$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21cd0f86-82a4-38a3-880c-6e017c15bd69.roa File: 21cd0f86-82a4-38a3-880c-6e017c15bd69.roa (raw, json) Hash identifier: yj6LrzmbbfF31rnkej+KjlwtsLTrLv8iOHtRBcLLPbY= Subject key identifier: 62:E8:6B:D6:7F:46:9A:0B:CD:BC:55:61:67:C8:33:69:9F:4E:68:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA5840D81D7FBCABEA9B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21cd0f86-82a4-38a3-880c-6e017c15bd69.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 184.191.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:58:40:d8:1d:7f:bc:ab:ea:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=d6b45f1e-877a-461f-9216-596729818c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c6:0a:d2:8c:dc:14:52:a6:0b:f9:ce:b8:9e: fe:c5:c9:c8:b7:33:0a:03:02:22:a4:8d:5e:c5:7e: 3a:81:30:3c:3d:4c:3d:76:2a:77:08:2f:00:3c:15: 93:24:8c:c0:f6:82:2f:b9:82:2f:db:f1:22:a4:69: 23:0a:4b:02:0a:b2:07:65:70:4b:9d:1b:9f:c5:19: 4b:2a:58:3a:2f:6d:8d:88:5b:98:6f:3e:e5:ce:57: 45:c6:0e:8f:10:8a:5f:eb:83:5a:12:0a:42:3a:eb: 82:b0:b7:6f:36:84:f0:bc:0c:9f:16:81:d9:1e:95: 06:1d:53:74:b8:b3:ee:83:d5:f9:6e:f3:36:25:56: 0a:5a:a4:f5:11:b3:f8:00:ce:54:07:0b:99:ce:5d: 8c:a3:e4:aa:4e:32:dd:dc:68:53:68:3b:52:64:83: 45:3f:3d:f5:c9:6a:ee:79:d0:40:dc:f0:cc:e8:c2: f9:2d:17:39:04:33:9d:19:44:05:b6:b9:12:5e:d5: fb:e3:47:57:c8:82:bd:72:ec:fa:51:22:2f:cb:62: 9a:79:ec:7e:e4:c9:cd:a3:86:13:06:a8:ed:17:8c: 46:69:b4:8c:17:71:38:b2:cb:e7:5f:19:18:f0:83: 45:44:10:79:84:99:a7:5c:62:08:dd:11:fb:9d:5c: eb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E8:6B:D6:7F:46:9A:0B:CD:BC:55:61:67:C8:33:69:9F:4E:68:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21cd0f86-82a4-38a3-880c-6e017c15bd69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 184.191.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:03:2e:cc:79:22:5b:86:58:5e:f5:40:96:1d:4b:50:9d:7a: 78:6d:89:db:ee:13:b6:8e:05:b0:b1:ac:1a:8f:98:cc:2f:9e: 24:1d:51:0b:14:d9:a5:4d:b0:55:3b:b6:4d:cc:0b:4e:09:bd: 65:a8:22:25:3a:fb:a7:f8:03:c5:03:b4:65:63:e9:cb:c2:6b: 2f:dc:1f:0d:66:cc:20:c1:85:a7:06:e6:46:5b:08:0e:b6:08: ef:5b:b5:6e:86:ac:38:de:90:9b:f5:51:e0:89:77:c5:07:9f: aa:f3:40:7e:d7:0f:bc:71:c3:52:f2:19:f6:5a:ae:f7:f7:e7: 74:9b:02:48:2f:d9:a5:5d:a0:cb:37:ab:61:23:54:42:58:d9: 4d:3a:9f:7e:6f:44:b0:99:7d:ab:5c:07:58:67:2a:15:8b:c2: 73:cc:97:f4:66:db:f4:37:6d:26:ab:ef:ee:2e:c7:e5:ff:ef: e8:5c:49:13:2c:cb:d4:1d:c2:c0:e9:d3:53:95:e5:4d:f9:d3: f7:10:9c:5e:48:ce:22:6a:20:c2:ea:42:ba:11:53:8b:e7:bf: 62:47:c7:01:bb:df:80:49:fe:0f:48:ce:b3:65:c3:2e:3a:4f: 41:08:2d:d9:47:c7:96:30:d6:be:58:56:14:d0:25:33:ea:95: 70:87:e7:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6lhA2B1/vKvqm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZDZiNDVmMWUtODc3YS00NjFmLTkyMTYtNTk2NzI5ODE4YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMYK0ozcFFKmC/nOuJ7+xcnItzMKAwIipI1e xX46gTA8PUw9dip3CC8APBWTJIzA9oIvuYIv2/EipGkjCksCCrIHZXBLnRufxRlL Klg6L22NiFuYbz7lzldFxg6PEIpf64NaEgpCOuuCsLdvNoTwvAyfFoHZHpUGHVN0 uLPug9X5bvM2JVYKWqT1EbP4AM5UBwuZzl2Mo+SqTjLd3GhTaDtSZINFPz31yWru edBA3PDM6ML5LRc5BDOdGUQFtrkSXtX740dXyIK9cuz6USIvy2Kaeex+5MnNo4YT BqjtF4xGabSMF3E4ssvnXxkY8INFRBB5hJmnXGII3RH7nVzrBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLoa9Z/RpoLzbxVYWfIM2mfTmhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFjZDBmODYtODJhNC0z OGEzLTg4MGMtNmUwMTdjMTViZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuL8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0DLsx5IluGWF71QJYdS1CdenhtidvuE7aOBbCxrBqPmMwvniQdUQsU 2aVNsFU7tk3MC04JvWWoIiU6+6f4A8UDtGVj6cvCay/cHw1mzCDBhacG5kZbCA62 CO9btW6GrDjekJv1UeCJd8UHn6rzQH7XD7xxw1LyGfZarvf353SbAkgv2aVdoMs3 q2EjVEJY2U06n35vRLCZfatcB1hnKhWLwnPMl/Rm2/Q3bSar7+4ux+X/7+hcSRMs y9QdwsDp01OV5U350/cQnF5IziJqIMLqQroRU4vnv2JHxwG734BJ/g9IzrNlwy46 T0EILdlHx5Yw1r5YVhTQJTPqlXCH558= -----END CERTIFICATE-----Generated at Tue Jun 17 15:04:58 2025 by rpki-client