$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b698cc61-9f83-32ba-a654-c53c9250bdd3.roa File: b698cc61-9f83-32ba-a654-c53c9250bdd3.roa (raw, json) Hash identifier: enjmas1N8FEydYa21Yqbtdw4aryL69FAWgADOiKTzzU= Subject key identifier: E4:CB:B5:4B:82:22:0F:A0:33:A9:83:97:A1:4D:6F:8D:FE:0D:F6:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636081DF84A3D4D6BF7E480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b698cc61-9f83-32ba-a654-c53c9250bdd3.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 24.250.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:08:1d:f8:4a:3d:4d:6b:f7:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=0593539a-37f2-4fb9-8063-91ddd0c7c5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:55:71:4d:6e:5f:58:dc:7d:34:43:54:d8:26: 8d:c1:17:e9:35:11:f3:44:86:80:ea:b5:89:5a:95: 59:e1:7a:a1:c1:1f:2b:38:ad:47:f8:af:f8:fe:ed: 22:1e:da:0e:07:0f:8f:31:4a:e3:78:eb:8e:50:d1: 1a:db:cc:94:be:0d:46:07:26:2f:9b:14:52:d3:73: 5a:bc:23:7f:4f:ed:c6:84:57:c0:77:26:a8:af:4a: 33:30:93:19:eb:20:3b:d8:7c:46:88:cf:4f:dd:9e: f5:b6:bb:76:2a:d6:c4:b9:40:16:1c:be:b4:d9:75: f4:cb:2e:a4:bb:0c:03:61:a9:4a:d8:51:33:de:e4: 50:74:41:89:82:fb:78:f0:e6:9f:5d:a4:a2:12:f6: 72:92:10:9b:07:2c:3b:64:3b:a7:e2:6a:98:e8:2b: 94:91:8b:86:d2:07:4a:e2:84:0e:2c:c6:ed:ba:fa: 5b:4e:09:c8:b4:a2:8e:00:46:52:83:82:2b:b1:0d: 62:b3:7b:22:c4:61:22:4e:54:f6:65:b2:92:79:8c: 1b:3d:f8:56:0f:6e:ce:3b:54:cb:b6:69:9a:04:dd: 43:e0:9c:e6:19:5d:ac:a2:7f:80:e2:5a:6f:02:24: bd:43:99:6b:df:1b:cb:f0:6a:bf:92:24:1a:42:bf: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CB:B5:4B:82:22:0F:A0:33:A9:83:97:A1:4D:6F:8D:FE:0D:F6:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b698cc61-9f83-32ba-a654-c53c9250bdd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.250.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4f:41:25:11:fc:1d:08:d9:e8:92:f4:29:c0:d8:18:18:b8: 39:75:47:4c:01:4a:fd:38:9e:65:77:7b:b3:84:b9:ea:81:7c: 00:5a:6b:5e:fb:25:7f:19:2a:c5:a2:16:94:d8:6e:95:80:64: e3:a0:39:62:07:10:fc:61:05:b4:a4:5b:bc:69:d0:a8:5d:76: df:71:ef:9d:0a:9d:69:26:f7:73:19:a3:b6:81:0c:7e:b5:59: d9:24:54:f8:b8:2e:69:04:48:63:d8:c8:92:39:8e:03:af:a1: 69:54:9c:17:b3:ce:23:d4:9c:9f:df:7d:f1:b1:fb:e4:e9:c7: 55:77:e2:c7:cd:4c:50:f1:42:bb:b0:52:44:93:78:72:66:94: 43:4f:30:ef:74:b2:47:1d:f6:5d:02:16:31:ac:40:77:13:45: dd:a5:d8:e7:46:6c:22:8c:df:e0:97:b2:66:a3:ad:72:2c:5a: 54:51:e6:7c:7b:2b:5e:c8:6b:4d:76:62:f3:3e:19:48:91:6b: 41:45:70:fb:9b:6e:b8:7a:6b:d9:50:91:be:63:4f:41:1a:d6: 17:ee:56:51:bc:e5:16:16:6c:2d:77:ee:d5:1d:c7:b9:6c:d5: 6e:c2:57:63:66:c2:36:ed:e3:24:78:a9:5f:72:c9:82:de:23: 0d:6c:46:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNggd+Eo9TWv35IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MDU5MzUzOWEtMzdmMi00ZmI5LTgwNjMtOTFkZGQwYzdjNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVVxTW5fWNx9NENU2CaNwRfpNRHzRIaA6rWJ WpVZ4XqhwR8rOK1H+K/4/u0iHtoOBw+PMUrjeOuOUNEa28yUvg1GByYvmxRS03Na vCN/T+3GhFfAdyaor0ozMJMZ6yA72HxGiM9P3Z71trt2KtbEuUAWHL602XX0yy6k uwwDYalK2FEz3uRQdEGJgvt48OafXaSiEvZykhCbByw7ZDun4mqY6CuUkYuG0gdK 4oQOLMbtuvpbTgnItKKOAEZSg4IrsQ1is3sixGEiTlT2ZbKSeYwbPfhWD27OO1TL tmmaBN1D4JzmGV2son+A4lpvAiS9Q5lr3xvL8Gq/kiQaQr/LkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTLtUuCIg+gM6mDl6FNb43+DfYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjY5OGNjNjEtOWY4My0z MmJhLWE2NTQtYzUzYzkyNTBiZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARPQSUR/B0I2eiS9CnA2BgYuDl1R0wBSv04nmV3e7OEueqBfABaa177 JX8ZKsWiFpTYbpWAZOOgOWIHEPxhBbSkW7xp0Khddt9x750KnWkm93MZo7aBDH61 WdkkVPi4LmkESGPYyJI5jgOvoWlUnBezziPUnJ/fffGx++Tpx1V34sfNTFDxQruw UkSTeHJmlENPMO90skcd9l0CFjGsQHcTRd2l2OdGbCKM3+CXsmajrXIsWlRR5nx7 K17Ia012YvM+GUiRa0FFcPubbrh6a9lQkb5jT0Ea1hfuVlG85RYWbC137tUdx7ls 1W7CV2Nmwjbt4yR4qV9yyYLeIw1sRtA= -----END CERTIFICATE-----Generated at Wed Aug 6 14:21:58 2025 by rpki-client