$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8859e852-934b-3f20-8546-ee16462cfc89.roa File: 8859e852-934b-3f20-8546-ee16462cfc89.roa (raw, json) Hash identifier: 8mB8Hbihy+/J9enqINt0Y3G1bXAIdcSh0v/f7AGDzwU= Subject key identifier: 46:A8:25:46:60:C4:C4:EA:AE:9B:DE:C2:B3:A8:D7:9B:B5:50:E7:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6A51D85562BB2AEEB1E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8859e852-934b-3f20-8546-ee16462cfc89.roa Signing time: Fri 20 Jun 2025 09:28:16 +0000 ROA not before: Fri 20 Jun 2025 09:28:16 +0000 ROA not after: Thu 18 Sep 2025 09:28:16 +0000 asID: 22773 IP address blocks: 24.253.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:a5:1d:85:56:2b:b2:ae:eb:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:16 2025 GMT Not After : Sep 18 09:28:16 2025 GMT Subject: CN=71f6dc5c-9304-4d0e-8004-28fe0a48d375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:de:e0:4c:e2:7f:c9:cd:ae:f9:17:8d:55:cc: 29:12:7f:0f:bc:7d:c1:4f:a5:a1:b4:e9:0e:ee:1d: b5:9e:1d:13:46:e4:91:cb:fb:11:88:fa:06:57:a0: 1a:20:29:f1:aa:e4:1e:50:cc:12:e9:71:70:3e:06: f1:4e:27:92:85:e9:97:67:cf:9e:96:1d:ae:de:b4: 87:cd:cb:a1:88:ed:21:f9:5e:6d:3c:88:49:7b:63: ee:b5:cf:a8:8b:4d:a8:78:67:b6:5a:d6:b1:4c:0a: 30:d1:95:1a:8d:0a:11:47:17:6f:99:63:fa:b5:5d: 99:15:9e:d0:c1:c3:5b:9c:c7:8b:85:b5:78:14:cb: 56:8f:7d:8a:f2:bb:ba:b4:b8:01:ea:42:b7:c5:49: 76:90:b9:75:02:78:03:45:09:9a:21:19:e5:92:33: 63:68:9e:4e:84:3a:fc:2d:73:36:57:33:56:64:45: 8d:26:43:14:a4:d3:31:f7:5a:59:12:0b:45:22:b9: 1a:b9:8d:18:9c:37:b2:d5:2e:39:d8:e3:0f:0d:dc: 98:58:40:cb:e5:8f:28:c7:7c:0a:c3:14:80:d3:b9: 86:02:be:ea:ba:4b:b8:27:f7:1e:f2:ed:74:a8:ff: 49:14:62:d6:1d:72:71:b4:f8:dd:f5:ed:c9:18:a1: cb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A8:25:46:60:C4:C4:EA:AE:9B:DE:C2:B3:A8:D7:9B:B5:50:E7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8859e852-934b-3f20-8546-ee16462cfc89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:5c:37:0c:f1:b0:b7:2c:70:41:fc:74:8b:97:e5:42:56:6b: 2f:fa:94:07:71:4d:98:e7:9c:ef:74:20:d7:c6:1b:b3:29:d3: 56:de:1d:d5:d2:0f:c1:48:a6:a8:c1:8d:cd:7c:17:fd:46:5b: 66:ea:d1:a1:b7:b2:14:b8:ce:a9:61:39:d9:22:a5:19:59:e1: bf:c5:cb:d2:fd:8f:b7:a9:79:9a:e4:d4:fb:17:3c:f2:19:9d: 1b:8d:6d:d0:fa:1e:d0:cd:09:ec:8d:43:3a:c6:6a:20:34:31: 49:f0:85:a2:68:27:c3:1c:f8:c2:80:53:7a:9c:1a:a8:7f:de: 41:e7:1b:87:9d:09:fe:18:b2:0b:5f:2b:3a:23:74:87:3d:6e: fe:69:22:9c:19:8e:32:f4:1b:a2:ae:1c:43:06:85:12:7c:b8: 33:0a:26:09:53:e2:e2:08:17:2c:68:16:bc:e9:6a:31:b8:0a: 68:4c:02:1b:1d:9c:1e:d9:20:21:9b:5f:00:0b:aa:9a:ee:39: 79:6b:47:fa:0b:ce:81:1b:01:0d:6d:c4:4a:51:aa:0c:de:a4: 04:75:16:67:7c:9f:50:2d:35:73:71:88:41:3a:9c:e9:66:5e: da:1a:4b:72:2b:61:a5:3f:76:4c:48:80:89:2a:a8:6b:c8:8a: 37:e5:97:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApqUdhVYrsq7rHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjgxNloXDTI1MDkxODA5MjgxNlowLzEtMCsGA1UEAxMk NzFmNmRjNWMtOTMwNC00ZDBlLTgwMDQtMjhmZTBhNDhkMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt7gTOJ/yc2u+ReNVcwpEn8PvH3BT6WhtOkO 7h21nh0TRuSRy/sRiPoGV6AaICnxquQeUMwS6XFwPgbxTieShemXZ8+elh2u3rSH zcuhiO0h+V5tPIhJe2Putc+oi02oeGe2WtaxTAow0ZUajQoRRxdvmWP6tV2ZFZ7Q wcNbnMeLhbV4FMtWj32K8ru6tLgB6kK3xUl2kLl1AngDRQmaIRnlkjNjaJ5OhDr8 LXM2VzNWZEWNJkMUpNMx91pZEgtFIrkauY0YnDey1S452OMPDdyYWEDL5Y8ox3wK wxSA07mGAr7quku4J/ce8u10qP9JFGLWHXJxtPjd9e3JGKHL6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaoJUZgxMTqrpvewrOo15u1UOdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODg1OWU4NTItOTM0Yi0z ZjIwLTg1NDYtZWUxNjQ2MmNmYzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVcNwzxsLcscEH8dIuX5UJWay/6lAdxTZjnnO90INfGG7Mp01beHdXS D8FIpqjBjc18F/1GW2bq0aG3shS4zqlhOdkipRlZ4b/Fy9L9j7epeZrk1PsXPPIZ nRuNbdD6HtDNCeyNQzrGaiA0MUnwhaJoJ8Mc+MKAU3qcGqh/3kHnG4edCf4Ysgtf KzojdIc9bv5pIpwZjjL0G6KuHEMGhRJ8uDMKJglT4uIIFyxoFrzpajG4CmhMAhsd nB7ZICGbXwALqpruOXlrR/oLzoEbAQ1txEpRqgzepAR1Fmd8n1AtNXNxiEE6nOlm XtoaS3IrYaU/dkxIgIkqqGvIijfll/8= -----END CERTIFICATE-----Generated at Wed Jul 2 14:47:59 2025 by rpki-client