$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa File: aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa (raw, json) Hash identifier: 8aObCtHf3GK4GlWH5uXyM3ntoDp/iQgWXL1YB3dsOXs= Subject key identifier: 5E:49:80:FA:A3:98:26:90:E5:45:54:EA:85:5E:AD:8D:01:92:D1:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AC710EA1C1B93909D2F8F7000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 65001 IP address blocks: 24.249.215.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:10:ea:1c:1b:93:90:9d:2f:8f:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=9761e1b8-a088-4961-b405-735d201ac014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:2d:4a:65:4b:f3:3c:02:d0:ec:61:09:ad: 1a:27:17:48:4e:b7:7b:87:b0:1d:26:54:13:c6:64: 8f:b4:31:35:e3:d6:ef:40:44:7f:dd:97:a6:d1:73: 55:7d:ae:e6:bd:28:6b:26:a6:97:7d:08:69:a0:0a: 06:2e:cb:0f:e7:71:1b:de:e9:3e:2d:d9:bb:a2:4f: cf:18:4b:97:0d:93:58:2f:b6:46:2b:74:e9:0a:b9: b8:d8:39:73:08:06:0a:5d:ac:aa:90:a1:43:e3:f0: 0b:fa:40:74:82:b6:1a:9b:ea:4e:df:48:c5:20:b3: e7:9d:0b:8a:11:bd:b7:49:c0:23:5e:ce:e7:3d:be: 21:1c:e2:0c:69:41:56:e4:3f:38:ab:83:9d:b9:db: cc:7d:a7:ac:15:65:2f:81:e8:12:e3:7b:70:eb:5a: 91:a5:62:65:5e:2e:d1:dd:45:c7:84:c7:3a:80:b9: 27:53:5f:44:98:6b:13:d8:59:18:9a:99:42:d3:a3: 20:6f:56:51:a0:be:ad:43:c2:be:05:54:c0:a8:33: c4:79:5e:87:16:63:17:b2:e2:b8:f0:e8:6a:3c:ab: a8:93:7f:2a:23:3e:0f:33:c2:ef:60:ba:1f:18:df: 78:52:06:c2:b9:d8:9a:d8:7c:fe:21:2c:1f:3a:2c: 31:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:49:80:FA:A3:98:26:90:E5:45:54:EA:85:5E:AD:8D:01:92:D1:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.249.215.128/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e8:5b:5c:45:e9:af:a4:13:f5:67:9d:a6:df:49:4f:42:27: 36:9a:5f:3a:c4:35:bc:57:8b:61:eb:33:00:ce:d6:6e:b6:f1: 28:f7:a6:2b:54:ca:30:15:9e:34:49:b0:0b:45:00:b4:3a:ac: 03:ad:d6:50:9c:cc:c4:dd:c6:39:d9:f1:81:6f:f0:3c:03:33: f7:a0:1c:34:be:84:ab:4c:2e:c7:d9:26:b0:1f:df:7f:0a:65: f9:42:e5:28:38:1d:f4:74:5f:51:f7:39:51:8b:7d:45:10:ca: 55:33:18:d9:c6:00:2b:09:0b:53:5d:36:f5:1f:18:2f:d7:37: f2:c2:ec:de:44:2c:21:c6:90:33:6b:59:ff:1f:52:57:a2:36: c4:99:f3:e9:f8:83:3c:24:21:52:4e:4d:86:8d:94:96:2e:20: 9f:a4:29:f9:10:6a:65:1a:3e:f9:65:6c:12:f5:ba:f8:cf:c4: ec:ff:42:23:87:8d:28:92:64:74:e9:57:70:4c:fb:bc:9a:d3: 1f:ff:9c:51:fc:48:60:54:63:7f:5f:de:5d:93:b7:db:5e:b5: f9:c5:48:fc:21:1f:7f:9a:76:91:46:ce:a7:3b:0c:8f:6e:a0: 41:b3:58:3e:b9:a7:f6:65:26:3d:3b:e8:0c:84:ac:a2:92:91: 53:a1:62:75 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErHEOocG5OQnS+PcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk OTc2MWUxYjgtYTA4OC00OTYxLWI0MDUtNzM1ZDIwMWFjMDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOEtSmVL8zwC0OxhCa0aJxdITrd7h7AdJlQT xmSPtDE149bvQER/3Zem0XNVfa7mvShrJqaXfQhpoAoGLssP53Eb3uk+Ldm7ok/P GEuXDZNYL7ZGK3TpCrm42DlzCAYKXayqkKFD4/AL+kB0grYam+pO30jFILPnnQuK Eb23ScAjXs7nPb4hHOIMaUFW5D84q4OdudvMfaesFWUvgegS43tw61qRpWJlXi7R 3UXHhMc6gLknU19EmGsT2FkYmplC06Mgb1ZRoL6tQ8K+BVTAqDPEeV6HFmMXsuK4 8OhqPKuok38qIz4PM8LvYLofGN94UgbCudia2Hz+ISwfOiwxgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF5JgPqjmCaQ5UVU6oVerY0BktH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWE2OTRjN2EtOGZlYS0z M2FjLWE1NjktZTZmMjJjZDZlZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGGPnXgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAG6FtcRemvpBP1Z52m30lPQic2ml86xDW8V4th6zMAztZutvEo96Yr VMowFZ40SbALRQC0OqwDrdZQnMzE3cY52fGBb/A8AzP3oBw0voSrTC7H2SawH99/ CmX5QuUoOB30dF9R9zlRi31FEMpVMxjZxgArCQtTXTb1Hxgv1zfywuzeRCwhxpAz a1n/H1JXojbEmfPp+IM8JCFSTk2GjZSWLiCfpCn5EGplGj75ZWwS9br4z8Ts/0Ij h40okmR06VdwTPu8mtMf/5xR/EhgVGN/X95dk7fbXrX5xUj8IR9/mnaRRs6nOwyP bqBBs1g+uaf2ZSY9O+gMhKyikpFToWJ1 -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:59 2025 by rpki-client