$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db8d51d4-57ba-3a6d-9385-702bb95dde50.roa File: db8d51d4-57ba-3a6d-9385-702bb95dde50.roa (raw, json) Hash identifier: QUUEKoZYfqanTL2GSYHnQSH3lKLPoPkmfMZ9ivuaRaY= Subject key identifier: 1D:94:19:28:7D:6E:D4:67:7D:EC:75:D7:31:79:36:01:81:8C:35:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0F953A9151C7906B2C4740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db8d51d4-57ba-3a6d-9385-702bb95dde50.roa Signing time: Wed 18 Jun 2025 18:00:40 +0000 ROA not before: Wed 18 Jun 2025 18:00:40 +0000 ROA not after: Tue 16 Sep 2025 18:00:40 +0000 asID: 22773 IP address blocks: 24.251.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:95:3a:91:51:c7:90:6b:2c:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:40 2025 GMT Not After : Sep 16 18:00:40 2025 GMT Subject: CN=47fe56f8-b2c0-46cd-aca9-a2f2e350b89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:bd:1e:04:5b:81:3b:8c:fe:8b:c2:7c:b5: 98:07:ba:d0:ab:68:da:1b:a9:99:3e:c4:3c:ab:51: b7:43:e8:64:65:5c:eb:e8:19:c9:8b:1b:3d:9a:3c: d3:3b:37:91:b7:d6:1d:01:31:29:e4:80:1e:58:66: 2d:77:62:b6:21:79:c1:cc:75:3b:d8:47:7a:7d:09: 5e:30:a6:de:4c:8b:33:0e:51:65:92:54:7f:3a:bd: d0:8f:ac:1a:d4:47:32:db:47:d7:ed:bd:b5:02:3a: dc:fa:bd:a5:74:0f:f5:ed:72:1f:13:32:15:5c:da: 3c:a4:76:9d:e0:df:58:75:b1:31:b7:4d:ab:d1:78: 41:40:79:0c:9d:e8:e8:d7:11:2f:0e:d8:29:37:97: c6:9f:a4:5d:c7:43:0e:1e:90:61:ff:e2:9c:aa:82: 39:42:86:d4:8a:5b:08:b9:16:33:6b:ae:bc:60:c4: ba:00:6b:87:8e:32:f8:99:82:a2:c2:41:99:b7:b3: 8e:06:87:8c:ce:a6:63:85:17:40:f2:25:0f:0d:aa: c0:ed:cb:29:35:17:72:1b:43:8a:65:fc:ff:9a:54: 35:0c:a4:59:96:6c:b4:99:d9:ec:ed:5f:8a:0b:dc: b6:32:b6:ec:76:af:5b:05:b3:6d:f7:28:b2:f0:05: 35:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:94:19:28:7D:6E:D4:67:7D:EC:75:D7:31:79:36:01:81:8C:35:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db8d51d4-57ba-3a6d-9385-702bb95dde50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d2:4f:39:9f:51:70:14:24:04:72:27:f4:79:a7:cd:67:c0: 4c:fd:14:1f:38:39:fc:09:a5:64:5e:ec:0a:b5:48:0b:5e:02: fb:73:52:c2:aa:3e:a4:5c:a5:b0:78:35:85:d3:56:15:4c:6e: 47:f3:1b:e9:54:5c:59:3d:78:b8:ee:fe:75:0a:d7:5a:f3:12: 57:17:60:be:1e:b8:2c:33:f6:91:68:91:2d:ac:bf:f4:f1:24: 8e:41:e0:60:32:c2:57:89:b7:e9:0c:d7:6b:8a:85:47:10:30: 73:95:c6:c6:2d:aa:34:c5:33:36:7a:b5:7e:36:66:65:7c:6e: b8:61:e9:ca:b9:fa:9c:5f:7c:d5:6f:ac:46:4c:64:1d:00:b5: 3f:25:77:64:4d:99:b1:10:3a:e0:ff:c3:89:18:fc:6a:2e:d2: f7:55:cb:fb:3c:8f:bf:e4:e9:7d:49:2d:49:31:8b:2e:6a:78: 91:47:9c:2c:ed:4a:56:7e:ea:52:4a:a2:ea:64:8a:3d:26:6f: 2f:f3:c5:7f:52:cf:04:17:17:a1:5b:39:b5:d8:28:9e:36:9b: 09:57:8d:cc:db:94:97:fa:99:ea:c0:b1:48:d2:89:7e:e6:89: 2f:3a:ad:cb:5a:75:6d:24:4c:f1:87:92:11:50:96:c8:f2:6d: 4f:b8:84:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D5U6kVHHkGssR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDA0MFoXDTI1MDkxNjE4MDA0MFowLzEtMCsGA1UEAxMk NDdmZTU2ZjgtYjJjMC00NmNkLWFjYTktYTJmMmUzNTBiODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJC9HgRbgTuM/ovCfLWYB7rQq2jaG6mZPsQ8 q1G3Q+hkZVzr6BnJixs9mjzTOzeRt9YdATEp5IAeWGYtd2K2IXnBzHU72Ed6fQle MKbeTIszDlFlklR/Or3Qj6wa1Ecy20fX7b21Ajrc+r2ldA/17XIfEzIVXNo8pHad 4N9YdbExt02r0XhBQHkMnejo1xEvDtgpN5fGn6Rdx0MOHpBh/+KcqoI5QobUilsI uRYza668YMS6AGuHjjL4mYKiwkGZt7OOBoeMzqZjhRdA8iUPDarA7cspNRdyG0OK Zfz/mlQ1DKRZlmy0mdns7V+KC9y2Mrbsdq9bBbNt9yiy8AU1VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2UGSh9btRnfex11zF5NgGBjDVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGI4ZDUxZDQtNTdiYS0z YTZkLTkzODUtNzAyYmI5NWRkZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXSTzmfUXAUJARyJ/R5p81nwEz9FB84OfwJpWRe7Aq1SAteAvtzUsKq PqRcpbB4NYXTVhVMbkfzG+lUXFk9eLju/nUK11rzElcXYL4euCwz9pFokS2sv/Tx JI5B4GAywleJt+kM12uKhUcQMHOVxsYtqjTFMzZ6tX42ZmV8brhh6cq5+pxffNVv rEZMZB0AtT8ld2RNmbEQOuD/w4kY/Gou0vdVy/s8j7/k6X1JLUkxiy5qeJFHnCzt SlZ+6lJKoupkij0mby/zxX9SzwQXF6FbObXYKJ42mwlXjczblJf6merAsUjSiX7m iS86rctadW0kTPGHkhFQlsjybU+4hGI= -----END CERTIFICATE-----Generated at Tue Jul 1 22:34:29 2025 by rpki-client