$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3623f743-67d7-3b15-b150-80fb609ea70d.roa File: 3623f743-67d7-3b15-b150-80fb609ea70d.roa (raw, json) Hash identifier: 5uZZVJuxWEOdVmCasxlhhdx3tfOe4o4V9sNNSZG+AWw= Subject key identifier: A4:88:32:80:AB:F3:F2:EC:3D:86:2C:89:66:B7:1D:CD:CC:A7:1B:00 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96360A7FDA75F54B5DEE3AC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3623f743-67d7-3b15-b150-80fb609ea70d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 24.253.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:0a:7f:da:75:f5:4b:5d:ee:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=38c11b72-0ac6-440d-bef9-6edeca72ca27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8f:8e:78:16:5e:88:71:24:c9:0a:d9:14:76: 52:5e:c6:a6:0d:07:b8:9b:7f:3c:df:a7:de:f0:8c: f9:a7:21:1d:3f:df:09:d9:e5:dd:e4:bf:3f:8e:c0: 36:ae:ea:2a:c8:68:a0:31:d5:c2:10:45:82:d9:f9: e5:49:37:15:63:ea:6e:0a:ab:d7:c3:0f:71:cc:6f: 8e:cf:08:82:79:ae:42:5d:58:73:90:53:09:ee:47: 92:9b:f6:52:a5:ee:71:70:7b:84:03:4e:3a:34:fc: fb:69:ef:48:b3:17:67:44:44:1a:cd:7e:46:d0:5f: fd:6b:07:38:3e:20:c2:dc:41:ae:25:6b:2f:3c:a3: 2a:0e:37:43:fd:69:3a:57:fd:4a:5d:31:1b:72:b7: 24:b8:e6:e0:c0:8f:35:e2:9b:2f:1c:f7:fb:79:ac: a7:14:c3:1b:d9:69:6e:44:b7:d3:7a:04:cd:a6:f6: 72:07:a8:ac:4b:cc:c9:1b:6c:2a:29:e8:42:37:e3: 55:a9:d6:97:a7:67:bb:6d:8c:ef:6e:06:82:b9:4e: 57:bd:20:1e:50:51:55:5a:c0:77:fd:fb:4d:60:c0: 32:16:1e:95:d3:4c:99:ac:dc:8b:ca:bb:fc:4f:d0: a1:a0:d0:84:52:1d:f5:d1:90:34:da:7d:84:0b:b6: fc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:88:32:80:AB:F3:F2:EC:3D:86:2C:89:66:B7:1D:CD:CC:A7:1B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3623f743-67d7-3b15-b150-80fb609ea70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7a:53:91:9a:d8:25:58:5c:34:60:da:80:1d:34:20:8c:b4: e2:0e:36:77:21:b5:72:8f:5d:48:e9:78:30:15:5a:f9:13:69: 73:af:84:75:30:f4:0b:9f:ca:54:88:a5:0b:10:d4:90:b9:7c: 64:8d:c0:1b:5b:b2:5c:3f:66:ca:9d:26:37:6c:c0:ea:ae:d3: cd:fd:01:74:26:df:56:a0:45:91:8c:b4:fd:73:8d:fd:20:49: 49:7a:6e:31:a3:7f:33:f0:48:22:b8:b6:fa:7f:3c:cd:cf:b0: 39:f0:6d:de:f2:85:f1:fb:5f:3d:1a:5c:d9:f0:82:66:e3:90: 09:dc:34:be:e3:d3:36:cd:e7:77:53:04:5b:cd:00:e3:07:df: 02:99:18:e7:ad:52:33:a7:a7:5a:90:5c:d9:e3:d3:0e:0b:92: 91:63:e2:29:aa:96:38:0b:33:95:3b:16:cf:81:18:4f:a4:1d: 3b:c7:08:dd:02:7d:6c:47:7d:5f:67:e1:e6:c6:f6:03:e7:a9: f0:46:23:4b:36:54:17:96:30:af:7a:73:9a:05:16:6e:d4:d0: ec:80:d1:f3:84:d5:29:16:a4:e9:6f:98:d6:f4:f1:14:44:3a: d0:48:a5:43:87:1b:42:50:35:7a:cc:2b:e7:8d:42:1e:ee:68: be:83:83:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNgp/2nX1S13uOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzhjMTFiNzItMGFjNi00NDBkLWJlZjktNmVkZWNhNzJjYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY+OeBZeiHEkyQrZFHZSXsamDQe4m38836fe 8Iz5pyEdP98J2eXd5L8/jsA2ruoqyGigMdXCEEWC2fnlSTcVY+puCqvXww9xzG+O zwiCea5CXVhzkFMJ7keSm/ZSpe5xcHuEA046NPz7ae9IsxdnREQazX5G0F/9awc4 PiDC3EGuJWsvPKMqDjdD/Wk6V/1KXTEbcrckuObgwI814psvHPf7eaynFMMb2Wlu RLfTegTNpvZyB6isS8zJG2wqKehCN+NVqdaXp2e7bYzvbgaCuU5XvSAeUFFVWsB3 /ftNYMAyFh6V00yZrNyLyrv8T9ChoNCEUh310ZA02n2EC7b86wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSIMoCr8/LsPYYsiWa3Hc3MpxsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzYyM2Y3NDMtNjdkNy0z YjE1LWIxNTAtODBmYjYwOWVhNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB6U5Ga2CVYXDRg2oAdNCCMtOIONnchtXKPXUjpeDAVWvkTaXOvhHUw 9AufylSIpQsQ1JC5fGSNwBtbslw/ZsqdJjdswOqu0839AXQm31agRZGMtP1zjf0g SUl6bjGjfzPwSCK4tvp/PM3PsDnwbd7yhfH7Xz0aXNnwgmbjkAncNL7j0zbN53dT BFvNAOMH3wKZGOetUjOnp1qQXNnj0w4LkpFj4imqljgLM5U7Fs+BGE+kHTvHCN0C fWxHfV9n4ebG9gPnqfBGI0s2VBeWMK96c5oFFm7U0OyA0fOE1SkWpOlvmNb08RRE OtBIpUOHG0JQNXrMK+eNQh7uaL6Dg94= -----END CERTIFICATE-----Generated at Thu Aug 7 05:15:37 2025 by rpki-client