$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d085765e-3a36-3b1d-8f9e-0f5d9a1a6e35.roa File: d085765e-3a36-3b1d-8f9e-0f5d9a1a6e35.roa (raw, json) Hash identifier: YwMLDvKQGiUQtel0FXH2vL6by4UoWlmiGYMOWUHxA3Y= Subject key identifier: 93:2C:27:20:B1:AD:65:E9:40:FA:AC:F6:BC:B5:7C:D1:6C:9B:CC:7F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96363476A70FA6C75C691C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d085765e-3a36-3b1d-8f9e-0f5d9a1a6e35.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 24.254.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:34:76:a7:0f:a6:c7:5c:69:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=a4c3b9de-cdd0-4507-b8b2-d9535d0a1879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:02:82:3b:9b:1f:d3:1d:20:e9:f8:ab:2e:23: 1f:96:b0:78:f5:8a:7d:86:05:1a:07:cb:3e:81:bd: f1:70:97:81:0e:65:0d:e0:73:2a:73:6f:8e:6d:7d: 0e:98:b7:8c:c7:5e:5f:45:81:d4:94:ff:cd:3e:9d: 6e:12:2f:0e:45:f1:7d:c1:ec:1f:21:d0:89:d4:86: 87:fa:b7:4f:05:3a:82:fb:6d:c2:2f:07:38:69:b4: bb:2e:d9:48:f1:77:cb:b2:a0:91:3e:f6:f5:b1:ea: 50:91:64:6f:91:12:82:ee:46:3d:b8:81:58:59:97: 7d:f1:cf:ed:3b:25:38:ae:8d:9c:79:c5:a9:cc:dd: 27:94:06:3b:b7:4e:03:3e:b7:c9:10:95:a2:a7:5e: 1e:e0:46:da:d4:4d:df:2a:d6:b6:82:bc:8f:50:f2: 3d:90:c0:84:85:c1:fe:fd:5e:0a:0b:f4:19:4b:ce: 91:ae:38:e0:7a:0f:93:ec:3f:46:b7:d1:86:a1:f5: 3a:ac:b3:e6:ea:67:e8:c8:d5:60:07:ea:51:5d:f1: 5d:2c:64:92:a8:6b:74:e8:8d:b6:7a:ac:e9:bf:07: 43:7b:8c:a7:e4:c2:9a:d0:0c:de:6d:df:8a:7c:38: 19:a1:82:62:0e:6b:7f:ee:2e:cb:be:b5:f5:14:87: de:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2C:27:20:B1:AD:65:E9:40:FA:AC:F6:BC:B5:7C:D1:6C:9B:CC:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d085765e-3a36-3b1d-8f9e-0f5d9a1a6e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.254.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ba:61:f4:23:3c:8a:63:57:99:ff:7b:bf:01:4e:99:62:9b: 36:f6:87:24:cf:10:bb:30:61:5f:4c:43:ad:72:eb:b7:af:19: 29:e4:cb:82:d6:b3:ab:99:0d:33:51:3c:b7:79:fc:ec:f7:24: 3b:d9:6e:a0:fd:af:37:48:3a:b6:6c:ab:a7:e9:11:9d:6a:90: 5e:db:b4:e1:f3:cf:98:28:b3:c0:56:50:af:f0:be:ff:f5:95: ab:17:b5:f7:f3:a3:a1:25:c7:17:0a:fe:27:a6:37:97:24:51: 45:d8:d1:f7:45:14:3f:9a:c3:40:32:c9:25:ca:6a:b0:fe:b6: f4:3e:04:c4:5e:88:76:e0:48:e8:6e:36:bc:a2:48:5e:02:43: f3:13:7e:a7:38:33:ea:dc:56:5b:4f:43:2b:6b:4d:c9:1b:91: 4d:1e:8a:85:53:e9:ca:27:2f:26:66:0e:d7:96:67:72:e0:c1: 22:35:4c:d7:45:5d:41:a6:c9:1e:04:1d:f2:6a:0f:1a:ee:bf: 17:2c:60:d7:87:fd:2b:b1:d6:57:a7:55:af:8e:52:f5:1c:68: 00:e3:d4:4d:d7:8a:d4:fc:7f:b2:1b:44:92:05:f4:28:cc:74: 38:09:84:7a:b3:7b:74:7f:ad:f3:52:07:6f:1f:42:78:2f:30: 00:31:46:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjR2pw+mx1xpHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YTRjM2I5ZGUtY2RkMC00NTA3LWI4YjItZDk1MzVkMGExODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQKCO5sf0x0g6firLiMflrB49Yp9hgUaB8s+ gb3xcJeBDmUN4HMqc2+ObX0OmLeMx15fRYHUlP/NPp1uEi8ORfF9wewfIdCJ1IaH +rdPBTqC+23CLwc4abS7LtlI8XfLsqCRPvb1sepQkWRvkRKC7kY9uIFYWZd98c/t OyU4ro2cecWpzN0nlAY7t04DPrfJEJWip14e4Eba1E3fKta2gryPUPI9kMCEhcH+ /V4KC/QZS86Rrjjgeg+T7D9Gt9GGofU6rLPm6mfoyNVgB+pRXfFdLGSSqGt06I22 eqzpvwdDe4yn5MKa0Azebd+KfDgZoYJiDmt/7i7LvrX1FIfecQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMsJyCxrWXpQPqs9ry1fNFsm8x/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDA4NTc2NWUtM2EzNi0z YjFkLThmOWUtMGY1ZDlhMWE2ZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq6YfQjPIpjV5n/e78BTplimzb2hyTPELswYV9MQ61y67evGSnky4LW s6uZDTNRPLd5/Oz3JDvZbqD9rzdIOrZsq6fpEZ1qkF7btOHzz5gos8BWUK/wvv/1 lasXtffzo6ElxxcK/iemN5ckUUXY0fdFFD+aw0AyySXKarD+tvQ+BMReiHbgSOhu NryiSF4CQ/MTfqc4M+rcVltPQytrTckbkU0eioVT6conLyZmDteWZ3LgwSI1TNdF XUGmyR4EHfJqDxruvxcsYNeH/Sux1lenVa+OUvUcaADj1E3XitT8f7IbRJIF9CjM dDgJhHqze3R/rfNSB28fQngvMAAxRs0= -----END CERTIFICATE-----Generated at Wed Aug 6 11:01:17 2025 by rpki-client