$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceec7e7c-345c-3e80-a711-5d6856f64643.roa File: ceec7e7c-345c-3e80-a711-5d6856f64643.roa (raw, json) Hash identifier: t8jBXCdXmiR2TUhhpnskOCIhdFD+tRN4IG3mwbOytx0= Subject key identifier: D0:A3:35:11:FB:76:AB:BC:A7:09:03:E3:CA:3F:21:B1:DC:6B:81:FB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0FC59EAE33CC597B31E500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceec7e7c-345c-3e80-a711-5d6856f64643.roa Signing time: Wed 18 Jun 2025 18:01:03 +0000 ROA not before: Wed 18 Jun 2025 18:01:03 +0000 ROA not after: Tue 16 Sep 2025 18:01:03 +0000 asID: 22773 IP address blocks: 24.255.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:c5:9e:ae:33:cc:59:7b:31:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:03 2025 GMT Not After : Sep 16 18:01:03 2025 GMT Subject: CN=fb9338b6-7e77-4664-b2cb-609b20f3b3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:54:5e:07:81:1b:26:16:28:fa:e0:8c:43:eb: 81:ac:47:d9:5e:a1:0e:ee:8e:18:04:1c:05:b5:6b: b4:66:9e:ed:71:e2:03:9c:62:20:f7:0d:af:9f:89: fe:69:44:32:46:9d:6b:cb:64:05:87:6c:06:b6:c2: 08:c1:6d:66:3a:26:a3:e4:30:a9:aa:bc:b6:7d:87: 9e:79:ed:aa:04:d8:67:93:13:73:df:ca:09:dd:10: ff:2c:19:1f:7f:3b:f7:3a:9c:db:ee:a8:ed:4f:91: bb:55:0a:e1:d9:85:53:14:95:e7:11:79:1e:b5:06: 94:3b:ab:8d:59:09:aa:9a:de:e8:54:ba:f6:0c:23: 5b:d7:51:7c:cd:9b:5b:7c:04:49:a7:b9:3e:77:d3: 80:7f:02:05:5e:bc:ba:b8:a2:ab:f1:19:5c:78:5a: b2:2e:09:16:f4:4b:10:ad:70:d9:c1:3c:96:22:e9: 84:f8:e7:78:2d:30:36:58:be:ad:1a:04:ba:5c:b1: 6a:27:67:80:da:f3:9d:0d:62:74:18:b2:cb:57:53: 36:17:4b:e9:de:85:71:bc:53:d8:5d:b9:e7:78:e9: 56:a7:59:12:5d:0a:a9:26:d2:4d:bb:34:fb:74:0b: 27:43:c2:6c:7b:b7:ce:df:f1:35:f8:9e:78:f1:38: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A3:35:11:FB:76:AB:BC:A7:09:03:E3:CA:3F:21:B1:DC:6B:81:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceec7e7c-345c-3e80-a711-5d6856f64643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.255.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e3:6f:88:e4:e7:cc:59:9b:00:a0:c0:52:be:40:87:56:89: d1:6e:af:78:1a:1f:9c:20:e9:76:57:77:f4:4c:2c:1e:8f:17: 91:36:2b:93:a5:46:b0:d3:0a:74:e5:00:82:68:09:62:46:0e: 43:d4:bb:52:e0:cc:8a:6c:75:46:13:5d:f4:95:a9:a2:33:42: 10:bd:bc:70:24:b0:62:b1:e6:99:a9:ea:32:51:b1:21:95:6b: 87:2d:9e:90:bd:c7:52:03:46:02:aa:8f:68:14:cd:c7:03:0e: f6:b7:d4:1b:b7:b9:10:b4:70:1c:ca:75:6b:1a:cd:b9:ac:a7: 22:7f:a0:dc:aa:04:61:76:31:9c:b1:17:56:4b:26:00:d0:d4: 7b:ef:77:49:75:a4:9a:0a:16:56:3e:f6:01:67:d8:f7:cd:36: 4b:a6:1e:a6:b8:83:7b:c4:bb:98:fe:57:c4:a5:7a:0a:c4:e8: a8:de:bc:e0:06:e1:51:b7:b0:60:3e:b8:63:2a:e7:da:b5:e9: 56:90:95:77:09:0d:f0:6c:37:97:97:59:41:ad:18:7f:a2:12: 65:d0:26:21:b6:b7:42:aa:c3:aa:38:0b:6f:9c:c2:89:74:78: 12:dd:fa:7c:fd:0e:10:cd:83:10:d6:7a:02:88:9b:53:d1:a5: ed:a7:91:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D8WerjPMWXsx5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDEwM1oXDTI1MDkxNjE4MDEwM1owLzEtMCsGA1UEAxMk ZmI5MzM4YjYtN2U3Ny00NjY0LWIyY2ItNjA5YjIwZjNiM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71ReB4EbJhYo+uCMQ+uBrEfZXqEO7o4YBBwF tWu0Zp7tceIDnGIg9w2vn4n+aUQyRp1ry2QFh2wGtsIIwW1mOiaj5DCpqry2fYee ee2qBNhnkxNz38oJ3RD/LBkffzv3Opzb7qjtT5G7VQrh2YVTFJXnEXketQaUO6uN WQmqmt7oVLr2DCNb11F8zZtbfARJp7k+d9OAfwIFXry6uKKr8RlceFqyLgkW9EsQ rXDZwTyWIumE+Od4LTA2WL6tGgS6XLFqJ2eA2vOdDWJ0GLLLV1M2F0vp3oVxvFPY XbnneOlWp1kSXQqpJtJNuzT7dAsnQ8Jse7fO3/E1+J548ThCpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCjNRH7dqu8pwkD48o/IbHca4H7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2VlYzdlN2MtMzQ1Yy0z ZTgwLWE3MTEtNWQ2ODU2ZjY0NjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbjb4jk58xZmwCgwFK+QIdWidFur3gaH5wg6XZXd/RMLB6PF5E2K5Ol RrDTCnTlAIJoCWJGDkPUu1LgzIpsdUYTXfSVqaIzQhC9vHAksGKx5pmp6jJRsSGV a4ctnpC9x1IDRgKqj2gUzccDDva31Bu3uRC0cBzKdWsazbmspyJ/oNyqBGF2MZyx F1ZLJgDQ1Hvvd0l1pJoKFlY+9gFn2PfNNkumHqa4g3vEu5j+V8SlegrE6KjevOAG 4VG3sGA+uGMq59q16VaQlXcJDfBsN5eXWUGtGH+iEmXQJiG2t0Kqw6o4C2+cwol0 eBLd+nz9DhDNgxDWegKIm1PRpe2nkZs= -----END CERTIFICATE-----Generated at Mon Jun 30 09:05:26 2025 by rpki-client