$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25c47e6c-7b67-35d0-9488-e9d789589819.roa File: 25c47e6c-7b67-35d0-9488-e9d789589819.roa (raw, json) Hash identifier: ZVmECqZU/IN7DKaK5cARHN8705tb123QaFFLr8V+N5U= Subject key identifier: C7:A3:33:4E:64:A7:72:24:22:A6:34:74:B9:CE:A9:1E:1A:2F:63:FD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD900B0596D2224A18E300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25c47e6c-7b67-35d0-9488-e9d789589819.roa Signing time: Thu 01 May 2025 17:26:02 +0000 ROA not before: Thu 01 May 2025 17:26:02 +0000 ROA not after: Wed 30 Jul 2025 17:26:02 +0000 asID: 22773 IP address blocks: 72.199.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:90:0b:05:96:d2:22:4a:18:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:02 2025 GMT Not After : Jul 30 17:26:02 2025 GMT Subject: CN=b3a270bc-242b-44c9-ac43-2b6220d42994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:ec:67:06:d7:fd:9e:ec:14:17:35:de:54: b1:ac:20:34:50:f7:a9:75:46:cd:01:1e:5f:6c:d3: aa:70:f7:34:da:aa:b1:09:7c:2f:96:fa:1b:52:e6: 6c:87:8b:73:9b:d3:cc:87:a9:01:15:64:1a:87:e8: 67:72:5e:55:17:a4:54:c7:f1:45:0e:3c:b7:76:5d: b3:a5:df:d8:95:c4:dd:4b:88:86:ca:ca:f9:c0:43: 31:6e:cd:f3:9d:39:1d:89:c4:98:85:92:66:4c:9e: 31:09:ea:6e:7d:c6:63:10:c6:ed:86:3d:4c:d8:cb: 3d:2b:cc:c3:cd:a2:f0:16:95:7c:ae:f9:29:6a:62: 27:6c:72:39:8b:de:7f:ec:10:1e:a2:9f:1b:25:78: c8:c0:c7:47:91:5f:18:9d:41:49:24:f0:b7:32:7d: ef:2b:9b:41:b3:89:20:d6:19:f5:ba:06:73:c8:d3: a4:7a:d4:51:39:b8:5e:8d:a2:85:ba:2c:15:d5:68: 08:c1:e1:68:74:1b:0f:bc:49:48:c8:9a:e8:3d:2d: 84:b3:d9:d6:40:d8:cd:09:f3:56:48:38:eb:15:06: 7c:ca:2e:cd:c2:55:4a:a8:d4:84:e9:1a:b5:68:d6: 67:7c:9b:bb:0f:21:fa:70:49:eb:c6:dc:07:a9:9b: f6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A3:33:4E:64:A7:72:24:22:A6:34:74:B9:CE:A9:1E:1A:2F:63:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25c47e6c-7b67-35d0-9488-e9d789589819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0d:4e:cc:6c:0d:27:43:35:27:0a:02:10:79:6d:9a:a8:57: 8e:31:9c:f8:ad:76:1e:dd:92:9c:c1:d1:32:cd:6e:f6:f1:27: 45:35:5c:dc:b4:e3:5c:74:80:d7:9c:bd:42:f4:0b:c7:93:e8: da:33:0b:77:bb:1f:2c:1f:92:cb:b1:6c:d2:49:e8:18:30:c6: 12:e4:bc:88:e1:e1:1d:11:47:67:95:13:07:02:89:c6:69:9a: 27:00:f0:61:72:60:3e:52:47:f2:80:5f:5c:fa:8b:20:21:8d: be:28:42:8f:ae:35:3c:74:ed:cb:0d:13:db:fc:44:f9:e5:2b: 1e:2c:c4:1f:4f:dc:55:91:8a:ff:75:5c:84:47:aa:8c:90:31: c8:e2:cf:1e:49:4e:86:4a:f8:c2:55:a9:3d:4f:f1:23:26:6a: 82:f6:dd:e9:36:27:e0:f3:f7:42:d6:fb:20:fa:dd:2c:bc:50: 9e:34:df:9d:ec:53:5c:12:ec:31:dc:7b:63:66:66:df:85:58: 2b:40:4f:8f:5e:77:ec:ef:bd:4c:bb:74:de:60:1b:f6:61:bc: da:f3:9c:be:6a:61:f0:44:e4:9f:75:44:47:5a:32:a6:dc:ac: 76:32:54:b2:68:12:67:9b:70:35:63:6c:f6:f3:0b:bf:14:19: 9b:e6:61:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/ZALBZbSIkoY4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYwMloXDTI1MDczMDE3MjYwMlowLzEtMCsGA1UEAxMk YjNhMjcwYmMtMjQyYi00NGM5LWFjNDMtMmI2MjIwZDQyOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ATsZwbX/Z7sFBc13lSxrCA0UPepdUbNAR5f bNOqcPc02qqxCXwvlvobUuZsh4tzm9PMh6kBFWQah+hncl5VF6RUx/FFDjy3dl2z pd/YlcTdS4iGysr5wEMxbs3znTkdicSYhZJmTJ4xCepufcZjEMbthj1M2Ms9K8zD zaLwFpV8rvkpamInbHI5i95/7BAeop8bJXjIwMdHkV8YnUFJJPC3Mn3vK5tBs4kg 1hn1ugZzyNOketRRObhejaKFuiwV1WgIweFodBsPvElIyJroPS2Es9nWQNjNCfNW SDjrFQZ8yi7NwlVKqNSE6Rq1aNZnfJu7DyH6cEnrxtwHqZv2+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMejM05kp3IkIqY0dLnOqR4aL2P9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjVjNDdlNmMtN2I2Ny0z NWQwLTk0ODgtZTlkNzg5NTg5ODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgNTsxsDSdDNScKAhB5bZqoV44xnPitdh7dkpzB0TLNbvbxJ0U1XNy0 41x0gNecvUL0C8eT6NozC3e7HywfksuxbNJJ6BgwxhLkvIjh4R0RR2eVEwcCicZp micA8GFyYD5SR/KAX1z6iyAhjb4oQo+uNTx07csNE9v8RPnlKx4sxB9P3FWRiv91 XIRHqoyQMcjizx5JToZK+MJVqT1P8SMmaoL23ek2J+Dz90LW+yD63Sy8UJ40353s U1wS7DHce2NmZt+FWCtAT49ed+zvvUy7dN5gG/ZhvNrznL5qYfBE5J91REdaMqbc rHYyVLJoEmebcDVjbPbzC78UGZvmYUY= -----END CERTIFICATE-----Generated at Sun May 11 00:46:49 2025 by rpki-client