C:25:9A:9D:57:0D:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c689abfa-ba48-3be9-af92-08a54237bb3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:6d:94:e5:0f:19:a1:99:e5:b9:ff:c6:bf:9d:28:09:77:41: 84:f3:4d:fe:26:82:dd:ad:14:a3:2f:8e:55:51:fd:99:ce:97: 08:32:71:48:62:e8:d2:e7:8a:df:1b:33:00:de:b8:dc:16:f2: 49:ba:01:f1:83:94:30:05:d8:39:ea:12:12:1e:08:3f:dd:da: 37:3d:87:6a:a9:09:e0:8b:4b:fb:69:4c:9c:ff:d2:2d:d5:90: c5:57:c1:3b:ec:fa:82:98:74:28:b6:2c:f3:bc:37:b8:0e:32: e1:29:10:72:31:6d:55:b3:3c:c1:58:84:e4:f5:d4:e5:49:49: 2a:5a:38:ea:54:53:58:4c:76:82:03:8f:89:94:6a:54:5c:39: fe:fc:67:eb:19:2a:0f:2f:42:8f:82:60:35:aa:1f:60:b1:a8: d1:6b:b6:cb:62:44:07:50:52:34:4d:10:d3:4e:6f:23:1e:5d: a9:43:89:15:d2:dd:3d:90:51:cd:71:89:fb:04:6a:15:10:46: 15:33:6b:a4:fa:2e:02:ef:db:5a:9f:29:fd:2d:10:61:86:5d: 9c:cc:54:66:35:e0:0c:3d:75:9f:12:c4:b0:c6:6b:68:62:ed: ae:a4:ee:cf:51:b8:7e:3a:30:f6:9a:87:60:6a:52:c2:93:1c: da:f1:cd:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm198E24O3zPTzNgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQyMFoXDTI1MDczMDE3MTQyMFowLzEtMCsGA1UEAxMk MWEyOTU2YTMtYWI2My00OThiLTliOTEtZTRkZTAwZTU2OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k1dU4Z8mQjqPdx401TCotrJIFtvuVRIXlJ6 YOwiJKvjKW+0fnHsdHPWyvvPQINw+GhB2s8GEqVFFq+13ip5MEAGM3qm81XLLF0j tvWmQWfewDDghreLvP3NVejjJN+7U2cfMhn5tbgpnXIgKRKtuG3A5i1v6hwL5gy9 Kd4f4sChVDZbofYU8rpjBBE5UVDFrWZm1aZIkf4bUArctlDGmyN9sWPjEKvsb3mf lUIy4slvEU0nhdFUBqiQcDJxyjv7aY860esJvJ3b5kD8Ius9OMsyYO8bGqZiwVNt qa8SSTRctglsGeS7rxRTlt9zMmvnZnpLgULXg6u8+FEVneelawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMpatlAMFmHsU2HGSFMJZqdVw0rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzY4OWFiZmEtYmE0OC0z YmU5LWFmOTItMDhhNTQyMzdiYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRtlOUPGaGZ5bn/xr+dKAl3QYTzTf4mgt2tFKMvjlVR/ZnOlwgycUhi 6NLnit8bMwDeuNwW8km6AfGDlDAF2DnqEhIeCD/d2jc9h2qpCeCLS/tpTJz/0i3V kMVXwTvs+oKYdCi2LPO8N7gOMuEpEHIxbVWzPMFYhOT11OVJSSpaOOpUU1hMdoID j4mUalRcOf78Z+sZKg8vQo+CYDWqH2CxqNFrtstiRAdQUjRNENNObyMeXalDiRXS 3T2QUc1xifsEahUQRhUza6T6LgLv21qfKf0tEGGGXZzMVGY14Aw9dZ8SxLDGa2hi 7a6k7s9RuH46MPaah2BqUsKTHNrxza8= -----END CERTIFICATE-----Generated at Sun May 11 09:35:09 2025 by rpki-client