$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e70f5e41-6efa-370d-9fb1-fb0c5af1d3a8.roa File: e70f5e41-6efa-370d-9fb1-fb0c5af1d3a8.roa (raw, json) Hash identifier: gvJadEktDZuyxIf1DGyrMVaOKB3BZ2r+ImcgIERYg+4= Subject key identifier: C5:D1:43:20:A4:7A:AF:63:1F:0A:CD:FA:C6:00:8E:84:06:D6:71:C8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636342CEF4E310B633D6540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e70f5e41-6efa-370d-9fb1-fb0c5af1d3a8.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 24.254.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:34:2c:ef:4e:31:0b:63:3d:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=9e8d3f96-639b-4d2d-baf4-19662df34e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:14:1e:14:e0:06:85:c0:aa:e3:52:05:0a: 18:a0:5e:6e:4c:ae:56:16:f6:e9:8e:0d:8f:62:24: c5:b4:36:0c:91:a1:1f:3a:2e:59:b2:48:70:05:46: 98:50:43:0f:37:bb:74:dd:5d:46:90:d0:05:a3:ac: fc:c8:28:03:0f:5f:13:03:ab:67:3e:75:e5:77:de: 26:06:ef:0f:2c:cc:16:52:17:0b:71:8a:65:31:f2: 0f:95:11:44:60:e7:f0:10:8a:df:0d:1f:ca:35:6e: b3:8b:8f:e7:aa:f7:be:16:99:e0:9a:09:36:5b:23: 24:1b:79:f8:e2:35:17:10:e6:a4:5d:d2:7c:13:c5: b0:62:cb:72:30:ea:1c:e3:19:0b:7c:d5:df:a5:ea: f4:9f:33:15:d7:6c:35:36:af:56:3f:3e:47:fd:e6: 2e:1e:df:65:d3:13:f0:ee:18:13:c1:a8:b9:2f:21: ab:7f:0f:76:39:f1:e8:0c:63:2e:47:21:3d:7c:35: e2:02:bc:cd:bf:06:0f:f4:de:af:ad:6c:90:70:70: 1b:5d:f5:45:61:3f:4d:a6:3f:bd:4e:ad:1f:32:ea: a1:92:db:a0:61:ac:b9:2d:ed:dc:ca:e9:68:ab:c2: 83:0f:ef:36:87:c9:4f:9f:14:f7:7e:95:22:75:0e: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D1:43:20:A4:7A:AF:63:1F:0A:CD:FA:C6:00:8E:84:06:D6:71:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e70f5e41-6efa-370d-9fb1-fb0c5af1d3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.254.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:6a:45:9e:ec:99:1a:f2:4a:22:d6:f2:36:73:0e:08:cb:31: 94:9d:7b:e6:8d:b0:66:b7:bb:9e:73:50:36:aa:fa:eb:80:ee: aa:13:71:43:41:3f:3f:16:48:c1:f8:05:31:ad:13:0a:ed:80: 4e:ca:5d:d3:c3:a4:46:91:38:82:e4:cc:64:e2:1c:84:8f:df: 4e:40:e0:83:89:12:ff:8f:63:ba:76:a7:05:30:72:40:a4:07: 90:f0:0c:bd:e4:3c:5a:1c:e3:27:07:2a:82:fe:7f:72:5c:23: a6:fe:3d:76:22:f5:fa:0f:cb:ba:c4:51:0c:f7:58:48:16:4b: 1a:9b:e5:17:da:01:d0:4a:98:83:42:62:c5:31:f1:b6:c1:b5: da:17:1a:ee:f2:6f:69:30:26:77:7d:2e:d2:40:c2:77:fa:7d: 5f:55:a9:45:6b:89:7b:6a:6f:bc:10:8d:46:3f:00:67:07:e4: 4e:e8:de:02:c5:2d:97:f7:fd:cb:54:27:72:eb:37:de:2f:81: 2b:e8:5d:6b:0d:36:bf:4d:02:7b:a0:d7:8c:6d:27:45:bc:ae: 89:ce:cb:11:f5:5b:da:cc:75:55:8b:70:82:43:ca:b0:cf:04: a8:c8:6a:cc:3e:ef:b5:7b:38:22:5e:bf:20:04:84:0f:b9:c2: f7:fb:da:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjQs704xC2M9ZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OWU4ZDNmOTYtNjM5Yi00ZDJkLWJhZjQtMTk2NjJkZjM0ZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ4UHhTgBoXAquNSBQoYoF5uTK5WFvbpjg2P YiTFtDYMkaEfOi5ZskhwBUaYUEMPN7t03V1GkNAFo6z8yCgDD18TA6tnPnXld94m Bu8PLMwWUhcLcYplMfIPlRFEYOfwEIrfDR/KNW6zi4/nqve+Fpngmgk2WyMkG3n4 4jUXEOakXdJ8E8WwYstyMOoc4xkLfNXfper0nzMV12w1Nq9WPz5H/eYuHt9l0xPw 7hgTwai5LyGrfw92OfHoDGMuRyE9fDXiArzNvwYP9N6vrWyQcHAbXfVFYT9Npj+9 Tq0fMuqhktugYay5Le3cyuloq8KDD+82h8lPnxT3fpUidQ6TKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXRQyCkeq9jHwrN+sYAjoQG1nHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTcwZjVlNDEtNmVmYS0z NzBkLTlmYjEtZmIwYzVhZjFkM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP7YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVqRZ7smRrySiLW8jZzDgjLMZSde+aNsGa3u55zUDaq+uuA7qoTcUNB Pz8WSMH4BTGtEwrtgE7KXdPDpEaROILkzGTiHISP305A4IOJEv+PY7p2pwUwckCk B5DwDL3kPFoc4ycHKoL+f3JcI6b+PXYi9foPy7rEUQz3WEgWSxqb5RfaAdBKmINC YsUx8bbBtdoXGu7yb2kwJnd9LtJAwnf6fV9VqUVriXtqb7wQjUY/AGcH5E7o3gLF LZf3/ctUJ3LrN94vgSvoXWsNNr9NAnug14xtJ0W8ronOyxH1W9rMdVWLcIJDyrDP BKjIasw+77V7OCJevyAEhA+5wvf72vE= -----END CERTIFICATE-----Generated at Wed Aug 6 14:14:21 2025 by rpki-client