$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df3e3e27-d294-3b42-9804-ab3dfac5f480.roa File: df3e3e27-d294-3b42-9804-ab3dfac5f480.roa (raw, json) Hash identifier: hLJnK8ruuwcu99B53/2oJRtoEMYVKx4mDjBwLhKIJJU= Subject key identifier: B1:6A:4E:E5:B2:21:93:58:6E:5E:D1:87:7E:A3:57:89:8E:99:35:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6C298AB8A2CF202B0ED80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df3e3e27-d294-3b42-9804-ab3dfac5f480.roa Signing time: Fri 20 Jun 2025 09:28:30 +0000 ROA not before: Fri 20 Jun 2025 09:28:30 +0000 ROA not after: Thu 18 Sep 2025 09:28:30 +0000 asID: 22773 IP address blocks: 24.253.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:c2:98:ab:8a:2c:f2:02:b0:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:30 2025 GMT Not After : Sep 18 09:28:30 2025 GMT Subject: CN=50e774a2-0add-4593-80ea-f011b0b2222a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d0:84:fe:99:3c:b9:ad:19:45:99:ef:7e:17: 32:e2:93:67:8b:c3:ae:f6:a5:be:98:9c:ee:fe:de: b3:6a:97:90:70:98:58:33:6a:51:9c:66:ac:35:0a: 54:40:8f:31:1e:7d:90:fa:03:f7:ee:72:ae:e9:33: a4:aa:1a:5b:68:a3:b5:04:45:d1:73:8e:83:2d:d7: 5a:de:bb:18:bd:22:77:fc:50:fe:3f:b4:cf:23:bc: cb:8b:e0:f5:9a:60:38:70:d7:38:ac:5a:8a:18:33: 8d:08:f8:19:4a:db:12:4b:43:d3:8d:b6:75:4a:a0: 68:0e:19:6f:e8:d8:c3:8e:d0:35:2c:29:27:74:22: b0:7c:a2:03:1c:94:c5:42:d6:fe:ae:ae:73:9a:3a: 43:df:fb:e9:75:b2:2a:90:be:5d:c9:8f:1c:cf:2b: 49:51:c7:1b:eb:c1:ef:1f:09:00:59:b4:bf:a4:3f: b9:25:2d:d6:e7:e0:8e:97:4b:f2:75:dc:b8:90:d1: 7c:8a:ea:d0:59:80:31:8f:55:3b:e4:17:27:c6:01: cc:9b:5d:2e:a4:2d:fe:78:08:a6:c9:6c:f4:e6:a1: fb:fb:87:4c:3f:a3:6f:fc:a5:d0:6b:a0:e2:a9:21: f9:e3:31:c9:ca:d7:83:d3:8e:33:e7:71:a3:b7:88: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:4E:E5:B2:21:93:58:6E:5E:D1:87:7E:A3:57:89:8E:99:35:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df3e3e27-d294-3b42-9804-ab3dfac5f480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:80:e5:fe:77:ae:63:cc:ad:ed:25:4d:10:d7:00:e9:4a:93: 82:ba:76:a8:36:4c:a5:75:d0:95:f6:3b:62:13:96:0d:03:7b: 22:5d:ca:db:a7:6b:41:18:f7:05:bc:3f:f7:cc:23:57:c2:24: 91:9b:56:49:94:da:14:fe:c3:75:99:20:bf:d9:47:e2:df:64: fc:8a:a6:b3:9a:ce:8d:e4:3c:1a:e7:2c:fb:9f:a2:24:b7:af: 0d:aa:e8:39:7e:f5:27:f6:ca:ca:f5:fc:02:49:0c:70:2e:06: a9:be:ea:5d:23:b5:20:1b:0f:3a:34:3a:f1:14:71:ac:b8:9e: c5:0a:63:4d:d6:ac:db:cb:6b:02:52:8a:aa:fa:09:91:78:79: 75:69:1d:e3:0a:11:7c:f4:49:5e:68:1c:94:ef:5c:f8:b0:80: 09:6c:9f:71:d6:ea:c2:61:45:ac:56:09:40:86:b5:11:a5:31: de:e2:1b:45:11:40:00:82:47:a4:41:d9:01:68:68:08:7e:f6: 72:75:39:5c:f2:68:65:0f:8f:2f:e1:da:34:ce:4f:51:44:96: 10:31:a4:a4:30:f2:b2:83:4a:c6:df:23:20:21:d6:81:fd:24: c0:2e:be:b6:1e:2a:15:1c:17:93:74:6f:f5:d9:38:0e:32:c4: ad:84:d4:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApsKYq4os8gKw7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjgzMFoXDTI1MDkxODA5MjgzMFowLzEtMCsGA1UEAxMk NTBlNzc0YTItMGFkZC00NTkzLTgwZWEtZjAxMWIwYjIyMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NCE/pk8ua0ZRZnvfhcy4pNni8Ou9qW+mJzu /t6zapeQcJhYM2pRnGasNQpUQI8xHn2Q+gP37nKu6TOkqhpbaKO1BEXRc46DLdda 3rsYvSJ3/FD+P7TPI7zLi+D1mmA4cNc4rFqKGDONCPgZStsSS0PTjbZ1SqBoDhlv 6NjDjtA1LCkndCKwfKIDHJTFQtb+rq5zmjpD3/vpdbIqkL5dyY8czytJUccb68Hv HwkAWbS/pD+5JS3W5+COl0vyddy4kNF8iurQWYAxj1U75BcnxgHMm10upC3+eAim yWz05qH7+4dMP6Nv/KXQa6DiqSH54zHJyteD044z53Gjt4jhwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFqTuWyIZNYbl7Rh36jV4mOmTXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGYzZTNlMjctZDI5NC0z YjQyLTk4MDQtYWIzZGZhYzVmNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeA5f53rmPMre0lTRDXAOlKk4K6dqg2TKV10JX2O2ITlg0DeyJdytun a0EY9wW8P/fMI1fCJJGbVkmU2hT+w3WZIL/ZR+LfZPyKprOazo3kPBrnLPufoiS3 rw2q6Dl+9Sf2ysr1/AJJDHAuBqm+6l0jtSAbDzo0OvEUcay4nsUKY03WrNvLawJS iqr6CZF4eXVpHeMKEXz0SV5oHJTvXPiwgAlsn3HW6sJhRaxWCUCGtRGlMd7iG0UR QACCR6RB2QFoaAh+9nJ1OVzyaGUPjy/h2jTOT1FElhAxpKQw8rKDSsbfIyAh1oH9 JMAuvrYeKhUcF5N0b/XZOA4yxK2E1Bc= -----END CERTIFICATE-----Generated at Wed Jul 2 14:26:48 2025 by rpki-client