$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f7af380c-faea-3c13-8a8f-4ecdfc8d051b.roa File: f7af380c-faea-3c13-8a8f-4ecdfc8d051b.roa (raw, json) Hash identifier: qhX3nKnai1TQdLStsE2UKhZ0nLKv2zLY35akWNOkvtU= Subject key identifier: BB:92:43:60:B1:32:37:EA:36:E4:30:16:48:1A:32:42:F7:B5:3E:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0F69C8D1B1EE56FC6E7E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f7af380c-faea-3c13-8a8f-4ecdfc8d051b.roa Signing time: Wed 18 Jun 2025 18:00:19 +0000 ROA not before: Wed 18 Jun 2025 18:00:19 +0000 ROA not after: Tue 16 Sep 2025 18:00:19 +0000 asID: 22773 IP address blocks: 24.251.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:69:c8:d1:b1:ee:56:fc:6e:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:19 2025 GMT Not After : Sep 16 18:00:19 2025 GMT Subject: CN=a318215e-7e6b-4912-a459-0f37f4760399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:25:aa:9e:cc:f4:c9:1e:47:96:20:78:45:64: a1:2b:61:ae:24:92:97:c0:2e:61:6e:98:5c:7f:53: 39:d6:12:b6:2d:a0:10:00:e3:cf:c0:b0:66:7a:9b: b6:8d:9d:8f:49:fc:b7:1f:70:21:e0:b2:be:2d:5b: f6:70:bf:c2:ff:25:fe:60:1b:66:8a:d2:62:4c:1c: d5:4a:5f:28:f4:f0:f4:0b:85:c7:9d:94:4f:f6:0c: af:4d:8a:4a:20:ab:89:e6:94:1d:e0:ca:cf:2f:d1: 0a:10:02:fa:76:77:0a:41:88:d2:48:70:50:29:52: 25:f5:48:b1:1f:32:09:e0:c0:16:5c:cd:f9:0e:2f: ef:50:d3:69:31:fd:ac:13:d0:be:51:e8:5e:3f:0a: 0d:36:1d:cc:88:47:a6:ab:f6:92:35:ff:b6:12:04: 2b:dd:3f:5a:fa:28:dd:e4:63:3c:f4:65:44:5b:3a: dc:e8:3e:41:71:b1:38:c5:01:18:85:d4:ad:d7:bd: 9d:1d:02:73:68:20:9f:31:01:5c:3d:fd:4a:5c:b3: e1:5d:50:4e:6a:d3:ad:ab:bb:88:0c:0c:c2:94:53: f6:a6:35:12:80:d6:36:4d:39:6f:6d:4d:44:6f:1d: 52:bc:10:e5:6d:10:6e:9f:49:e2:bd:d9:65:77:98: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:92:43:60:B1:32:37:EA:36:E4:30:16:48:1A:32:42:F7:B5:3E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f7af380c-faea-3c13-8a8f-4ecdfc8d051b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:61:93:dd:f5:cd:6c:e7:df:b2:7d:b5:23:4b:26:73:0a:65: 97:e6:b2:71:a8:21:3d:2c:14:c6:b7:2d:52:73:7c:2d:ad:0e: ad:ed:c2:7c:e8:76:7d:cb:65:fc:cf:33:69:68:0b:fc:3e:9a: b6:45:70:09:52:60:fe:7d:c5:60:3e:bb:a4:57:a8:e7:65:68: 42:62:0f:4e:4f:ac:ab:45:dc:19:4e:9e:db:56:f0:3d:25:87: 44:98:36:15:3c:05:7a:dd:a4:81:3c:fd:0f:d0:54:2f:23:ca: c4:bd:96:5e:86:a1:bb:ae:3c:bc:fc:a0:fb:5d:80:5e:b2:83: 22:3d:d2:95:09:8c:95:19:ef:5b:29:98:2a:2b:8d:b1:20:a3: 32:f4:35:61:78:2f:ed:a8:2e:82:87:31:54:e7:1b:55:6e:35: 51:84:41:b1:33:3b:93:73:b7:fd:a9:10:9f:c4:1e:ff:20:b9: 24:1a:e0:f7:0a:47:52:d3:49:7f:5c:4a:ba:c4:b1:c5:bc:33: be:a3:a7:0b:70:07:0f:90:38:6a:15:28:12:f3:8d:9e:0c:1e: 1d:57:ab:87:97:71:30:71:71:8b:bc:b5:27:15:a4:d3:8c:54: cf:5b:0a:d3:d5:80:3b:ec:75:a8:3f:b3:a7:45:85:79:a6:16: 4c:d4:4e:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D2nI0bHuVvxufoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDAxOVoXDTI1MDkxNjE4MDAxOVowLzEtMCsGA1UEAxMk YTMxODIxNWUtN2U2Yi00OTEyLWE0NTktMGYzN2Y0NzYwMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSWqnsz0yR5HliB4RWShK2GuJJKXwC5hbphc f1M51hK2LaAQAOPPwLBmepu2jZ2PSfy3H3Ah4LK+LVv2cL/C/yX+YBtmitJiTBzV Sl8o9PD0C4XHnZRP9gyvTYpKIKuJ5pQd4MrPL9EKEAL6dncKQYjSSHBQKVIl9Uix HzIJ4MAWXM35Di/vUNNpMf2sE9C+UehePwoNNh3MiEemq/aSNf+2EgQr3T9a+ijd 5GM89GVEWzrc6D5BcbE4xQEYhdSt172dHQJzaCCfMQFcPf1KXLPhXVBOatOtq7uI DAzClFP2pjUSgNY2TTlvbU1Ebx1SvBDlbRBun0nivdlld5gYXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuSQ2CxMjfqNuQwFkgaMkL3tT6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjdhZjM4MGMtZmFlYS0z YzEzLThhOGYtNGVjZGZjOGQwNTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPtCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVhk931zWzn37J9tSNLJnMKZZfmsnGoIT0sFMa3LVJzfC2tDq3twnzo dn3LZfzPM2loC/w+mrZFcAlSYP59xWA+u6RXqOdlaEJiD05PrKtF3BlOnttW8D0l h0SYNhU8BXrdpIE8/Q/QVC8jysS9ll6GobuuPLz8oPtdgF6ygyI90pUJjJUZ71sp mCorjbEgozL0NWF4L+2oLoKHMVTnG1VuNVGEQbEzO5Nzt/2pEJ/EHv8guSQa4PcK R1LTSX9cSrrEscW8M76jpwtwBw+QOGoVKBLzjZ4MHh1Xq4eXcTBxcYu8tScVpNOM VM9bCtPVgDvsdag/s6dFhXmmFkzUTn0= -----END CERTIFICATE-----Generated at Mon Jun 30 18:30:34 2025 by rpki-client