$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8301b2e2-7ea6-3657-91af-c55148f4e62f.roa File: 8301b2e2-7ea6-3657-91af-c55148f4e62f.roa (raw, json) Hash identifier: Kid6zld2lgl9gx57AzuLY+cKgcQy6+n+3CDI3voARpk= Subject key identifier: DD:ED:D3:E6:95:07:EC:EB:A5:AF:83:2E:8B:8A:16:2F:9F:A6:5C:F9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A119ACBB2237D72D086384900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8301b2e2-7ea6-3657-91af-c55148f4e62f.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 22773 IP address blocks: 24.249.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:cb:b2:23:7d:72:d0:86:38:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=965b61e7-b97c-4a6d-9620-031f887ad6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:45:d9:ef:00:ec:12:5f:b0:bd:3c:f5:ee:98: 2d:8c:b2:9f:cc:84:ca:bc:4e:0e:8a:f7:50:80:44: fc:85:80:f7:8b:20:19:ad:89:08:e9:84:bc:1a:7d: 54:c2:21:82:79:48:35:f7:c1:3f:e4:97:56:98:9d: 2c:63:85:7b:a8:fb:0f:37:9b:1a:1c:12:86:d7:b8: da:5a:47:89:97:61:77:87:4c:af:49:c8:17:ca:68: 9b:ed:52:fb:f3:c9:8a:d5:12:81:6d:49:c3:9f:19: a2:4c:b7:4f:0f:b6:72:7a:bb:86:46:71:a3:cc:76: e2:c2:60:54:af:fb:72:86:a3:1b:02:7c:1e:35:9a: c3:6f:17:21:ef:6c:0a:d3:d8:85:91:6c:44:1a:85: 91:44:7d:f8:6c:d7:cd:d0:4d:c6:f0:c8:94:6e:1f: 43:94:56:a2:a5:86:e2:59:0f:64:e5:22:62:59:83: 87:bc:be:c4:6f:1f:ad:34:1c:d1:9a:39:25:b6:e7: 5c:9d:bf:67:9c:a0:0b:fe:79:4c:9f:30:2a:65:cc: c0:71:43:cb:73:62:a1:22:67:c6:c7:9e:d0:c0:55: b0:3c:32:d2:9f:3d:f7:ec:3e:33:8d:35:af:46:f4: 08:5b:3c:cc:96:02:7c:39:07:d6:ec:bd:b3:13:70: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:ED:D3:E6:95:07:EC:EB:A5:AF:83:2E:8B:8A:16:2F:9F:A6:5C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8301b2e2-7ea6-3657-91af-c55148f4e62f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.249.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b4:38:4a:d0:93:73:ca:65:0f:5d:d0:0e:0d:2c:53:8c:5a: cb:4d:8c:2b:13:7e:70:de:fa:95:72:d3:23:1d:47:e5:59:b7: 91:ae:f6:95:46:9e:89:3d:2e:79:91:c3:a1:1f:f2:43:66:da: 64:4c:15:a0:9b:72:55:68:fa:7c:b9:3e:89:b6:03:1f:6b:a6: ab:7b:07:74:65:bd:87:b0:66:cc:de:ce:5f:ba:18:51:62:5d: f1:94:56:69:2a:1e:ea:75:ab:8d:93:21:0a:77:71:a9:20:0f: 82:49:bf:ac:df:19:a6:19:7d:91:3b:1b:d5:d9:94:7a:1e:47: 62:7b:dd:40:c3:6a:cd:03:de:e0:fa:68:6b:31:37:9c:5f:02: c7:ca:67:6d:2b:ca:9f:e5:50:5d:ab:6d:ad:17:b6:44:c6:2f: a3:1b:25:ff:cd:b9:8f:a8:18:81:ba:09:50:8d:9c:b8:b6:b4: fc:5e:cc:0e:a5:29:6c:f3:ef:e8:01:ce:53:68:ee:43:b8:42: f2:7e:32:20:e4:c1:13:3e:c3:9c:45:36:e6:88:a0:bd:e9:90: 44:a1:c3:b4:5d:0d:4c:8a:5f:9a:72:98:3c:1d:c8:61:f3:b3: 10:01:91:3c:93:a9:7e:bd:d7:df:4c:c9:ec:fa:bc:58:17:fb: 4d:bf:39:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmsuyI31y0IY4SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk OTY1YjYxZTctYjk3Yy00YTZkLTk2MjAtMDMxZjg4N2FkNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0XZ7wDsEl+wvTz17pgtjLKfzITKvE4OivdQ gET8hYD3iyAZrYkI6YS8Gn1UwiGCeUg198E/5JdWmJ0sY4V7qPsPN5saHBKG17ja WkeJl2F3h0yvScgXymib7VL788mK1RKBbUnDnxmiTLdPD7ZyeruGRnGjzHbiwmBU r/tyhqMbAnweNZrDbxch72wK09iFkWxEGoWRRH34bNfN0E3G8MiUbh9DlFaipYbi WQ9k5SJiWYOHvL7Ebx+tNBzRmjkltudcnb9nnKAL/nlMnzAqZczAcUPLc2KhImfG x57QwFWwPDLSnz337D4zjTWvRvQIWzzMlgJ8OQfW7L2zE3Dq9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3t0+aVB+zrpa+DLouKFi+fplz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODMwMWIyZTItN2VhNi0z NjU3LTkxYWYtYzU1MTQ4ZjRlNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK0OErQk3PKZQ9d0A4NLFOMWstNjCsTfnDe+pVy0yMdR+VZt5Gu9pVG nok9LnmRw6Ef8kNm2mRMFaCbclVo+ny5Pom2Ax9rpqt7B3RlvYewZszezl+6GFFi XfGUVmkqHup1q42TIQp3cakgD4JJv6zfGaYZfZE7G9XZlHoeR2J73UDDas0D3uD6 aGsxN5xfAsfKZ20ryp/lUF2rba0XtkTGL6MbJf/NuY+oGIG6CVCNnLi2tPxezA6l KWzz7+gBzlNo7kO4QvJ+MiDkwRM+w5xFNuaIoL3pkEShw7RdDUyKX5pymDwdyGHz sxABkTyTqX69199Myez6vFgX+02/OVY= -----END CERTIFICATE-----Generated at Wed Jun 18 06:00:38 2025 by rpki-client