$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bfaf155-e798-309f-a039-f109edc73b3f.roa File: 5bfaf155-e798-309f-a039-f109edc73b3f.roa (raw, json) Hash identifier: Lq2lFpvq4kMmKaFVZmapMR6hv98y3NQ5KCHFSErm2Aw= Subject key identifier: FA:7D:51:2F:A9:8F:FC:CD:F6:D0:2F:12:E1:66:54:EB:A9:07:12:F0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A69AD2624A50505BCF9F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bfaf155-e798-309f-a039-f109edc73b3f.roa Signing time: Fri 20 Jun 2025 09:28:11 +0000 ROA not before: Fri 20 Jun 2025 09:28:11 +0000 ROA not after: Thu 18 Sep 2025 09:28:11 +0000 asID: 22773 IP address blocks: 24.253.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:9a:d2:62:4a:50:50:5b:cf:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:11 2025 GMT Not After : Sep 18 09:28:11 2025 GMT Subject: CN=034181af-11b3-4f7d-b1b8-34596919e765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:42:71:43:9d:a9:52:81:ea:69:83:22:de: a5:92:99:4f:fa:19:b7:34:82:48:5c:27:00:a5:5e: 40:3c:c2:7a:cf:9f:a2:20:fa:1a:3b:c6:af:85:a6: 2d:0b:c8:bd:21:f9:30:06:e5:53:03:bb:35:d3:74: fa:1b:ad:b7:06:8b:45:01:eb:c1:00:4c:c5:9d:e5: a8:46:99:05:af:9a:e2:ac:6d:32:8b:d7:b1:a3:e7: 00:07:0f:9f:02:da:98:07:59:f4:b4:cd:74:26:e0: 86:92:4f:c7:eb:47:50:27:29:83:3a:d7:ca:68:eb: f1:31:83:81:b2:86:5f:84:25:ff:d6:06:3c:8f:47: df:e5:d7:82:ad:eb:9f:98:17:c4:06:bf:1d:fd:49: a1:1c:76:29:91:80:b5:d6:c1:3e:b0:60:23:ff:0f: f5:81:9b:22:58:29:40:a7:3a:fa:a3:dd:e9:30:61: 60:a2:24:b4:f6:db:8f:04:93:cf:be:09:7b:65:94: bd:1c:1c:6d:ec:3b:d8:55:88:36:49:3b:cd:ff:5d: 73:25:ba:e6:8c:01:e9:e4:9b:85:4b:63:5c:ab:35: 04:88:e7:ad:41:75:ea:81:5a:91:7e:06:4d:1b:6b: 5e:20:58:d3:68:6a:e0:62:91:bb:89:f7:5c:c8:10: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7D:51:2F:A9:8F:FC:CD:F6:D0:2F:12:E1:66:54:EB:A9:07:12:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bfaf155-e798-309f-a039-f109edc73b3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:57:99:c6:dc:3e:fe:07:46:ed:15:56:ac:45:20:da:49:18: 51:c3:e5:6e:d1:2b:31:db:e6:78:32:5f:df:26:45:6e:3c:3c: ad:dc:62:20:fa:79:b7:b7:27:fa:97:9b:67:a3:97:10:af:ef: 88:c1:68:78:fc:f2:26:e6:a4:6f:32:b9:0d:e4:96:5c:56:27: 75:4f:e8:d0:df:cd:02:91:96:7d:04:b3:20:df:fe:f9:37:f3: d6:38:ff:33:7e:4b:df:dc:ef:1b:02:8b:3d:59:a8:f9:f5:a4: 6c:69:56:0c:29:d7:3f:41:ba:04:c0:6a:c3:dc:e9:34:09:a0: b0:b5:30:b2:40:39:e2:e4:29:ec:c3:1f:55:11:b1:82:df:c6: 24:b5:80:e8:a4:e6:02:e5:5a:7f:8a:9f:d0:84:93:fb:1b:23: ff:3a:45:d3:28:26:e8:38:54:29:cd:fa:7b:24:06:82:ce:6b: 73:12:09:57:52:78:f0:01:41:96:e1:b6:31:aa:70:bb:46:2b: 7f:a6:e5:e3:5e:29:89:70:d5:1c:ca:cc:a2:53:e5:11:fd:d4: 43:58:2d:39:85:1b:aa:7f:22:32:ad:5b:08:4a:d6:78:30:95: 7d:2c:b9:94:21:20:39:05:5d:6d:2b:ba:5c:33:d8:15:c5:2b: 88:d9:51:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApprSYkpQUFvPnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjgxMVoXDTI1MDkxODA5MjgxMVowLzEtMCsGA1UEAxMk MDM0MTgxYWYtMTFiMy00ZjdkLWIxYjgtMzQ1OTY5MTllNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtohCcUOdqVKB6mmDIt6lkplP+hm3NIJIXCcA pV5APMJ6z5+iIPoaO8avhaYtC8i9IfkwBuVTA7s103T6G623BotFAevBAEzFneWo RpkFr5rirG0yi9exo+cABw+fAtqYB1n0tM10JuCGkk/H60dQJymDOtfKaOvxMYOB soZfhCX/1gY8j0ff5deCreufmBfEBr8d/UmhHHYpkYC11sE+sGAj/w/1gZsiWClA pzr6o93pMGFgoiS09tuPBJPPvgl7ZZS9HBxt7DvYVYg2STvN/11zJbrmjAHp5JuF S2NcqzUEiOetQXXqgVqRfgZNG2teIFjTaGrgYpG7ifdcyBBhpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPp9US+pj/zN9tAvEuFmVOupBxLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWJmYWYxNTUtZTc5OC0z MDlmLWEwMzktZjEwOWVkYzczYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFXmcbcPv4HRu0VVqxFINpJGFHD5W7RKzHb5ngyX98mRW48PK3cYiD6 ebe3J/qXm2ejlxCv74jBaHj88ibmpG8yuQ3kllxWJ3VP6NDfzQKRln0EsyDf/vk3 89Y4/zN+S9/c7xsCiz1ZqPn1pGxpVgwp1z9BugTAasPc6TQJoLC1MLJAOeLkKezD H1URsYLfxiS1gOik5gLlWn+Kn9CEk/sbI/86RdMoJug4VCnN+nskBoLOa3MSCVdS ePABQZbhtjGqcLtGK3+m5eNeKYlw1RzKzKJT5RH91ENYLTmFG6p/IjKtWwhK1ngw lX0suZQhIDkFXW0rulwz2BXFK4jZUfA= -----END CERTIFICATE-----Generated at Wed Jul 2 14:50:40 2025 by rpki-client