$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de859e75-bd80-32ed-8c43-372e5cd5c307.roa File: de859e75-bd80-32ed-8c43-372e5cd5c307.roa (raw, json) Hash identifier: sprkSzgwAqW6WbQDWoQBdlmF4mh3d2QODEJwO0RxhSc= Subject key identifier: D3:28:87:75:FD:C8:AA:85:87:90:CA:16:83:4C:E7:54:19:A7:32:B9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0F8BC7BCF81570043E2F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de859e75-bd80-32ed-8c43-372e5cd5c307.roa Signing time: Wed 18 Jun 2025 18:00:35 +0000 ROA not before: Wed 18 Jun 2025 18:00:35 +0000 ROA not after: Tue 16 Sep 2025 18:00:35 +0000 asID: 22773 IP address blocks: 24.251.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:8b:c7:bc:f8:15:70:04:3e:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:00:35 2025 GMT Not After : Sep 16 18:00:35 2025 GMT Subject: CN=fdca75ea-e680-43aa-850a-43d7ca09ac20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:3f:09:08:db:9f:d6:94:f8:62:96:81:96: 6b:b7:5f:31:4b:2c:45:76:f6:71:a0:a9:c7:c8:48: 70:cc:f9:1e:c8:d6:c5:da:3d:46:cf:d1:59:5f:63: 9f:76:0d:a2:29:e3:72:22:18:44:54:ad:28:c3:40: 4f:6c:41:ed:ac:ed:bd:ed:b4:54:28:1a:ff:54:a5: f3:08:b2:0a:58:4e:d5:e7:3e:ef:00:d2:6a:80:cf: 2f:77:a6:84:53:c9:83:b5:51:c0:24:e4:e0:b9:a4: a7:a5:e4:8e:07:b7:3e:b5:08:f2:f1:ea:30:6d:91: 42:c4:89:51:59:ed:94:b3:0f:50:1d:ee:30:50:bc: a5:12:d4:42:71:c6:d9:7c:10:26:24:cd:f1:62:60: c5:66:42:6b:01:30:71:74:b1:1f:2a:5d:60:35:80: 7e:1b:79:12:71:f1:77:d9:49:84:11:21:01:85:53: 5c:9e:34:f9:34:d4:ff:d8:d8:67:c0:98:08:92:ca: 19:bb:7e:5e:c2:a6:8f:f9:ae:73:09:b8:26:c7:6d: 10:bc:a8:d6:47:fa:ab:f3:b5:fd:d2:a4:d5:bf:b4: 05:de:07:c8:9f:47:dc:e0:7b:6d:b0:31:b5:eb:fb: fb:0c:10:b0:6b:ee:92:4b:0f:3d:d4:e2:81:a4:96: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:28:87:75:FD:C8:AA:85:87:90:CA:16:83:4C:E7:54:19:A7:32:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de859e75-bd80-32ed-8c43-372e5cd5c307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d5:a9:18:3d:9e:a7:2e:3c:91:9b:90:55:f4:d9:41:b7:e9: 3c:4d:55:b0:e2:9c:4f:62:d0:03:3f:fd:b2:44:c8:e4:57:e2: cf:66:d7:46:bc:48:80:33:76:2e:4e:4e:38:bc:04:14:b3:bd: 20:7c:ca:d9:1d:e1:df:90:0a:9c:c7:6d:f2:b2:47:fe:fd:b8: a8:2b:b2:20:89:b7:0c:df:fb:4d:03:ba:f1:e2:9d:e9:7a:df: 9a:32:b3:93:70:6d:e6:e0:8c:af:83:e5:67:11:9c:9c:5d:87: b0:36:43:b0:7d:d4:0f:3c:55:0f:7e:35:9d:15:02:f8:0f:6e: 84:9d:9a:11:71:ab:47:2f:9f:7c:5d:46:f9:f5:b6:b7:76:c1: 7d:46:d5:4f:0a:83:d5:69:b8:ae:d2:91:0d:57:15:07:9e:1d: 57:5a:f4:6c:6d:b4:e4:cc:9d:6e:01:35:e0:00:f4:98:71:19: 41:44:71:e4:a7:f9:88:e5:ac:9a:34:30:c1:28:08:91:2f:84: 39:0e:96:a9:bd:c7:31:2a:b3:57:5d:7d:be:98:70:1a:3f:2a: 3f:e4:25:30:73:78:5b:a2:e0:cf:5d:5c:77:90:15:88:de:de: 6c:f6:51:2e:c8:44:ac:28:cf:08:af:fb:d5:68:3a:94:ef:ba: c6:ce:8c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D4vHvPgVcAQ+L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDAzNVoXDTI1MDkxNjE4MDAzNVowLzEtMCsGA1UEAxMk ZmRjYTc1ZWEtZTY4MC00M2FhLTg1MGEtNDNkN2NhMDlhYzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfA/CQjbn9aU+GKWgZZrt18xSyxFdvZxoKnH yEhwzPkeyNbF2j1Gz9FZX2Ofdg2iKeNyIhhEVK0ow0BPbEHtrO297bRUKBr/VKXz CLIKWE7V5z7vANJqgM8vd6aEU8mDtVHAJOTguaSnpeSOB7c+tQjy8eowbZFCxIlR We2Usw9QHe4wULylEtRCccbZfBAmJM3xYmDFZkJrATBxdLEfKl1gNYB+G3kScfF3 2UmEESEBhVNcnjT5NNT/2NhnwJgIksoZu35ewqaP+a5zCbgmx20QvKjWR/qr87X9 0qTVv7QF3gfIn0fc4HttsDG16/v7DBCwa+6SSw891OKBpJZE2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMoh3X9yKqFh5DKFoNM51QZpzK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGU4NTllNzUtYmQ4MC0z MmVkLThjNDMtMzcyZTVjZDVjMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPuJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrVqRg9nqcuPJGbkFX02UG36TxNVbDinE9i0AM//bJEyORX4s9m10a8 SIAzdi5OTji8BBSzvSB8ytkd4d+QCpzHbfKyR/79uKgrsiCJtwzf+00DuvHinel6 35oys5NwbebgjK+D5WcRnJxdh7A2Q7B91A88VQ9+NZ0VAvgPboSdmhFxq0cvn3xd Rvn1trd2wX1G1U8Kg9VpuK7SkQ1XFQeeHVda9GxttOTMnW4BNeAA9JhxGUFEceSn +YjlrJo0MMEoCJEvhDkOlqm9xzEqs1ddfb6YcBo/Kj/kJTBzeFui4M9dXHeQFYje 3mz2US7IRKwozwiv+9VoOpTvusbOjEA= -----END CERTIFICATE-----Generated at Wed Jul 2 15:09:01 2025 by rpki-client