$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e81e2d2f-370b-377f-901b-25ab26f60480.roa File: e81e2d2f-370b-377f-901b-25ab26f60480.roa (raw, json) Hash identifier: NH+8Qi36knAhNC9GZPAdyKSgeDJi+gJ4t0RF4VPcpXU= Subject key identifier: FB:63:79:94:4B:5A:49:D8:A6:59:76:FF:CB:8A:55:3E:94:7D:F3:BF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636344AC757547FC1459080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e81e2d2f-370b-377f-901b-25ab26f60480.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 24.254.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:34:4a:c7:57:54:7f:c1:45:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=cc14906d-210e-47e4-a7e8-6966ae5c9460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:be:93:57:af:b1:05:0b:93:54:f4:b9:b5:ec: 16:b8:f1:e0:56:a2:28:62:0c:e4:7b:c3:c9:b8:37: 2b:43:08:f0:f8:79:75:e8:8b:32:1a:5a:b4:fd:d9: 30:23:86:83:fc:96:ff:5d:85:95:9c:8a:f6:48:66: 2d:94:9b:26:7a:ff:fc:ce:40:e9:5d:69:66:7b:32: 9a:c8:dc:e8:36:63:ad:30:fb:6d:c8:cd:77:67:db: 1e:a4:50:fd:78:61:a1:19:8a:a3:d9:8d:30:34:f1: 6f:c2:59:a7:aa:4e:8e:5b:77:d4:b3:b2:f5:d2:3d: f1:b2:50:22:e3:b9:04:9f:a5:24:15:79:48:74:14: a3:9f:86:cb:01:cd:5c:f1:dd:77:3c:cb:0d:97:4c: b3:72:74:fa:41:3d:21:36:e7:c8:cc:f9:fa:12:87: d8:12:61:88:45:6f:50:f3:2f:bd:59:73:8d:e7:9a: 44:b6:0c:4a:53:e5:df:20:b2:a8:23:d7:9f:dd:c6: 0c:81:73:a2:13:36:12:9f:f1:ed:98:71:15:44:3b: 2f:c7:63:1a:3d:79:a9:4c:e4:db:e7:b3:bb:25:57: 44:b1:05:f9:b1:73:d3:a5:d8:71:cc:18:c9:84:40: e7:3f:1c:96:16:96:ab:62:b4:b9:79:75:b8:b0:7f: c3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:63:79:94:4B:5A:49:D8:A6:59:76:FF:CB:8A:55:3E:94:7D:F3:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e81e2d2f-370b-377f-901b-25ab26f60480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.254.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:55:30:b8:52:2f:b9:bf:92:62:3a:8b:f9:85:71:b3:4b:03: a6:d3:08:6b:e9:ee:22:fe:e4:53:d5:7a:98:cf:ca:7b:9a:cd: 6f:63:6c:cf:5f:8e:70:6e:f4:74:b6:76:fa:80:37:f8:4f:f6: c1:7f:67:f1:4e:ae:a7:b9:5b:45:b0:3c:40:7e:2f:40:31:4d: 2b:6e:f4:02:51:48:b7:b8:50:a1:39:68:f4:26:0b:f2:3e:03: 8a:a7:54:a2:7a:e9:3e:af:7c:f8:33:0d:72:f3:8a:56:87:91: 21:6b:c7:2d:cb:dd:57:d8:01:01:fa:e1:9c:21:0a:b6:2b:82: e4:b7:73:58:81:06:e6:9d:34:71:17:f0:68:96:7c:21:32:d1: cc:4d:f9:b7:9b:9d:45:1f:d5:55:46:23:ab:36:f2:26:b4:d7: 05:be:07:76:0f:c1:a6:f4:90:dd:5e:2c:c5:53:e9:6a:09:16: 62:27:c1:bd:ab:56:83:4e:29:f4:2b:e2:8a:b6:92:f0:7b:e0: 52:60:cb:2f:62:9d:b8:41:be:89:76:58:c9:80:5f:8f:8e:13: a9:c8:00:79:40:d3:3b:3d:28:c7:08:30:0b:a9:05:dc:5f:38: d1:96:3b:ae:af:28:8e:08:fa:00:d8:a1:16:5e:82:4f:56:8d: 95:bf:a2:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjRKx1dUf8FFkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk Y2MxNDkwNmQtMjEwZS00N2U0LWE3ZTgtNjk2NmFlNWM5NDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb6TV6+xBQuTVPS5tewWuPHgVqIoYgzke8PJ uDcrQwjw+Hl16IsyGlq0/dkwI4aD/Jb/XYWVnIr2SGYtlJsmev/8zkDpXWlmezKa yNzoNmOtMPttyM13Z9sepFD9eGGhGYqj2Y0wNPFvwlmnqk6OW3fUs7L10j3xslAi 47kEn6UkFXlIdBSjn4bLAc1c8d13PMsNl0yzcnT6QT0hNufIzPn6EofYEmGIRW9Q 8y+9WXON55pEtgxKU+XfILKoI9ef3cYMgXOiEzYSn/HtmHEVRDsvx2MaPXmpTOTb 57O7JVdEsQX5sXPTpdhxzBjJhEDnPxyWFparYrS5eXW4sH/DFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtjeZRLWknYpll2/8uKVT6UffO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTgxZTJkMmYtMzcwYi0z NzdmLTkwMWItMjVhYjI2ZjYwNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGP7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxVMLhSL7m/kmI6i/mFcbNLA6bTCGvp7iL+5FPVepjPynuazW9jbM9f jnBu9HS2dvqAN/hP9sF/Z/FOrqe5W0WwPEB+L0AxTStu9AJRSLe4UKE5aPQmC/I+ A4qnVKJ66T6vfPgzDXLzilaHkSFrxy3L3VfYAQH64ZwhCrYrguS3c1iBBuadNHEX 8GiWfCEy0cxN+bebnUUf1VVGI6s28ia01wW+B3YPwab0kN1eLMVT6WoJFmInwb2r VoNOKfQr4oq2kvB74FJgyy9inbhBvol2WMmAX4+OE6nIAHlA0zs9KMcIMAupBdxf ONGWO66vKI4I+gDYoRZegk9WjZW/ouM= -----END CERTIFICATE-----Generated at Mon Aug 4 18:21:03 2025 by rpki-client