$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7fcff9-055e-3ad1-a504-9a01e49cfd7a.roa File: cd7fcff9-055e-3ad1-a504-9a01e49cfd7a.roa (raw, json) Hash identifier: x1b7BNDC7jdO62kbB73m2uyklkNd5rQWVH4opxJZY5w= Subject key identifier: 8D:AE:51:05:3E:A3:23:00:57:5D:A0:74:C3:06:83:85:96:75:31:99 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA65A9D9A6BE482752C3280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7fcff9-055e-3ad1-a504-9a01e49cfd7a.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 184.176.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:5a:9d:9a:6b:e4:82:75:2c:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=30e4a988-091e-49c2-8968-9c48c8258d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:2d:ea:74:72:9a:50:20:3f:5b:5d:86:72: 8e:84:b9:0e:de:68:92:5a:c0:07:17:ce:ce:bb:69: 40:7b:23:be:6a:64:b7:11:ef:c4:9f:c6:92:e7:09: a7:36:ea:eb:bd:f5:d8:a3:15:eb:57:2a:c4:55:51: 34:9e:fd:e4:04:b0:78:f3:03:8f:bb:57:78:30:cf: b9:e6:b0:03:b8:7b:c3:53:55:8c:46:9d:39:3c:f4: fc:c6:8b:5c:9e:b7:10:8e:d2:75:59:73:d7:04:f5: 5d:99:f4:80:67:b6:4f:83:29:1b:a2:72:a4:0e:ae: 7f:ad:83:e0:77:35:26:53:d1:b3:1e:b5:3b:a4:3e: 09:f3:f5:27:8f:f8:2f:e1:c3:59:85:dd:6e:c0:5e: cd:9b:27:21:45:e1:dd:66:f8:82:58:4b:41:5b:62: 09:d4:b8:ff:b4:89:36:3c:4f:1a:21:91:90:fd:6e: 01:37:cb:b2:28:f1:c4:b4:d2:dd:91:ad:15:aa:2d: a6:65:bb:69:21:22:3b:9f:12:6e:e9:22:ef:2b:64: 6b:59:04:06:d4:1d:14:58:84:33:cc:84:51:76:45: 06:6e:2a:a5:43:b7:59:80:6b:c0:8e:db:70:68:a3: 26:da:c2:94:66:4f:2e:55:cd:5f:0c:f1:18:bc:7f: 3f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AE:51:05:3E:A3:23:00:57:5D:A0:74:C3:06:83:85:96:75:31:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7fcff9-055e-3ad1-a504-9a01e49cfd7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 184.176.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:49:49:4d:24:6c:a7:fd:95:16:e3:a1:42:46:b5:cc:ff:42: aa:4b:d1:c6:0e:8b:14:28:e1:6e:69:d7:79:6d:1e:ca:24:48: 8e:db:f0:3c:dc:d8:0f:e9:6c:19:ab:e2:b2:5f:60:6e:63:99: e1:52:33:7d:da:9c:7a:87:f1:74:f2:b3:f8:59:ad:de:b7:c0: c2:9e:f9:96:9e:9d:9d:2c:78:ab:b5:0e:c2:d3:08:e9:c4:4d: 77:0c:73:cd:84:52:ad:be:7c:7c:27:0f:d0:b9:dc:8e:b7:f8: 39:71:71:25:04:2f:0a:34:1c:d9:8f:28:51:4d:58:43:a2:7d: 01:d5:2c:35:59:52:45:cc:57:fb:6b:68:41:a8:50:c0:39:62: e7:87:f6:56:8b:45:3d:a5:d3:7a:6d:1d:02:30:8d:62:45:76: 2a:6b:b7:09:31:a1:9a:4b:d6:25:93:ec:12:14:e3:13:d3:23: ec:b3:e9:3a:da:ca:c4:f8:bf:0d:67:87:ac:66:48:d5:33:2b: 70:38:d9:52:46:0a:31:d3:74:6d:d3:cb:55:22:f7:6c:ef:56: b9:18:9d:53:0e:4d:a8:c5:9b:69:db:d4:09:e3:5d:ab:06:60: 4d:74:59:b0:3b:bf:64:66:25:d2:0e:92:c0:10:86:fa:f6:61: 64:a5:c8:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMplqdmmvkgnUsMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MzBlNGE5ODgtMDkxZS00OWMyLTg5NjgtOWM0OGM4MjU4ZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxQt6nRymlAgP1tdhnKOhLkO3miSWsAHF87O u2lAeyO+amS3Ee/En8aS5wmnNurrvfXYoxXrVyrEVVE0nv3kBLB48wOPu1d4MM+5 5rADuHvDU1WMRp05PPT8xotcnrcQjtJ1WXPXBPVdmfSAZ7ZPgykbonKkDq5/rYPg dzUmU9GzHrU7pD4J8/Unj/gv4cNZhd1uwF7NmychReHdZviCWEtBW2IJ1Lj/tIk2 PE8aIZGQ/W4BN8uyKPHEtNLdka0Vqi2mZbtpISI7nxJu6SLvK2RrWQQG1B0UWIQz zIRRdkUGbiqlQ7dZgGvAjttwaKMm2sKUZk8uVc1fDPEYvH8/HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2uUQU+oyMAV12gdMMGg4WWdTGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2Q3ZmNmZjktMDU1ZS0z YWQxLWE1MDQtOWEwMWU0OWNmZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuLDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9JSU0kbKf9lRbjoUJGtcz/QqpL0cYOixQo4W5p13ltHsokSI7b8Dzc 2A/pbBmr4rJfYG5jmeFSM33anHqH8XTys/hZrd63wMKe+ZaenZ0seKu1DsLTCOnE TXcMc82EUq2+fHwnD9C53I63+DlxcSUELwo0HNmPKFFNWEOifQHVLDVZUkXMV/tr aEGoUMA5YueH9laLRT2l03ptHQIwjWJFdiprtwkxoZpL1iWT7BIU4xPTI+yz6Tra ysT4vw1nh6xmSNUzK3A42VJGCjHTdG3Ty1Ui92zvVrkYnVMOTajFm2nb1AnjXasG YE10WbA7v2RmJdIOksAQhvr2YWSlyIc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:28 2025 by rpki-client