$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0641857e-0f53-3043-9aec-8cd4861121f3.roa File: 0641857e-0f53-3043-9aec-8cd4861121f3.roa (raw, json) Hash identifier: TjKBg6m+kpZRtT+IBOxClJU5wWO5sGrVzJop1guHGRY= Subject key identifier: 09:A7:85:8C:56:E8:43:AB:5D:D7:34:50:41:AA:DD:71:1B:43:C0:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFE7C0701F9AF24027BCA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0641857e-0f53-3043-9aec-8cd4861121f3.roa Signing time: Thu 19 Jun 2025 10:37:50 +0000 ROA not before: Thu 19 Jun 2025 10:37:50 +0000 ROA not after: Wed 17 Sep 2025 10:37:50 +0000 asID: 22773 IP address blocks: 174.74.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fe:7c:07:01:f9:af:24:02:7b:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:37:50 2025 GMT Not After : Sep 17 10:37:50 2025 GMT Subject: CN=e36413ba-1f50-42dd-a5a3-d0bf2b18be9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:8f:57:65:c8:33:a6:6a:fc:36:e2:ec:af: 16:74:7e:c7:81:d8:a1:75:d7:59:26:55:5a:7d:1c: 0f:bb:fa:30:fe:68:19:51:b2:d6:ee:28:9c:94:62: b0:ac:e6:96:5e:0b:da:dd:4b:4c:df:81:95:b5:f7: 5d:de:dc:ef:21:d9:c1:40:c9:e3:33:04:ab:90:09: 7f:58:f7:56:8c:6d:84:41:85:98:28:22:b2:e4:3b: ec:a7:0b:f0:78:3b:92:43:bb:e8:6a:cc:dc:52:07: 1c:d3:ea:49:fb:f1:48:98:9f:a4:3d:b8:53:f7:5f: a1:a6:32:a0:dd:84:87:32:a7:e1:a9:d4:fd:6e:7a: 7d:21:9d:0c:14:c2:72:82:4f:1c:9f:0f:02:f8:a5: 1b:5d:32:dd:3c:48:5d:43:14:32:a1:27:e6:cb:24: c4:81:70:d8:cd:39:be:dc:ba:5f:74:83:09:9a:ab: b4:13:03:52:f7:24:2a:1f:db:79:65:88:e9:de:a0: 63:f0:2b:a8:ec:a1:b0:94:b9:ab:f9:f5:49:39:24: b9:9f:c2:e0:71:c7:6d:81:cc:7b:a2:40:5b:01:97: 5c:df:46:4d:80:88:6d:83:1c:07:9c:5d:27:24:ea: 5f:1e:96:ca:8e:1d:7b:33:08:fb:00:a7:25:6f:8c: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A7:85:8C:56:E8:43:AB:5D:D7:34:50:41:AA:DD:71:1B:43:C0:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0641857e-0f53-3043-9aec-8cd4861121f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.74.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2e:ca:f2:23:69:0f:4b:07:da:41:cb:18:4c:cc:39:5e:22: f5:a3:67:c5:0c:cc:72:86:68:81:97:95:de:3a:b1:40:83:7b: 4d:79:7e:2a:4b:08:1c:2e:18:fc:f0:73:5d:da:8a:5b:75:18: a9:bb:85:b8:c9:5e:73:a3:f6:e2:8c:ce:ac:5b:fb:77:fd:cc: 2c:b2:18:e1:8d:9f:34:01:a2:e8:db:c0:98:b1:29:85:8e:6c: 53:49:d3:c4:c1:d4:e9:ab:70:f9:04:03:62:2c:69:64:32:3e: 1f:35:90:a2:35:c1:fe:28:1e:eb:5d:0b:ce:96:6c:60:38:3f: 6e:af:95:b3:c2:2f:af:dd:21:64:7a:7f:46:cd:56:22:9d:f2: fb:cb:23:86:69:24:42:26:e6:27:58:99:eb:d0:ab:44:93:88: 04:d6:a1:06:6d:30:b7:66:f1:bd:bc:7e:98:64:56:4a:5d:ba: f3:9b:b5:d2:1a:9c:c0:0a:c2:81:ad:60:56:d3:c5:90:52:7b: c8:c0:b7:8c:57:b4:aa:fa:d0:06:30:3b:48:5b:8b:4c:c0:1f: ad:e9:54:2d:b8:49:55:6a:e4:4b:5a:cc:ab:82:c1:30:ed:d2: fb:a1:22:dd:46:61:44:6e:be:b3:b1:27:8d:bc:53:ba:bb:05: d3:48:fd:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/nwHAfmvJAJ7ygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzc1MFoXDTI1MDkxNzEwMzc1MFowLzEtMCsGA1UEAxMk ZTM2NDEzYmEtMWY1MC00MmRkLWE1YTMtZDBiZjJiMThiZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW+PV2XIM6Zq/Dbi7K8WdH7HgdihdddZJlVa fRwPu/ow/mgZUbLW7iiclGKwrOaWXgva3UtM34GVtfdd3tzvIdnBQMnjMwSrkAl/ WPdWjG2EQYWYKCKy5DvspwvweDuSQ7voaszcUgcc0+pJ+/FImJ+kPbhT91+hpjKg 3YSHMqfhqdT9bnp9IZ0MFMJygk8cnw8C+KUbXTLdPEhdQxQyoSfmyyTEgXDYzTm+ 3LpfdIMJmqu0EwNS9yQqH9t5ZYjp3qBj8Cuo7KGwlLmr+fVJOSS5n8Lgccdtgcx7 okBbAZdc30ZNgIhtgxwHnF0nJOpfHpbKjh17Mwj7AKclb4yATwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmnhYxW6EOrXdc0UEGq3XEbQ8AsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDY0MTg1N2UtMGY1My0z MDQzLTlhZWMtOGNkNDg2MTEyMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAuyvIjaQ9LB9pByxhMzDleIvWjZ8UMzHKGaIGXld46sUCDe015fipL CBwuGPzwc13ailt1GKm7hbjJXnOj9uKMzqxb+3f9zCyyGOGNnzQBoujbwJixKYWO bFNJ08TB1OmrcPkEA2IsaWQyPh81kKI1wf4oHutdC86WbGA4P26vlbPCL6/dIWR6 f0bNViKd8vvLI4ZpJEIm5idYmevQq0STiATWoQZtMLdm8b28fphkVkpduvObtdIa nMAKwoGtYFbTxZBSe8jAt4xXtKr60AYwO0hbi0zAH63pVC24SVVq5EtazKuCwTDt 0vuhIt1GYURuvrOxJ428U7q7BdNI/dE= -----END CERTIFICATE-----Generated at Wed Jul 2 15:08:06 2025 by rpki-client