$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2251d8d8-3906-326d-8d22-6a2f06fcee4f.roa File: 2251d8d8-3906-326d-8d22-6a2f06fcee4f.roa (raw, json) Hash identifier: GlFBw0Hi9cBTJsuGSNT57q00N1jqq6p2Dq53jf+3wR8= Subject key identifier: D1:B4:5E:49:0E:9B:BF:CF:C3:04:4D:E3:B6:16:8F:10:66:6F:E8:3C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD93CCB437EC60B9565B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2251d8d8-3906-326d-8d22-6a2f06fcee4f.roa Signing time: Thu 01 May 2025 17:26:04 +0000 ROA not before: Thu 01 May 2025 17:26:04 +0000 ROA not after: Wed 30 Jul 2025 17:26:04 +0000 asID: 22773 IP address blocks: 72.220.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:93:cc:b4:37:ec:60:b9:56:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:04 2025 GMT Not After : Jul 30 17:26:04 2025 GMT Subject: CN=c76ae9a6-0518-498e-a4ab-c40ceb20667a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:55:a8:3d:61:b7:aa:ff:85:0c:ef:c1:c2: c0:d3:f6:49:5f:a2:2a:6b:d3:c0:0a:23:71:fa:34: df:b1:1a:83:72:cd:ff:50:4d:3c:77:00:07:80:ca: 10:58:15:34:95:62:e8:93:dd:6c:0a:08:3c:08:43: e8:1c:62:78:0f:48:5d:8e:79:de:fd:8e:87:93:f0: 0e:9d:73:ab:fb:27:e6:45:bf:2d:32:b0:21:b9:fa: 9a:a1:f3:a6:13:69:4a:78:15:31:08:c8:6c:de:60: e2:9d:0d:6b:e9:06:99:1f:75:3a:26:3a:c4:45:52: db:61:57:ed:6e:1e:65:d1:0b:3c:e3:8e:67:07:5f: 8d:0b:ed:e4:44:3c:c6:86:eb:32:ab:82:b6:6e:bb: b4:39:2d:6c:92:55:4f:52:67:a8:66:4f:d9:ff:33: 99:61:f9:75:67:fa:83:5e:ed:39:e8:4d:66:36:20: 7f:98:1e:00:70:1a:a5:71:df:e6:e1:c1:dc:1c:42: df:61:2a:9b:a1:98:0c:99:4c:3b:30:4a:c5:32:1c: ed:72:67:51:f4:1a:b6:32:b7:f1:ca:e6:2a:06:1d: 11:cb:84:54:d9:fc:f0:a5:33:25:a2:03:45:53:e1: 22:bc:04:15:ba:67:85:8d:ea:4f:20:97:98:55:5f: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B4:5E:49:0E:9B:BF:CF:C3:04:4D:E3:B6:16:8F:10:66:6F:E8:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2251d8d8-3906-326d-8d22-6a2f06fcee4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3c:bf:22:1a:21:d5:d7:21:f5:a4:35:04:87:07:41:b8:d3: d3:36:1f:74:48:a4:a1:5f:21:18:f2:e9:fb:cf:6a:d5:c9:48: 98:4a:cc:bb:b8:2d:d6:a4:0c:c8:5a:48:49:f9:6f:02:1a:ec: 8a:e3:53:45:cf:90:e6:ec:01:19:79:90:46:cd:80:8d:09:ee: fb:9b:2d:7a:91:90:59:60:09:af:50:19:ab:9b:83:5e:f0:90: 01:83:f4:ad:a5:a6:57:c5:09:3f:4c:73:fe:64:9e:3e:f9:86: 28:5d:a9:bd:e6:b5:84:7d:9e:a1:f6:24:06:6d:f9:13:bf:65: 9f:59:35:24:2c:61:a6:7f:29:3d:9f:f1:a7:6c:64:11:d2:d8: 39:a3:ce:b8:50:d6:62:9b:15:93:44:fe:98:94:85:c5:1d:4d: 68:ca:2a:37:87:1b:07:d9:52:50:6b:b5:c3:81:14:3f:b1:53: ee:79:c2:1f:0e:7e:f0:ad:e7:97:ae:1f:5d:6c:e1:d0:11:7a: 2f:57:1d:10:40:b6:41:c4:5d:29:41:f3:74:20:3d:f0:4f:b9: 86:4c:c6:e1:b7:6e:73:22:8c:93:af:22:fa:86:77:6e:f7:b7: 6c:73:de:e9:34:14:47:1b:7b:ee:23:cf:9f:3c:fc:61:46:e2: d1:07:4d:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/ZPMtDfsYLlWWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYwNFoXDTI1MDczMDE3MjYwNFowLzEtMCsGA1UEAxMk Yzc2YWU5YTYtMDUxOC00OThlLWE0YWItYzQwY2ViMjA2NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbhVqD1ht6r/hQzvwcLA0/ZJX6Iqa9PACiNx +jTfsRqDcs3/UE08dwAHgMoQWBU0lWLok91sCgg8CEPoHGJ4D0hdjnne/Y6Hk/AO nXOr+yfmRb8tMrAhufqaofOmE2lKeBUxCMhs3mDinQ1r6QaZH3U6JjrERVLbYVft bh5l0Qs8445nB1+NC+3kRDzGhusyq4K2bru0OS1sklVPUmeoZk/Z/zOZYfl1Z/qD Xu056E1mNiB/mB4AcBqlcd/m4cHcHELfYSqboZgMmUw7MErFMhztcmdR9Bq2Mrfx yuYqBh0Ry4RU2fzwpTMlogNFU+EivAQVumeFjepPIJeYVV/RAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG0XkkOm7/PwwRN47YWjxBmb+g8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjI1MWQ4ZDgtMzkwNi0z MjZkLThkMjItNmEyZjA2ZmNlZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY8vyIaIdXXIfWkNQSHB0G409M2H3RIpKFfIRjy6fvPatXJSJhKzLu4 LdakDMhaSEn5bwIa7IrjU0XPkObsARl5kEbNgI0J7vubLXqRkFlgCa9QGaubg17w kAGD9K2lplfFCT9Mc/5knj75hihdqb3mtYR9nqH2JAZt+RO/ZZ9ZNSQsYaZ/KT2f 8adsZBHS2DmjzrhQ1mKbFZNE/piUhcUdTWjKKjeHGwfZUlBrtcOBFD+xU+55wh8O fvCt55euH11s4dARei9XHRBAtkHEXSlB83QgPfBPuYZMxuG3bnMijJOvIvqGd273 t2xz3uk0FEcbe+4jz588/GFG4tEHTSU= -----END CERTIFICATE-----Generated at Wed Jul 2 15:25:22 2025 by rpki-client