$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/510b815e-7b4b-372d-9c3e-1ee210e03ada.roa File: 510b815e-7b4b-372d-9c3e-1ee210e03ada.roa (raw, json) Hash identifier: kOhOUl7hKyh/5fyNtltp2vRy5GJkTbRrdMWolPjaiqc= Subject key identifier: 22:ED:F0:5A:85:8A:E2:1E:6D:5E:3A:D5:B3:CE:63:10:A4:03:F0:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A68BEFEBBE3492BB888CC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/510b815e-7b4b-372d-9c3e-1ee210e03ada.roa Signing time: Fri 20 Jun 2025 09:28:04 +0000 ROA not before: Fri 20 Jun 2025 09:28:04 +0000 ROA not after: Thu 18 Sep 2025 09:28:04 +0000 asID: 64512 IP address blocks: 24.120.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:8b:ef:eb:be:34:92:bb:88:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:04 2025 GMT Not After : Sep 18 09:28:04 2025 GMT Subject: CN=31bf4dab-f869-4272-98ab-713bfc3c85cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d4:79:bc:29:11:4f:5e:1b:cc:65:3e:30:8d: 50:5a:78:29:0c:b7:79:e1:83:c0:e2:e5:6f:c2:8c: f1:e4:e0:3f:61:54:d4:00:db:0e:eb:be:4f:9b:75: 9d:32:19:55:74:2e:66:96:4e:52:07:28:96:b3:0a: cc:01:75:0b:ce:a6:96:0d:8c:12:4b:40:e1:2e:93: ea:e2:b1:58:9b:29:86:2e:40:cb:00:91:65:a2:db: 7a:15:09:83:a4:f7:1a:2f:6b:f6:62:03:ed:80:d1: 24:b6:3a:c6:a9:ce:70:f7:6e:e7:3a:b7:5e:65:91: 19:f6:f3:36:9e:b6:fd:72:c6:3a:ff:68:13:e8:83: 10:3e:ff:da:5f:6b:c9:f9:c2:19:2d:91:1c:e2:bb: 2a:8b:3e:4d:32:0c:61:32:ac:09:a8:67:9a:10:bc: 51:8e:c0:67:20:dd:eb:5c:f9:15:87:21:3f:ab:ee: 3f:52:8c:b2:6a:13:1a:c8:61:0f:4d:d4:ca:33:1e: eb:b2:de:db:ca:d6:5c:5f:ff:45:12:5f:08:dc:f0: 45:83:6f:5f:89:2e:9b:5b:18:e7:58:e2:f5:cc:0e: 3a:fe:e7:34:8b:c3:97:25:f2:ce:8f:83:2c:ec:49: f1:16:32:50:2b:76:cd:ae:1e:c5:9b:0a:8d:ed:4c: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:ED:F0:5A:85:8A:E2:1E:6D:5E:3A:D5:B3:CE:63:10:A4:03:F0:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/510b815e-7b4b-372d-9c3e-1ee210e03ada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.120.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:89:8c:f9:74:af:47:a9:98:e8:cb:59:85:54:2c:c9:cf:9b: 13:fd:86:fc:3c:87:c5:e8:3e:13:b5:44:9e:47:4d:e2:f4:6f: 2e:c2:ab:30:55:24:49:e9:63:07:d4:5f:c4:97:a1:1e:0c:5e: 13:f7:7b:a7:56:3f:11:bb:05:85:13:1f:ba:27:05:ae:7d:97: c5:ce:4c:60:df:e8:e2:df:1c:91:94:03:55:d4:dc:36:df:c3: 44:a4:3d:45:26:88:13:c9:c2:55:fc:98:2e:4d:d9:41:b5:c7: 13:d4:e5:69:6d:78:43:4d:d6:2c:b8:5a:ab:2d:54:f9:e5:7b: 70:37:65:5b:f8:9b:91:8f:d6:52:9a:33:e3:68:82:8c:e7:0a: a0:67:1a:ce:0d:e1:c7:99:20:27:4e:29:0e:af:56:b6:fa:bd: 56:50:8a:8e:c4:ff:69:f9:76:fd:38:4a:3f:1c:3b:87:05:28: 28:d8:20:d8:b6:eb:ef:79:ee:69:0d:85:36:4b:a5:a8:5f:b4: 46:9e:12:0e:5b:e0:b4:0d:cd:d1:dd:8b:4e:72:8f:1d:11:4b: 05:70:ef:57:1d:f3:03:ea:5f:f7:38:11:6e:65:8b:9e:6b:e0: 91:84:a5:ce:03:f8:c8:a3:1a:d7:90:66:65:9d:69:c8:89:07: cd:e1:62:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApovv6740kruIjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjgwNFoXDTI1MDkxODA5MjgwNFowLzEtMCsGA1UEAxMk MzFiZjRkYWItZjg2OS00MjcyLTk4YWItNzEzYmZjM2M4NWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitR5vCkRT14bzGU+MI1QWngpDLd54YPA4uVv wozx5OA/YVTUANsO675Pm3WdMhlVdC5mlk5SByiWswrMAXULzqaWDYwSS0DhLpPq 4rFYmymGLkDLAJFlott6FQmDpPcaL2v2YgPtgNEktjrGqc5w927nOrdeZZEZ9vM2 nrb9csY6/2gT6IMQPv/aX2vJ+cIZLZEc4rsqiz5NMgxhMqwJqGeaELxRjsBnIN3r XPkVhyE/q+4/UoyyahMayGEPTdTKMx7rst7bytZcX/9FEl8I3PBFg29fiS6bWxjn WOL1zA46/uc0i8OXJfLOj4Ms7EnxFjJQK3bNrh7FmwqN7UxRBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLt8FqFiuIebV461bPOYxCkA/BFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTEwYjgxNWUtN2I0Yi0z NzJkLTljM2UtMWVlMjEwZTAzYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaJjPl0r0epmOjLWYVULMnPmxP9hvw8h8XoPhO1RJ5HTeL0by7CqzBV JEnpYwfUX8SXoR4MXhP3e6dWPxG7BYUTH7onBa59l8XOTGDf6OLfHJGUA1XU3Dbf w0SkPUUmiBPJwlX8mC5N2UG1xxPU5WlteENN1iy4WqstVPnle3A3ZVv4m5GP1lKa M+NogoznCqBnGs4N4ceZICdOKQ6vVrb6vVZQio7E/2n5dv04Sj8cO4cFKCjYINi2 6+957mkNhTZLpahftEaeEg5b4LQNzdHdi05yjx0RSwVw71cd8wPqX/c4EW5li55r 4JGEpc4D+MijGteQZmWdaciJB83hYp8= -----END CERTIFICATE-----Generated at Wed Jun 25 11:16:11 2025 by rpki-client