$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/309e3af1-a30e-3a51-b5f2-a700f0ef79d2.roa File: 309e3af1-a30e-3a51-b5f2-a700f0ef79d2.roa (raw, json) Hash identifier: 8MpVICP+rBaSmHxI5J/6kQMwCMVu20g80de1Ev08v3w= Subject key identifier: EE:2E:6B:D7:D7:FB:16:D7:F1:01:F7:4E:24:99:34:7A:9D:C6:2B:AE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDA6B4901D87194736A500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/309e3af1-a30e-3a51-b5f2-a700f0ef79d2.roa Signing time: Thu 01 May 2025 17:26:13 +0000 ROA not before: Thu 01 May 2025 17:26:13 +0000 ROA not after: Wed 30 Jul 2025 17:26:13 +0000 asID: 22773 IP address blocks: 72.220.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:a6:b4:90:1d:87:19:47:36:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:13 2025 GMT Not After : Jul 30 17:26:13 2025 GMT Subject: CN=467747e9-e4e2-47fc-8a99-6cedb6242123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:55:bc:65:0f:86:2a:6d:9b:01:06:4b:69:e2: 5f:85:e1:f7:a4:61:d3:29:cb:4b:1f:7d:ba:7c:16: 48:6d:98:b3:ff:d4:20:2e:ff:c9:a4:24:07:8d:93: 4b:ae:86:cb:5b:85:9e:7f:65:44:7a:37:f8:4e:f0: 4d:1a:d0:13:74:ee:81:84:cb:fb:fb:cd:ce:49:e0: 73:26:46:97:63:ff:b2:b5:68:5f:f1:b3:ac:b2:b3: 47:f9:dd:40:5f:5b:30:a5:71:6d:35:df:60:eb:b9: b2:e8:88:36:ae:d1:72:f0:00:eb:e3:10:f7:af:81: 64:42:70:d6:97:65:2b:7c:7b:cb:8d:53:cc:42:95: fe:cf:9e:a6:03:fe:6f:40:d9:1e:fb:ea:a2:a3:81: 25:49:24:df:64:47:52:25:11:31:86:df:67:59:21: 62:eb:2e:28:8d:a3:ed:ad:01:ed:5d:4d:1d:f0:1b: ba:29:b3:cc:9b:db:41:79:12:4d:8b:a4:b8:49:90: d3:e7:88:f5:03:c9:1a:29:82:ce:4d:d5:d2:37:5c: a4:23:76:6a:90:87:1b:d6:d4:85:7c:47:41:4b:81: f3:26:2d:b9:a5:a4:77:45:3b:14:0f:a8:4d:44:c3: 78:c3:ea:05:a0:f9:da:0c:56:99:02:53:09:95:e1: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2E:6B:D7:D7:FB:16:D7:F1:01:F7:4E:24:99:34:7A:9D:C6:2B:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/309e3af1-a30e-3a51-b5f2-a700f0ef79d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:02:80:4c:7d:65:55:d5:26:5e:3f:13:28:a4:4e:52:35:29: b5:9d:73:85:12:70:59:fc:b0:cb:fe:5f:d9:6b:55:41:7a:51: 36:59:9c:de:e1:60:f9:30:3e:62:88:2e:7e:5b:ba:6e:87:55: 48:84:37:94:28:3e:b2:01:31:1f:46:50:91:d6:0c:9a:d5:dc: d3:ce:f3:53:0c:a6:60:d6:11:f8:cd:bb:de:3e:69:d7:de:db: 42:f8:c8:af:8b:d3:b5:09:0d:1b:d5:85:76:75:95:e9:2b:ca: 90:8b:ac:0d:0a:2c:90:f1:ce:8d:e3:b6:d3:f0:fb:bf:b8:0e: 12:e7:b5:3f:0d:fc:14:12:e7:6c:92:45:98:e8:09:dd:ff:e3: 7e:c9:c4:87:81:f1:a9:e4:7d:3f:60:4d:7b:93:20:29:08:3e: 92:54:7b:88:c2:8b:a6:f1:20:55:be:f0:dc:f6:10:dc:b6:4b: f0:bf:25:ca:47:94:02:39:4c:72:a6:6d:b5:09:e4:06:03:a6: b6:b6:93:06:97:3e:20:34:72:0f:02:68:f1:c1:ae:de:0a:87: 31:83:6d:4e:3e:3f:c6:e1:c4:85:07:0c:18:a3:4f:60:df:3e: 38:8c:14:65:31:3d:13:28:40:b3:c4:f5:36:f7:5e:1a:39:0b: 4e:ee:d0:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/aa0kB2HGUc2pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYxM1oXDTI1MDczMDE3MjYxM1owLzEtMCsGA1UEAxMk NDY3NzQ3ZTktZTRlMi00N2ZjLThhOTktNmNlZGI2MjQyMTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVW8ZQ+GKm2bAQZLaeJfheH3pGHTKctLH326 fBZIbZiz/9QgLv/JpCQHjZNLrobLW4Wef2VEejf4TvBNGtATdO6BhMv7+83OSeBz JkaXY/+ytWhf8bOssrNH+d1AX1swpXFtNd9g67my6Ig2rtFy8ADr4xD3r4FkQnDW l2UrfHvLjVPMQpX+z56mA/5vQNke++qio4ElSSTfZEdSJRExht9nWSFi6y4ojaPt rQHtXU0d8Bu6KbPMm9tBeRJNi6S4SZDT54j1A8kaKYLOTdXSN1ykI3ZqkIcb1tSF fEdBS4HzJi25paR3RTsUD6hNRMN4w+oFoPnaDFaZAlMJleG3/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4ua9fX+xbX8QH3TiSZNHqdxiuuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzA5ZTNhZjEtYTMwZS0z YTUxLWI1ZjItYTcwMGYwZWY3OWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNzSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcCgEx9ZVXVJl4/EyikTlI1KbWdc4UScFn8sMv+X9lrVUF6UTZZnN7h YPkwPmKILn5bum6HVUiEN5QoPrIBMR9GUJHWDJrV3NPO81MMpmDWEfjNu94+adfe 20L4yK+L07UJDRvVhXZ1lekrypCLrA0KLJDxzo3jttPw+7+4DhLntT8N/BQS52yS RZjoCd3/437JxIeB8ankfT9gTXuTICkIPpJUe4jCi6bxIFW+8Nz2ENy2S/C/JcpH lAI5THKmbbUJ5AYDpra2kwaXPiA0cg8CaPHBrt4KhzGDbU4+P8bhxIUHDBijT2Df PjiMFGUxPRMoQLPE9Tb3Xho5C07u0OY= -----END CERTIFICATE-----Generated at Sat May 10 13:44:20 2025 by rpki-client