$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31ee88bc-f153-3fa8-b9b6-7fe23e1494d8.roa File: 31ee88bc-f153-3fa8-b9b6-7fe23e1494d8.roa (raw, json) Hash identifier: ouFKLX4xtkTY/O+MH5z9yzM0Z7YPTEYXNr1j8/P1Hx8= Subject key identifier: C9:B3:F2:28:DD:92:08:E4:7A:D7:57:FD:03:0A:9F:26:FB:FE:9F:60 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584903989FA3E5FCC586F3BAB440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31ee88bc-f153-3fa8-b9b6-7fe23e1494d8.roa Signing time: Wed 26 Feb 2025 19:48:46 +0000 ROA not before: Wed 26 Feb 2025 19:48:46 +0000 ROA not after: Tue 27 May 2025 18:48:46 +0000 asID: 22773 IP address blocks: 24.248.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:03:98:9f:a3:e5:fc:c5:86:f3:ba:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 26 19:48:46 2025 GMT Not After : May 27 18:48:46 2025 GMT Subject: CN=6ec411bc-f930-4278-8483-c73bdf1c9237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:33:ac:c5:d5:10:39:e7:43:9c:85:c0:34: 56:fb:6a:54:39:89:60:54:d9:da:aa:0c:90:52:ba: c6:ca:40:75:79:92:2c:87:55:73:7a:5a:7d:ad:71: 89:05:c0:d0:80:91:03:17:f6:ba:45:5b:f0:6a:d1: f5:8b:17:79:03:b3:d0:8a:bd:78:9a:c6:b1:e5:c9: b4:c8:a2:e9:25:3f:55:04:2b:c0:ef:ea:df:41:d8: e9:e5:78:40:11:4c:fe:56:7b:13:4a:62:c6:4b:47: 07:8d:13:5b:53:95:10:31:6d:86:43:75:19:fd:bb: 0c:50:50:e4:f8:6f:96:b1:ee:97:ba:d6:b0:f3:c4: 66:d7:86:b0:c0:db:90:c3:a7:d2:bc:6b:b8:7d:d7: 9e:a8:3c:44:03:e8:81:70:f1:7f:45:46:7b:9f:71: 2b:3d:7c:f5:e6:3a:a0:b1:28:35:3a:24:7f:72:0e: be:22:f9:d8:55:ed:eb:a0:d6:2e:69:77:0c:4b:65: d7:ef:ad:60:77:b0:8d:46:77:27:65:d5:af:ce:7a: 8e:55:e4:87:58:fe:51:3e:7a:ef:e3:30:b0:05:dd: e0:c4:eb:a9:c3:51:2c:74:19:a3:27:90:18:08:6c: 31:a7:c4:3d:ed:76:ab:51:63:83:3d:48:81:bb:0f: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B3:F2:28:DD:92:08:E4:7A:D7:57:FD:03:0A:9F:26:FB:FE:9F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31ee88bc-f153-3fa8-b9b6-7fe23e1494d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.248.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:37:af:55:e6:c2:81:cc:a8:bf:67:58:2b:9b:41:f7:0b:93: 07:0e:76:45:ef:09:19:e3:e5:ff:65:66:4d:fd:8d:83:1f:33: 84:b5:67:79:c9:09:1f:37:c5:9e:d8:67:5e:ba:38:4a:bd:ec: 8c:fd:d3:08:cd:68:c4:c1:f3:83:a1:e8:b5:ca:b1:fa:a0:76: 0b:a6:60:ad:c6:28:29:34:ce:49:e1:08:3d:fe:88:63:5a:0f: e7:9a:cd:bb:7a:b0:3a:ce:34:94:f5:e0:5d:54:fd:22:0c:52: 8f:2e:e4:75:2d:0c:cf:1b:2f:e4:0d:05:de:71:d7:30:ea:d3: 4f:8c:3d:dd:f2:5c:c9:3f:c0:7b:8d:21:e3:29:4f:b5:90:59: 23:e9:65:c9:91:d8:1c:d6:ca:da:a4:b7:4f:4c:36:37:51:6a: cc:c1:89:c1:62:28:cc:9c:7b:25:00:62:1a:92:6e:64:44:47: 74:82:01:b1:f1:8b:a2:c6:f5:47:4e:30:2d:99:d1:b4:1a:10: 3b:46:18:5c:34:e2:a5:bf:d9:be:16:51:a6:19:10:8d:b2:2a: b5:77:77:ad:0a:64:cd:a0:d6:32:7a:9e:8a:d9:3e:c7:e8:3c: b9:fa:d9:bb:43:5a:85:14:2e:30:e0:7a:35:1d:4a:36:6b:e2: 05:12:79:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkDmJ+j5fzFhvO6tEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIyNjE5NDg0NloXDTI1MDUyNzE4NDg0NlowLzEtMCsGA1UEAxMk NmVjNDExYmMtZjkzMC00Mjc4LTg0ODMtYzczYmRmMWM5MjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIozrMXVEDnnQ5yFwDRW+2pUOYlgVNnaqgyQ UrrGykB1eZIsh1Vzelp9rXGJBcDQgJEDF/a6RVvwatH1ixd5A7PQir14msax5cm0 yKLpJT9VBCvA7+rfQdjp5XhAEUz+VnsTSmLGS0cHjRNbU5UQMW2GQ3UZ/bsMUFDk +G+Wse6Xutaw88Rm14awwNuQw6fSvGu4fdeeqDxEA+iBcPF/RUZ7n3ErPXz15jqg sSg1OiR/cg6+IvnYVe3roNYuaXcMS2XX761gd7CNRncnZdWvznqOVeSHWP5RPnrv 4zCwBd3gxOupw1EsdBmjJ5AYCGwxp8Q97XarUWODPUiBuw9NswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmz8ijdkgjketdX/QMKnyb7/p9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzFlZTg4YmMtZjE1My0z ZmE4LWI5YjYtN2ZlMjNlMTQ5NGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI83r1XmwoHMqL9nWCubQfcLkwcOdkXvCRnj5f9lZk39jYMfM4S1Z3nJ CR83xZ7YZ166OEq97Iz90wjNaMTB84Oh6LXKsfqgdgumYK3GKCk0zknhCD3+iGNa D+eazbt6sDrONJT14F1U/SIMUo8u5HUtDM8bL+QNBd5x1zDq00+MPd3yXMk/wHuN IeMpT7WQWSPpZcmR2BzWytqkt09MNjdRaszBicFiKMyceyUAYhqSbmRER3SCAbHx i6LG9UdOMC2Z0bQaEDtGGFw04qW/2b4WUaYZEI2yKrV3d60KZM2g1jJ6norZPsfo PLn62btDWoUULjDgejUdSjZr4gUSea0= -----END CERTIFICATE-----Generated at Sat Apr 26 23:00:22 2025 by rpki-client