$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/213f39f7-e151-3c11-8d49-8581e8732522.roa File: 213f39f7-e151-3c11-8d49-8581e8732522.roa (raw, json) Hash identifier: afXrl1VYnTtZ8m7TlJ4UgLLGCGW33ZpCFgx5U37fqIg= Subject key identifier: 00:C8:0F:A5:13:BE:09:90:95:DB:DC:79:A8:F8:C9:E5:97:02:79:9E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDA88C2E2385AD3E6E0720 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/213f39f7-e151-3c11-8d49-8581e8732522.roa Signing time: Thu 01 May 2025 17:26:14 +0000 ROA not before: Thu 01 May 2025 17:26:14 +0000 ROA not after: Wed 30 Jul 2025 17:26:14 +0000 asID: 22773 IP address blocks: 72.220.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:a8:8c:2e:23:85:ad:3e:6e:07:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:14 2025 GMT Not After : Jul 30 17:26:14 2025 GMT Subject: CN=4a301ebd-bff2-486c-a38f-4df1728ee3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a9:11:7a:b8:23:e9:a2:fa:a7:e7:15:c0:45: 0b:f7:25:d0:ed:f0:d4:44:64:8c:a6:58:66:95:2e: 88:e8:f7:6d:c2:ba:24:d3:66:b0:1f:1a:1e:56:70: 3b:31:c0:5d:1a:4d:80:93:9f:7d:f4:dc:51:d0:a4: 09:3b:69:50:1c:86:d5:0c:6d:ff:b2:8e:c9:d4:d5: 39:71:68:da:fc:bd:e9:87:41:28:2a:91:99:59:35: f9:76:70:89:3a:8f:24:11:e2:99:11:c0:50:73:1f: 2e:53:6a:d7:d8:ae:33:6d:d6:b0:36:f4:b2:83:71: 90:6f:df:68:d1:a5:82:12:40:50:4f:29:93:c9:08: da:0b:1d:b4:2e:66:fc:15:4c:20:d9:71:fb:a7:9a: 61:f5:f3:9d:78:79:e5:7d:bb:e9:d0:49:87:dd:83: 8c:39:67:58:dd:d9:30:49:5d:7e:c2:e4:a6:04:66: 58:9f:c9:d2:21:ba:e7:a8:57:26:07:08:b3:a3:d0: 89:f5:17:f5:0b:20:00:e0:14:c3:a6:1f:03:fd:99: 9d:32:a5:6a:e4:af:83:55:35:a2:30:2e:6c:96:48: 44:2a:d9:a7:15:07:fd:a7:6b:65:9e:a3:53:4c:07: 07:35:65:92:3f:f2:3f:3b:1d:6a:73:63:c8:26:7b: 82:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C8:0F:A5:13:BE:09:90:95:DB:DC:79:A8:F8:C9:E5:97:02:79:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/213f39f7-e151-3c11-8d49-8581e8732522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d9:df:8b:9e:c1:30:85:63:ee:73:07:c3:4f:b6:f5:b3:9e: c9:1c:8a:e5:d0:eb:bf:cf:e5:65:5e:d4:50:5c:d2:42:5b:a8: 90:8f:76:9d:ad:fb:52:3c:7f:20:56:3c:b8:10:1f:61:fa:54: 4e:43:0e:7a:64:cb:94:97:20:34:a8:73:e1:f5:43:48:60:ba: 7b:79:54:c9:b6:e8:58:f6:2c:dd:28:71:27:bc:28:8b:bd:65: 95:5f:47:32:46:2f:7c:c7:10:6e:3b:ae:64:d1:f9:08:38:87: 62:c7:2c:65:9e:9a:35:85:ef:6e:f1:16:be:f2:af:5a:13:fd: d8:e9:6f:c5:1e:d1:1e:49:ae:8f:99:ad:7e:d8:0e:23:1f:8d: f8:c9:12:6b:d3:c2:1f:4a:f8:93:54:81:19:ed:4f:01:d9:60: 79:da:5b:cc:38:c1:e8:cf:bb:4d:73:e1:60:a9:c0:05:e2:6b: cb:fc:15:cb:cb:84:dc:7c:bf:7b:d3:04:12:8d:b2:91:63:85: 7a:d9:ff:e2:31:c7:78:42:0a:48:3d:6a:22:db:c7:d1:59:9d: 3c:fd:2b:66:c5:d2:bb:da:d2:67:21:8a:40:ac:9f:9f:a0:6e: 95:54:72:27:b6:8a:9a:2a:66:e4:8c:b9:c4:36:96:4f:8d:1a: a1:2f:b0:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/aiMLiOFrT5uByAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYxNFoXDTI1MDczMDE3MjYxNFowLzEtMCsGA1UEAxMk NGEzMDFlYmQtYmZmMi00ODZjLWEzOGYtNGRmMTcyOGVlM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqkRergj6aL6p+cVwEUL9yXQ7fDURGSMplhm lS6I6Pdtwrok02awHxoeVnA7McBdGk2Ak5999NxR0KQJO2lQHIbVDG3/so7J1NU5 cWja/L3ph0EoKpGZWTX5dnCJOo8kEeKZEcBQcx8uU2rX2K4zbdawNvSyg3GQb99o 0aWCEkBQTymTyQjaCx20Lmb8FUwg2XH7p5ph9fOdeHnlfbvp0EmH3YOMOWdY3dkw SV1+wuSmBGZYn8nSIbrnqFcmBwizo9CJ9Rf1CyAA4BTDph8D/ZmdMqVq5K+DVTWi MC5slkhEKtmnFQf9p2tlnqNTTAcHNWWSP/I/Ox1qc2PIJnuCTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADID6UTvgmQldvceaj4yeWXAnmeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjEzZjM5ZjctZTE1MS0z YzExLThkNDktODU4MWU4NzMyNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnZ34uewTCFY+5zB8NPtvWznskciuXQ67/P5WVe1FBc0kJbqJCPdp2t +1I8fyBWPLgQH2H6VE5DDnpky5SXIDSoc+H1Q0hgunt5VMm26Fj2LN0ocSe8KIu9 ZZVfRzJGL3zHEG47rmTR+Qg4h2LHLGWemjWF727xFr7yr1oT/djpb8Ue0R5Jro+Z rX7YDiMfjfjJEmvTwh9K+JNUgRntTwHZYHnaW8w4wejPu01z4WCpwAXia8v8FcvL hNx8v3vTBBKNspFjhXrZ/+Ixx3hCCkg9aiLbx9FZnTz9K2bF0rva0mchikCsn5+g bpVUcie2ipoqZuSMucQ2lk+NGqEvsMY= -----END CERTIFICATE-----Generated at Sun May 11 22:48:54 2025 by rpki-client