$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28ad6f02-df9a-3053-8c93-a93261663245.roa File: 28ad6f02-df9a-3053-8c93-a93261663245.roa (raw, json) Hash identifier: 8Q6Kt+ZdEXGWjG/ia7o8Wn+atpzy7Htgi8BrW8jaAWQ= Subject key identifier: 55:C6:03:60:CC:61:7E:77:22:3D:D9:54:8E:0D:D2:97:96:84:4E:60 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5A7181B52E723F1C2DA28 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28ad6f02-df9a-3053-8c93-a93261663245.roa Signing time: Thu 01 May 2025 17:10:06 +0000 ROA not before: Thu 01 May 2025 17:10:06 +0000 ROA not after: Wed 30 Jul 2025 17:10:06 +0000 asID: 22773 IP address blocks: 72.209.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:a7:18:1b:52:e7:23:f1:c2:da:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:06 2025 GMT Not After : Jul 30 17:10:06 2025 GMT Subject: CN=6e88bc68-28f1-4ac4-b69f-e815c1610885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e4:cc:33:8f:80:bf:2f:74:02:61:c5:e7:a6: 3e:d5:d8:85:d3:83:3e:13:41:d1:7a:0e:cf:62:23: 2a:42:a6:26:61:17:cd:00:61:01:5d:b2:78:22:69: a5:cb:9d:69:1b:88:b5:ab:96:1e:82:93:b0:62:7b: e8:ec:86:c1:e6:a2:83:1d:cc:14:0e:26:31:dd:03: 55:4d:a2:34:e5:32:3b:c6:e1:c4:05:7a:90:c4:af: 1b:e6:76:f6:a8:ae:57:ba:72:84:c5:26:bd:58:af: 57:e1:02:84:7a:29:7a:44:5c:78:c0:5c:74:01:c4: cb:60:6c:63:04:6b:c2:8a:76:15:a0:d2:54:a3:d4: 47:ad:94:48:bb:00:70:ac:9e:b7:04:74:44:c2:0e: 17:e2:59:10:f7:8d:2c:5a:e7:8f:47:5b:89:47:1d: 2c:ca:84:30:da:8a:00:08:2e:05:b6:79:b8:d5:4b: a5:7e:c3:23:af:de:63:9f:7d:a2:19:ec:54:2c:d8: 25:c9:41:3a:3a:4a:d2:74:96:df:05:af:77:69:fd: 40:ba:a3:28:e8:4f:0a:b0:03:36:b9:60:ec:c0:d6: f3:2d:39:4c:d5:c6:da:c0:9e:c4:2c:06:dc:92:4f: b3:6e:a6:f0:d3:b3:dc:d2:d3:ac:87:0c:5b:a4:82: f1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C6:03:60:CC:61:7E:77:22:3D:D9:54:8E:0D:D2:97:96:84:4E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28ad6f02-df9a-3053-8c93-a93261663245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f2:fe:c5:7d:da:1a:e7:c3:10:3f:af:5d:31:1d:0b:e8:f0: 29:df:b4:b9:7a:3f:ae:ff:59:4d:c7:3b:f8:de:d8:3b:65:0f: 19:0c:8f:0a:b0:22:64:d9:89:d0:70:74:86:91:a9:e8:a6:e1: a7:16:28:f5:1b:c6:43:c3:7c:da:2a:2f:8a:ed:78:d1:79:59: dc:0d:b6:45:d2:8f:b2:19:a4:bd:95:9e:e1:57:4c:eb:27:fb: e5:ee:37:fe:ea:ad:9b:7b:03:c0:a8:64:ce:d9:8f:10:43:8c: a5:29:5c:db:15:af:7e:93:b3:b9:0e:3c:ea:00:3a:f8:13:96: d7:4e:f5:e9:15:b8:31:14:0f:df:22:1e:d7:46:3c:e1:25:74: d2:d0:07:69:76:94:e9:3c:65:da:1d:a9:fb:0e:53:df:ce:dd: 46:d6:ad:c6:89:db:3c:3b:71:e7:ed:b2:2d:99:4d:67:74:91: 05:e8:3d:c4:8f:77:b2:e7:89:04:1b:df:9c:07:47:6b:fa:f2: 3a:d2:00:90:0f:d8:ff:9f:85:b1:cd:e6:d4:ef:53:45:a3:e2: 93:6e:cd:09:e5:c4:c8:40:32:aa:84:d7:c3:19:f3:af:e6:92: 88:f3:5c:5f:21:92:bf:6f:e5:43:e4:53:50:c9:a4:15:d7:63: 37:ed:a0:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19acYG1LnI/HC2igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAwNloXDTI1MDczMDE3MTAwNlowLzEtMCsGA1UEAxMk NmU4OGJjNjgtMjhmMS00YWM0LWI2OWYtZTgxNWMxNjEwODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuTMM4+Avy90AmHF56Y+1diF04M+E0HReg7P YiMqQqYmYRfNAGEBXbJ4Immly51pG4i1q5YegpOwYnvo7IbB5qKDHcwUDiYx3QNV TaI05TI7xuHEBXqQxK8b5nb2qK5XunKExSa9WK9X4QKEeil6RFx4wFx0AcTLYGxj BGvCinYVoNJUo9RHrZRIuwBwrJ63BHREwg4X4lkQ940sWuePR1uJRx0syoQw2ooA CC4Ftnm41UulfsMjr95jn32iGexULNglyUE6OkrSdJbfBa93af1AuqMo6E8KsAM2 uWDswNbzLTlM1cbawJ7ELAbckk+zbqbw07Pc0tOshwxbpILxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXGA2DMYX53Ij3ZVI4N0peWhE5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhhZDZmMDItZGY5YS0z MDUzLThjOTMtYTkzMjYxNjYzMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDy/sV92hrnwxA/r10xHQvo8CnftLl6P67/WU3HO/je2DtlDxkMjwqw ImTZidBwdIaRqeim4acWKPUbxkPDfNoqL4rteNF5WdwNtkXSj7IZpL2VnuFXTOsn ++XuN/7qrZt7A8CoZM7ZjxBDjKUpXNsVr36Ts7kOPOoAOvgTltdO9ekVuDEUD98i HtdGPOEldNLQB2l2lOk8ZdodqfsOU9/O3UbWrcaJ2zw7ceftsi2ZTWd0kQXoPcSP d7LniQQb35wHR2v68jrSAJAP2P+fhbHN5tTvU0Wj4pNuzQnlxMhAMqqE18MZ86/m kojzXF8hkr9v5UPkU1DJpBXXYzftoAM= -----END CERTIFICATE-----Generated at Sun May 11 15:16:10 2025 by rpki-client