$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dcf7bf-46e6-325f-8492-b033a693d4aa.roa File: 28dcf7bf-46e6-325f-8492-b033a693d4aa.roa (raw, json) Hash identifier: MnV4+sNsKbcDGsBgVv2b+85J6kv+r9tgpFI1qDF3EEk= Subject key identifier: 17:7E:6A:04:11:4B:94:D8:CB:2C:51:5C:75:EA:05:0B:C7:65:6A:A9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD827572AC6B057FF65480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dcf7bf-46e6-325f-8492-b033a693d4aa.roa Signing time: Thu 01 May 2025 17:25:56 +0000 ROA not before: Thu 01 May 2025 17:25:56 +0000 ROA not after: Wed 30 Jul 2025 17:25:56 +0000 asID: 22773 IP address blocks: 72.199.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:82:75:72:ac:6b:05:7f:f6:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:56 2025 GMT Not After : Jul 30 17:25:56 2025 GMT Subject: CN=ba2777f2-9812-4577-8b8b-95c070e98f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:41:c7:02:33:ff:db:11:29:cd:20:e1:09:06: 23:e7:2a:88:85:01:65:88:a3:b3:df:58:48:b6:60: 97:ee:70:8c:b3:10:04:ee:6e:1b:1e:29:49:e5:b9: 22:1d:94:09:96:f1:1c:5e:9c:b7:5e:68:bb:62:56: df:44:2e:e7:89:bf:fa:17:74:78:86:84:bf:59:8d: 46:e9:da:3e:1e:a4:c7:05:e9:6b:50:32:3b:32:9d: 64:45:14:d2:57:70:4b:45:33:78:32:25:ff:0c:08: 9c:6c:ca:23:13:f8:44:01:34:bb:e3:b3:05:0c:34: 78:1b:9b:02:5f:ef:dc:67:62:5e:1c:c9:d6:5e:ba: 3e:85:6f:4a:e5:fc:ef:2d:45:62:cc:d2:dc:0c:7f: b7:31:9c:43:f8:3a:73:d2:ae:bd:dd:68:a8:80:27: 55:16:f2:c2:e8:9d:45:a8:eb:18:87:db:ef:69:3c: 3e:7f:78:9a:1f:b1:16:ba:cb:64:c5:0f:36:b9:04: 0d:3d:13:9a:2f:a3:1c:fb:60:26:ad:e1:7d:c7:12: 01:b8:4b:e9:6c:ca:73:18:bb:75:9a:8e:05:bb:0b: 14:09:e1:62:08:8f:0f:95:61:5c:4b:79:43:02:01: b7:d2:70:d1:a5:d5:17:fe:10:00:e2:8c:82:41:86: 0c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7E:6A:04:11:4B:94:D8:CB:2C:51:5C:75:EA:05:0B:C7:65:6A:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dcf7bf-46e6-325f-8492-b033a693d4aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:9d:da:89:f7:32:65:27:3e:35:f5:64:ad:64:e4:7e:5d:07: 0d:20:09:f8:80:23:a3:4e:3d:8c:88:c7:e3:a1:6a:37:54:b2: b0:bd:c3:ba:2e:d0:a2:9c:c9:73:b7:02:1e:fe:ea:cd:59:3b: 00:6b:34:46:4e:70:f1:7b:ec:2b:d8:56:21:3c:64:94:7d:35: ba:28:68:c7:c6:b5:34:cb:7a:d1:b1:13:4c:4c:ac:24:1c:43: 78:4f:98:0c:89:de:30:4e:99:bb:b0:3c:9e:13:98:83:f6:5a: 96:26:be:d5:70:3c:bf:89:50:62:34:70:32:8b:49:d8:91:bc: f8:c9:de:32:49:ae:a7:9b:3e:ca:31:3d:41:dc:ba:ef:77:77: c7:3d:6d:a2:c7:f7:11:47:98:dd:c3:42:10:5a:52:7e:05:ab: 7f:6e:33:6a:00:16:73:22:04:12:7f:87:2b:cd:d4:85:a7:65: 70:ec:ad:81:fd:4c:b8:e7:27:10:60:2c:c9:72:b5:fb:79:91: a3:7f:d8:ca:a2:16:08:a2:82:3b:3c:c2:4d:59:29:58:d4:c4: 14:3a:0b:64:70:0b:d9:6f:16:13:af:c4:27:d7:c2:74:de:e6: d3:52:61:aa:de:f5:98:33:07:ce:e2:e5:bd:ea:79:47:2a:0a: 42:b1:17:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/YJ1cqxrBX/2VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjU1NloXDTI1MDczMDE3MjU1NlowLzEtMCsGA1UEAxMk YmEyNzc3ZjItOTgxMi00NTc3LThiOGItOTVjMDcwZTk4Zjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEHHAjP/2xEpzSDhCQYj5yqIhQFliKOz31hI tmCX7nCMsxAE7m4bHilJ5bkiHZQJlvEcXpy3Xmi7YlbfRC7nib/6F3R4hoS/WY1G 6do+HqTHBelrUDI7Mp1kRRTSV3BLRTN4MiX/DAicbMojE/hEATS747MFDDR4G5sC X+/cZ2JeHMnWXro+hW9K5fzvLUVizNLcDH+3MZxD+Dpz0q693WiogCdVFvLC6J1F qOsYh9vvaTw+f3iaH7EWustkxQ82uQQNPROaL6Mc+2AmreF9xxIBuEvpbMpzGLt1 mo4FuwsUCeFiCI8PlWFcS3lDAgG30nDRpdUX/hAA4oyCQYYM4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBd+agQRS5TYyyxRXHXqBQvHZWqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhkY2Y3YmYtNDZlNi0z MjVmLTg0OTItYjAzM2E2OTNkNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCd2on3MmUnPjX1ZK1k5H5dBw0gCfiAI6NOPYyIx+OhajdUsrC9w7ou 0KKcyXO3Ah7+6s1ZOwBrNEZOcPF77CvYViE8ZJR9NbooaMfGtTTLetGxE0xMrCQc Q3hPmAyJ3jBOmbuwPJ4TmIP2WpYmvtVwPL+JUGI0cDKLSdiRvPjJ3jJJrqebPsox PUHcuu93d8c9baLH9xFHmN3DQhBaUn4Fq39uM2oAFnMiBBJ/hyvN1IWnZXDsrYH9 TLjnJxBgLMlytft5kaN/2MqiFgiigjs8wk1ZKVjUxBQ6C2RwC9lvFhOvxCfXwnTe 5tNSYare9ZgzB87i5b3qeUcqCkKxF0o= -----END CERTIFICATE-----Generated at Tue May 13 01:51:21 2025 by rpki-client