$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cb9e5a2-1b38-33ed-8315-afdb6f24425c.roa File: 3cb9e5a2-1b38-33ed-8315-afdb6f24425c.roa (raw, json) Hash identifier: 7+moSFzDQjS0S84Hhdcf/JYvkVfzrmZgSLgdzkrrYB4= Subject key identifier: 97:DD:36:7A:AE:0F:3C:DE:7F:65:95:6D:34:28:BF:DF:7A:3C:4D:10 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0FB7D3F638063950C0C380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cb9e5a2-1b38-33ed-8315-afdb6f24425c.roa Signing time: Wed 18 Jun 2025 18:00:56 +0000 ROA not before: Wed 18 Jun 2025 18:00:56 +0000 ROA not after: Tue 16 Sep 2025 18:00:56 +0000 asID: 22773 IP address blocks: 24.251.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:b7:d3:f6:38:06:39:50:c0:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:56 2025 GMT Not After : Sep 16 18:00:56 2025 GMT Subject: CN=80fab478-5158-4c90-91ad-2d0ce4d70d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:f1:bc:bf:b4:f7:80:de:51:15:91:5f:b8: f0:72:71:54:95:f6:e0:fd:74:a1:f1:48:b9:73:da: 64:a3:9a:b4:84:ac:4e:b8:53:fb:2b:97:1b:83:cf: df:b5:e9:08:2d:d7:7b:92:a7:30:77:be:75:02:84: a2:db:f9:7b:0e:a3:a0:45:dd:36:b1:e0:27:11:e8: b5:57:8d:74:fa:1f:50:4a:cb:f5:04:e4:a6:26:e1: 11:7c:67:ff:d4:ef:e3:69:6b:87:e9:d5:5b:c5:1d: 72:d1:38:b0:f1:0d:83:55:4c:07:14:cf:af:a1:a7: dd:38:96:90:46:a1:e0:34:0d:9c:62:01:c8:de:df: 5a:f8:3e:f1:ae:58:f5:4c:48:0f:2b:b2:a3:1f:e1: bc:df:30:81:a1:8c:94:89:f1:7e:8f:4c:fe:7d:6b: fc:10:40:ab:92:74:9d:3b:f3:ae:c3:12:7e:f7:81: 06:6e:84:6a:58:c4:be:a0:bd:84:9a:01:b1:81:ef: 1a:ea:ce:cd:52:92:f1:db:2b:40:17:95:60:c5:1f: e5:f5:38:5a:85:be:6f:53:31:64:9b:89:7f:c6:5a: 55:fc:95:75:79:06:9a:37:a1:2b:f9:2a:8f:78:67: 2f:65:3e:b3:de:2d:52:12:2e:fc:8a:ce:32:f7:cc: f8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DD:36:7A:AE:0F:3C:DE:7F:65:95:6D:34:28:BF:DF:7A:3C:4D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cb9e5a2-1b38-33ed-8315-afdb6f24425c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:db:79:9d:05:58:68:db:2b:09:df:57:df:07:fe:e7:45:b9: 28:8c:71:46:67:7e:27:7b:cf:c1:1a:f6:b0:71:50:fa:93:25: 66:0c:3c:6e:57:23:67:b9:46:87:cf:31:e3:c7:e5:05:16:bd: 6b:0c:dd:22:dd:8c:76:66:55:a3:6f:9a:54:ee:52:06:14:a4: 4a:8c:70:5c:f1:b6:5a:fa:1c:55:35:0b:d5:00:65:39:a0:25: 08:6f:c7:dd:b8:80:cc:e3:c0:e8:6b:3e:92:d3:02:b9:ef:d1: a5:ae:c2:b5:90:c8:e5:2e:f6:5f:e3:b9:63:74:32:2e:c4:64: 46:a8:61:71:31:70:55:f8:25:04:4b:d3:4a:92:89:d8:66:a5: df:b0:ed:fa:91:40:23:95:0e:8e:5a:91:2c:2f:f3:9b:38:57: 02:34:a8:aa:65:a8:8d:03:03:92:08:b5:af:c9:d0:5f:9b:bc: fe:d1:f8:08:0c:b9:ce:cc:1e:5e:fd:04:37:2e:02:d9:59:34: 07:33:5f:62:ec:a8:31:29:b0:7d:98:9c:2d:28:2f:95:49:f4: e1:10:d4:db:96:cf:1a:08:a5:4f:7e:94:3a:81:ee:1a:10:61: 07:85:71:26:18:04:59:98:c6:05:fe:26:ae:4f:fc:cc:3a:75: dc:54:05:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D7fT9jgGOVDAw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDA1NloXDTI1MDkxNjE4MDA1NlowLzEtMCsGA1UEAxMk ODBmYWI0NzgtNTE1OC00YzkwLTkxYWQtMmQwY2U0ZDcwZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytjxvL+094DeURWRX7jwcnFUlfbg/XSh8Ui5 c9pko5q0hKxOuFP7K5cbg8/ftekILdd7kqcwd751AoSi2/l7DqOgRd02seAnEei1 V410+h9QSsv1BOSmJuERfGf/1O/jaWuH6dVbxR1y0Tiw8Q2DVUwHFM+voafdOJaQ RqHgNA2cYgHI3t9a+D7xrlj1TEgPK7KjH+G83zCBoYyUifF+j0z+fWv8EECrknSd O/OuwxJ+94EGboRqWMS+oL2EmgGxge8a6s7NUpLx2ytAF5VgxR/l9Thahb5vUzFk m4l/xlpV/JV1eQaaN6Er+SqPeGcvZT6z3i1SEi78is4y98z4TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfdNnquDzzef2WVbTQov996PE0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2NiOWU1YTItMWIzOC0z M2VkLTgzMTUtYWZkYjZmMjQ0MjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXbeZ0FWGjbKwnfV98H/udFuSiMcUZnfid7z8Ea9rBxUPqTJWYMPG5X I2e5RofPMePH5QUWvWsM3SLdjHZmVaNvmlTuUgYUpEqMcFzxtlr6HFU1C9UAZTmg JQhvx924gMzjwOhrPpLTArnv0aWuwrWQyOUu9l/juWN0Mi7EZEaoYXExcFX4JQRL 00qSidhmpd+w7fqRQCOVDo5akSwv85s4VwI0qKplqI0DA5IIta/J0F+bvP7R+AgM uc7MHl79BDcuAtlZNAczX2LsqDEpsH2YnC0oL5VJ9OEQ1NuWzxoIpU9+lDqB7hoQ YQeFcSYYBFmYxgX+Jq5P/Mw6ddxUBYU= -----END CERTIFICATE-----Generated at Wed Jul 2 06:22:36 2025 by rpki-client