$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be1a14ff-c6d7-3782-a445-246ee1a8c8a0.roa File: be1a14ff-c6d7-3782-a445-246ee1a8c8a0.roa (raw, json) Hash identifier: jHnA8iWINL6YAkOkxVBT5skB/FfDJ0TdqkhK4HQeqZ0= Subject key identifier: 2A:EF:F4:4C:FD:CB:1B:32:33:96:DD:69:71:E8:09:01:06:B6:52:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96360977D50292272777BC20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be1a14ff-c6d7-3782-a445-246ee1a8c8a0.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 24.250.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:09:77:d5:02:92:27:27:77:bc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=1d2033a4-fa02-4481-9089-2e1863d9a4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5f:ba:66:f3:48:16:59:83:d0:37:17:6c:6b: ee:5f:dc:3c:3c:b5:7e:f9:28:75:14:0e:f2:5a:6d: a7:69:8d:64:11:ab:7e:8f:73:4a:36:42:f8:6c:12: 68:51:c3:98:92:e1:3f:ed:12:f9:2d:6e:e8:ed:8b: 45:52:32:b5:c8:28:47:e2:e3:8a:b0:f6:87:e7:75: 1b:b2:a8:bb:db:a1:b1:a6:37:df:44:68:6b:d5:c0: 44:c9:4b:99:27:82:4c:e4:59:93:9b:9e:82:22:84: a2:80:0d:f4:65:e3:e9:6c:fe:f2:d3:3e:08:6f:77: c1:c0:7b:f8:2b:72:b8:77:95:4d:3a:ac:14:e7:01: 51:44:ae:f7:b4:8b:ed:74:94:a0:08:00:c8:31:5e: f9:75:2a:85:10:cb:26:70:19:cf:84:32:3e:2d:04: bf:23:b6:a1:00:49:a7:f5:e8:e3:c1:bb:32:93:a4: a0:6a:d8:d0:cf:2a:41:e6:8f:da:bc:1e:a1:8a:8c: 49:5d:28:87:f5:98:0d:f7:3a:5b:f6:8c:f9:22:ba: 1d:31:5f:fd:7e:73:11:50:fc:b1:2b:ba:48:8b:bc: aa:a1:36:87:ba:a2:e8:a4:f0:25:de:4c:3e:c8:43: 0d:13:d3:68:89:a7:72:c1:6b:30:58:b4:50:ed:ac: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EF:F4:4C:FD:CB:1B:32:33:96:DD:69:71:E8:09:01:06:B6:52:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be1a14ff-c6d7-3782-a445-246ee1a8c8a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.250.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b7:07:dc:44:a8:0d:9b:94:3d:6a:34:ba:af:f8:c0:ef:c8: 36:f2:f3:a1:65:66:89:42:85:bd:8a:2c:51:f1:cd:3e:9b:cf: d8:b9:2f:b7:a7:61:4c:4d:2c:00:62:e5:a6:37:4e:84:13:ad: 21:79:0f:cd:ab:eb:69:ae:1b:93:03:fa:23:7a:f5:45:d3:ad: 91:04:d8:ee:cf:6d:32:a0:e3:31:37:1d:ec:ee:f0:bd:e5:f8: 10:e3:53:3a:6d:5a:b2:b7:ae:a9:17:6a:8c:0d:97:2e:c0:75: 80:38:ab:f0:bc:e9:05:98:58:6c:4c:c5:15:c6:a2:55:01:48: 6c:57:a6:ca:ad:16:27:6e:3e:4a:5f:5d:44:3c:86:2b:d6:6c: bf:e1:40:e0:61:1a:f1:a1:77:4f:a4:8d:5d:74:58:38:28:02: 40:bf:fa:41:69:9a:5f:ae:cb:95:12:d2:b4:4b:c6:f4:ab:9a: 5d:7b:a1:35:83:24:7b:5e:8f:f4:5c:3b:dd:d6:31:e1:23:6c: 31:64:ca:35:9d:12:00:00:92:2d:e4:66:92:bb:a7:21:4b:35: 9f:76:de:3d:23:91:be:cb:06:11:64:b7:11:f2:02:73:5d:00: 6a:f2:4b:4c:11:2e:51:01:93:f6:b0:4e:21:0b:8c:39:58:e5: da:0d:50:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNgl31QKSJyd3vCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MWQyMDMzYTQtZmEwMi00NDgxLTkwODktMmUxODYzZDlhNGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF+6ZvNIFlmD0DcXbGvuX9w8PLV++Sh1FA7y Wm2naY1kEat+j3NKNkL4bBJoUcOYkuE/7RL5LW7o7YtFUjK1yChH4uOKsPaH53Ub sqi726GxpjffRGhr1cBEyUuZJ4JM5FmTm56CIoSigA30ZePpbP7y0z4Ib3fBwHv4 K3K4d5VNOqwU5wFRRK73tIvtdJSgCADIMV75dSqFEMsmcBnPhDI+LQS/I7ahAEmn 9ejjwbsyk6SgatjQzypB5o/avB6hioxJXSiH9ZgN9zpb9oz5IrodMV/9fnMRUPyx K7pIi7yqoTaHuqLopPAl3kw+yEMNE9NoiadywWswWLRQ7axsbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrv9Ez9yxsyM5bdaXHoCQEGtlJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmUxYTE0ZmYtYzZkNy0z NzgyLWE0NDUtMjQ2ZWUxYThjOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPo6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu3B9xEqA2blD1qNLqv+MDvyDby86FlZolChb2KLFHxzT6bz9i5L7en YUxNLABi5aY3ToQTrSF5D82r62muG5MD+iN69UXTrZEE2O7PbTKg4zE3Hezu8L3l +BDjUzptWrK3rqkXaowNly7AdYA4q/C86QWYWGxMxRXGolUBSGxXpsqtFiduPkpf XUQ8hivWbL/hQOBhGvGhd0+kjV10WDgoAkC/+kFpml+uy5US0rRLxvSrml17oTWD JHtej/RcO93WMeEjbDFkyjWdEgAAki3kZpK7pyFLNZ923j0jkb7LBhFktxHyAnNd AGryS0wRLlEBk/awTiELjDlY5doNUKM= -----END CERTIFICATE-----Generated at Wed Aug 6 12:37:54 2025 by rpki-client