$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d1f5493-74ea-329a-88a9-456bc5c7a20e.roa File: 0d1f5493-74ea-329a-88a9-456bc5c7a20e.roa (raw, json) Hash identifier: vZAB3XRwOOk7PXLmNnKzynpBFhYx3qc0NVnOpA4OhZ4= Subject key identifier: 44:4D:0C:E7:35:D5:CE:B0:CA:46:B4:1D:72:57:2C:D3:2A:0F:B9:B6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5A483DDFA831DBB589300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d1f5493-74ea-329a-88a9-456bc5c7a20e.roa Signing time: Thu 01 May 2025 17:10:05 +0000 ROA not before: Thu 01 May 2025 17:10:05 +0000 ROA not after: Wed 30 Jul 2025 17:10:05 +0000 asID: 22773 IP address blocks: 72.209.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:a4:83:dd:fa:83:1d:bb:58:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:05 2025 GMT Not After : Jul 30 17:10:05 2025 GMT Subject: CN=cf617dea-36ac-411e-a7d8-9e1ec599d7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a8:94:0f:eb:c6:57:6c:98:31:4c:ab:d9:d7: b0:31:e0:b2:a5:31:9b:c2:c9:89:86:ba:fb:92:c4: e3:1c:ae:91:c4:a5:4f:f1:e3:0e:fb:58:79:86:42: 40:bb:e0:33:28:8d:34:ab:46:a3:90:04:b6:a4:78: a7:fc:a8:51:f3:46:12:89:43:8d:7e:45:2a:23:8e: 06:3d:12:e1:a1:f5:52:54:ea:63:91:58:29:24:d1: ac:d8:d9:41:7f:26:2a:6a:87:4a:d2:7e:4a:0b:38: 60:d0:4c:ba:86:7c:11:42:c1:92:09:9a:16:77:29: a6:c4:0b:d6:54:7d:2a:f9:b5:0b:bb:cd:d5:5b:93: f9:e4:94:15:04:de:f0:2d:63:13:1f:10:39:f7:3c: 75:2b:6a:c2:6c:48:9e:b6:f1:f4:ef:33:d3:9f:96: 32:ab:71:e9:25:6b:c0:0d:a0:18:d2:c5:9d:b3:78: 81:3f:19:8e:c8:be:0a:b3:15:2c:49:10:4a:c0:fd: 7a:5e:e0:c0:76:de:dd:1a:be:93:1d:c0:9b:fb:40: 9e:63:32:8e:f2:88:61:53:67:cb:fc:12:ef:84:47: a4:0c:fa:9b:ab:83:94:53:96:dd:27:10:c3:98:9e: 16:76:b2:af:6d:84:d0:d4:9d:59:2d:e5:b7:3e:33: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4D:0C:E7:35:D5:CE:B0:CA:46:B4:1D:72:57:2C:D3:2A:0F:B9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d1f5493-74ea-329a-88a9-456bc5c7a20e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:34:a2:dd:f2:b1:55:ab:0e:18:44:39:0c:1b:d3:bf:53:3c: 76:4e:f7:5d:45:b2:09:3e:78:ab:24:73:99:fc:96:27:13:90: b4:b6:63:56:c9:57:0e:6b:47:61:ee:cf:e1:bf:d2:ac:54:9b: 07:15:3d:22:68:a4:95:81:b0:1c:de:4b:25:3e:86:f5:5e:57: 52:2a:5a:52:e9:7d:76:67:6d:3e:dd:7b:3e:96:7c:a6:6f:9a: c1:bb:d1:1b:d9:7a:57:0e:e5:eb:cc:5d:8d:a4:47:76:9c:55: e2:8f:9f:99:f5:17:84:6e:3b:6f:6c:ab:99:02:2e:80:da:3e: d6:a3:fe:2e:e1:ef:1d:0c:ef:67:44:42:5c:c4:d7:24:f1:00: b1:cd:3b:ab:37:22:9f:22:8e:96:ea:c0:8f:13:40:ac:af:49: d2:63:18:35:13:49:f6:81:8f:19:43:17:79:a2:e0:4b:a8:99: 01:7d:9d:28:66:81:61:51:51:de:e4:62:78:2f:c9:53:37:e0: 95:b0:08:13:04:f5:b8:2b:5f:3d:1a:73:6d:d1:60:2e:95:b6: ae:4d:4a:57:b7:ee:0f:6b:2b:1d:c0:30:4d:83:0c:e2:c7:c9: ee:51:2e:73:b5:3b:ad:f7:f1:f9:cd:26:ff:79:49:14:52:66: 2c:bd:02:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19aSD3fqDHbtYkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAwNVoXDTI1MDczMDE3MTAwNVowLzEtMCsGA1UEAxMk Y2Y2MTdkZWEtMzZhYy00MTFlLWE3ZDgtOWUxZWM1OTlkN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKiUD+vGV2yYMUyr2dewMeCypTGbwsmJhrr7 ksTjHK6RxKVP8eMO+1h5hkJAu+AzKI00q0ajkAS2pHin/KhR80YSiUONfkUqI44G PRLhofVSVOpjkVgpJNGs2NlBfyYqaodK0n5KCzhg0Ey6hnwRQsGSCZoWdymmxAvW VH0q+bULu83VW5P55JQVBN7wLWMTHxA59zx1K2rCbEietvH07zPTn5Yyq3HpJWvA DaAY0sWds3iBPxmOyL4KsxUsSRBKwP16XuDAdt7dGr6THcCb+0CeYzKO8ohhU2fL /BLvhEekDPqbq4OUU5bdJxDDmJ4WdrKvbYTQ1J1ZLeW3PjMSLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERNDOc11c6wyka0HXJXLNMqD7m2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGQxZjU0OTMtNzRlYS0z MjlhLTg4YTktNDU2YmM1YzdhMjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw0ot3ysVWrDhhEOQwb079TPHZO911Fsgk+eKskc5n8licTkLS2Y1bJ Vw5rR2Huz+G/0qxUmwcVPSJopJWBsBzeSyU+hvVeV1IqWlLpfXZnbT7dez6WfKZv msG70RvZelcO5evMXY2kR3acVeKPn5n1F4RuO29sq5kCLoDaPtaj/i7h7x0M72dE QlzE1yTxALHNO6s3Ip8ijpbqwI8TQKyvSdJjGDUTSfaBjxlDF3mi4EuomQF9nShm gWFRUd7kYngvyVM34JWwCBME9bgrXz0ac23RYC6Vtq5NSle37g9rKx3AME2DDOLH ye5RLnO1O6338fnNJv95SRRSZiy9AiE= -----END CERTIFICATE-----Generated at Mon May 12 14:58:03 2025 by rpki-client