$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb45fc3d-be31-3e7f-b859-33aca7a71085.roa File: fb45fc3d-be31-3e7f-b859-33aca7a71085.roa (raw, json) Hash identifier: cz+xa1kMcrrXG6THmFijoa5qscskCgOu3gbvZu8HP9g= Subject key identifier: 91:6C:9C:F5:60:7C:2B:3D:E1:44:89:C1:65:68:E9:32:15:1B:0C:1A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A69F8B4125514309CB6C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb45fc3d-be31-3e7f-b859-33aca7a71085.roa Signing time: Fri 20 Jun 2025 09:28:13 +0000 ROA not before: Fri 20 Jun 2025 09:28:13 +0000 ROA not after: Thu 18 Sep 2025 09:28:13 +0000 asID: 22773 IP address blocks: 24.253.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:9f:8b:41:25:51:43:09:cb:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:13 2025 GMT Not After : Sep 18 09:28:13 2025 GMT Subject: CN=de47c12a-2517-4c79-a4d7-e090ce37433b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:60:6d:a1:4c:00:59:3f:60:11:a3:24:b9:3e: 3b:f3:57:3d:ff:06:d2:08:76:d8:5d:74:05:0d:2c: aa:eb:8c:c2:c6:c8:ae:3d:8b:36:78:f5:e5:a2:5f: d7:31:74:93:6a:b7:58:11:f6:6b:b8:d7:6f:08:01: 0e:1e:c0:b2:73:84:60:5f:aa:b9:c0:75:88:a3:2a: 02:ba:93:03:fe:2f:90:c0:79:0b:08:6a:2d:82:24: 97:cb:f6:fa:80:80:10:dd:6f:f5:3b:74:d0:e7:cb: 7e:6a:4b:21:ec:93:35:50:2d:3b:fe:b5:7c:f4:ee: d0:48:0e:f5:f6:a6:3d:50:aa:dc:0e:3e:84:75:a9: a0:ce:58:3a:5d:84:77:43:3e:a9:2b:fb:4a:35:79: d4:71:90:23:95:ee:6e:90:81:59:93:1d:37:95:14: 11:44:03:0b:62:3b:f5:c9:93:69:5e:eb:28:47:df: c9:2f:f7:69:f8:c5:18:83:3a:f2:f0:c3:28:32:43: 72:af:15:b4:5a:06:87:c5:d9:28:e3:cb:e0:e1:d5: 5a:03:1b:58:9a:9e:58:d9:ed:83:9d:ff:98:f9:1a: 5f:6a:18:0e:88:14:86:8f:62:99:eb:54:22:08:53: 3b:bc:66:46:67:93:bf:3f:11:b7:d2:c0:f5:ce:72: 1c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6C:9C:F5:60:7C:2B:3D:E1:44:89:C1:65:68:E9:32:15:1B:0C:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb45fc3d-be31-3e7f-b859-33aca7a71085.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c9:69:0e:aa:e2:71:11:84:55:95:39:90:75:90:69:3f:47: fd:a2:ee:d8:c3:2e:d3:a0:61:cd:0d:e4:91:61:e4:dd:5f:55: 05:7c:6c:14:c0:10:46:9e:88:0b:de:52:42:0b:1b:36:f5:a3: 64:1c:29:8e:2a:f1:7a:a2:b0:23:6f:52:05:12:b6:f8:94:c4: 3a:e8:97:1a:d5:49:4c:4a:9c:4b:de:7a:59:00:13:02:89:59: 3d:89:9b:51:99:11:ef:2f:46:aa:15:7b:1b:1f:8a:4e:96:a8: 0f:83:e1:68:1d:a8:e3:ad:9d:31:cf:ad:05:91:f0:4f:90:2d: 9c:42:53:bc:f0:71:16:df:9d:21:13:95:31:a0:0d:f0:69:eb: 86:9a:85:55:ea:04:68:5f:67:43:9b:5f:6d:43:53:66:68:77: 6b:75:82:0d:2e:93:41:31:31:33:c8:cd:4e:17:d9:8d:6e:d8: c2:43:1d:bc:59:cf:7c:1d:68:4a:81:7b:b7:5f:f7:51:37:b8: 62:65:bb:1c:a4:57:16:a5:47:48:4a:d8:91:ed:0e:b2:4c:f1: 77:20:e8:8d:6a:33:ff:73:56:43:dd:23:0c:61:00:76:ac:68: 13:7a:7c:72:55:67:0e:8f:8d:61:cd:d3:0b:d4:bb:49:e2:b8: c4:f6:1e:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApp+LQSVRQwnLbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjgxM1oXDTI1MDkxODA5MjgxM1owLzEtMCsGA1UEAxMk ZGU0N2MxMmEtMjUxNy00Yzc5LWE0ZDctZTA5MGNlMzc0MzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2BtoUwAWT9gEaMkuT4781c9/wbSCHbYXXQF DSyq64zCxsiuPYs2ePXlol/XMXSTardYEfZruNdvCAEOHsCyc4RgX6q5wHWIoyoC upMD/i+QwHkLCGotgiSXy/b6gIAQ3W/1O3TQ58t+aksh7JM1UC07/rV89O7QSA71 9qY9UKrcDj6Edamgzlg6XYR3Qz6pK/tKNXnUcZAjle5ukIFZkx03lRQRRAMLYjv1 yZNpXusoR9/JL/dp+MUYgzry8MMoMkNyrxW0WgaHxdko48vg4dVaAxtYmp5Y2e2D nf+Y+RpfahgOiBSGj2KZ61QiCFM7vGZGZ5O/PxG30sD1znIc3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFsnPVgfCs94USJwWVo6TIVGwwaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmI0NWZjM2QtYmUzMS0z ZTdmLWI4NTktMzNhY2E3YTcxMDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP0yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7JaQ6q4nERhFWVOZB1kGk/R/2i7tjDLtOgYc0N5JFh5N1fVQV8bBTA EEaeiAveUkILGzb1o2QcKY4q8XqisCNvUgUStviUxDrolxrVSUxKnEveelkAEwKJ WT2Jm1GZEe8vRqoVexsfik6WqA+D4WgdqOOtnTHPrQWR8E+QLZxCU7zwcRbfnSET lTGgDfBp64aahVXqBGhfZ0ObX21DU2Zod2t1gg0uk0ExMTPIzU4X2Y1u2MJDHbxZ z3wdaEqBe7df91E3uGJluxykVxalR0hK2JHtDrJM8Xcg6I1qM/9zVkPdIwxhAHas aBN6fHJVZw6PjWHN0wvUu0niuMT2HuU= -----END CERTIFICATE-----Generated at Wed Jul 2 10:15:46 2025 by rpki-client