$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d085765e-3a36-3b1d-8f9e-0f5d9a1a6e35.roa File: d085765e-3a36-3b1d-8f9e-0f5d9a1a6e35.roa (raw, json) Hash identifier: qikebeYFm+NLoOeFxzHPKByS7k7BWodFHqDJmZpH4Es= Subject key identifier: 98:14:2F:82:15:44:5E:10:8D:65:76:C3:3F:33:6E:1F:41:F3:2E:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7CB1D3126FBEEAF956700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d085765e-3a36-3b1d-8f9e-0f5d9a1a6e35.roa Signing time: Thu 01 May 2025 17:14:25 +0000 ROA not before: Thu 01 May 2025 17:14:25 +0000 ROA not after: Wed 30 Jul 2025 17:14:25 +0000 asID: 22773 IP address blocks: 24.254.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:cb:1d:31:26:fb:ee:af:95:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:25 2025 GMT Not After : Jul 30 17:14:25 2025 GMT Subject: CN=8ead01fc-b8d7-4a02-b3e5-b2c5d0789fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:b7:6f:c4:45:f8:40:95:89:8f:38:79:9c: 2b:2e:1e:09:2a:71:2b:2b:a4:fb:b5:16:32:03:f4: 20:69:2e:9f:36:72:34:51:89:55:1d:ba:d0:4d:b2: 8e:2d:cb:9f:96:fb:1f:2e:62:21:a2:93:0f:97:11: 9d:ba:88:10:84:1e:3d:6e:67:fc:07:4b:cb:e8:16: aa:51:c9:bd:04:d5:55:d6:81:de:56:25:7c:95:e6: 98:e7:db:b7:64:3f:7f:91:45:01:f4:73:f5:d4:e5: 8e:77:b4:24:28:4f:97:6d:8b:8b:59:a0:97:f4:6d: ad:68:f4:8c:b7:00:d6:a6:6c:fb:36:0a:e1:b5:29: 51:71:9b:b5:94:22:cd:40:27:81:e5:fd:ef:d2:84: 89:fb:b8:e7:67:1e:f4:eb:63:f5:82:94:5d:1a:94: 0e:91:ad:c4:73:63:17:7c:16:b8:88:96:30:dc:8e: c0:f3:c6:ab:4d:79:b5:6d:69:53:e9:88:73:14:77: b1:2f:62:03:a7:2c:0c:6e:ca:48:28:d3:38:b9:d5: d5:39:f3:89:e2:d4:27:60:a2:7e:ef:3e:11:0f:bb: dd:0c:61:17:4e:bd:70:84:2a:98:89:a6:a4:04:1e: 4e:9c:cf:aa:cd:0d:02:49:ff:85:4b:04:26:20:60: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:14:2F:82:15:44:5E:10:8D:65:76:C3:3F:33:6E:1F:41:F3:2E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d085765e-3a36-3b1d-8f9e-0f5d9a1a6e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.254.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9b:31:bd:d0:42:b4:35:f4:5c:28:bb:09:57:16:25:32:31: 21:67:9e:32:18:82:48:83:32:5f:44:51:da:25:f6:a1:f4:3d: 42:93:90:a2:36:4e:20:70:b0:af:85:73:83:b6:b0:1c:49:a2: d2:72:5d:f9:33:3f:4c:81:78:1e:b6:be:02:85:f3:80:96:32: 66:cc:41:7f:65:bf:94:2f:c9:b5:a4:86:08:97:e2:3a:af:82: 30:f4:31:d6:2f:42:88:b0:b5:a9:06:94:0a:38:ba:2e:99:69: 56:7e:3c:2f:d1:fc:65:76:12:20:74:be:f4:ee:1a:05:b4:82: 4f:d5:fd:f0:76:ff:72:a6:ef:7a:3f:ee:4c:60:01:16:91:a1: aa:56:ea:e8:82:6c:c3:61:e5:29:bd:2a:78:87:c9:7b:8f:bf: dd:5f:8b:df:0d:6d:8e:ff:fb:ef:d2:73:fd:f1:d3:6a:b4:f4: 57:b5:24:10:08:27:ed:99:c0:2f:e1:da:5d:d0:df:45:7b:2f: bb:97:23:1f:46:c2:e2:57:13:14:cc:6b:63:11:f2:e7:07:85: 97:59:83:09:98:93:57:44:bf:b2:8a:cf:0c:23:27:35:27:b9: 7d:59:08:c0:c2:11:c3:57:70:b0:6f:40:a5:d2:40:7c:53:f0: 50:df:30:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm198sdMSb77q+VZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQyNVoXDTI1MDczMDE3MTQyNVowLzEtMCsGA1UEAxMk OGVhZDAxZmMtYjhkNy00YTAyLWIzZTUtYjJjNWQwNzg5ZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1C3b8RF+ECViY84eZwrLh4JKnErK6T7tRYy A/QgaS6fNnI0UYlVHbrQTbKOLcuflvsfLmIhopMPlxGduogQhB49bmf8B0vL6Baq Ucm9BNVV1oHeViV8leaY59u3ZD9/kUUB9HP11OWOd7QkKE+XbYuLWaCX9G2taPSM twDWpmz7NgrhtSlRcZu1lCLNQCeB5f3v0oSJ+7jnZx7062P1gpRdGpQOka3Ec2MX fBa4iJYw3I7A88arTXm1bWlT6YhzFHexL2IDpywMbspIKNM4udXVOfOJ4tQnYKJ+ 7z4RD7vdDGEXTr1whCqYiaakBB5OnM+qzQ0CSf+FSwQmIGAdjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgUL4IVRF4QjWV2wz8zbh9B8y6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDA4NTc2NWUtM2EzNi0z YjFkLThmOWUtMGY1ZDlhMWE2ZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADibMb3QQrQ19FwouwlXFiUyMSFnnjIYgkiDMl9EUdol9qH0PUKTkKI2 TiBwsK+Fc4O2sBxJotJyXfkzP0yBeB62vgKF84CWMmbMQX9lv5QvybWkhgiX4jqv gjD0MdYvQoiwtakGlAo4ui6ZaVZ+PC/R/GV2EiB0vvTuGgW0gk/V/fB2/3Km73o/ 7kxgARaRoapW6uiCbMNh5Sm9KniHyXuPv91fi98NbY7/++/Sc/3x02q09Fe1JBAI J+2ZwC/h2l3Q30V7L7uXIx9GwuJXExTMa2MR8ucHhZdZgwmYk1dEv7KKzwwjJzUn uX1ZCMDCEcNXcLBvQKXSQHxT8FDfMBY= -----END CERTIFICATE-----Generated at Sat May 10 19:25:05 2025 by rpki-client