$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/338cdf57-6ebb-34c3-95a2-0eb9f603060a.roa File: 338cdf57-6ebb-34c3-95a2-0eb9f603060a.roa (raw, json) Hash identifier: hkLJA2Wfwv0AvpeJoKFZ1txElZn2o1qoyHiPZCId/3E= Subject key identifier: 14:B9:22:66:35:EA:7E:43:69:F4:60:B4:4A:9A:65:A2:D8:09:29:EF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD92A90A839742A51D3080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/338cdf57-6ebb-34c3-95a2-0eb9f603060a.roa Signing time: Thu 01 May 2025 17:26:03 +0000 ROA not before: Thu 01 May 2025 17:26:03 +0000 ROA not after: Wed 30 Jul 2025 17:26:03 +0000 asID: 22773 IP address blocks: 72.220.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:92:a9:0a:83:97:42:a5:1d:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:03 2025 GMT Not After : Jul 30 17:26:03 2025 GMT Subject: CN=ceeeefd6-560c-424d-95f7-aa62921da5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:18:be:73:99:56:d0:01:42:d6:48:3c:73: 82:99:1d:40:b2:f6:fb:9a:14:da:bd:e1:86:b5:e6: e8:5f:15:71:e8:0a:a3:9f:07:57:cc:ad:f6:af:00: 55:4e:dd:90:3d:65:06:57:2e:df:58:bf:02:6f:1c: d7:39:3d:ee:56:61:8c:0e:0a:87:8e:69:f0:41:59: e6:64:e4:07:f3:f3:10:58:f1:6c:98:52:2b:4c:c5: 4f:04:01:80:ce:03:a1:91:d3:4b:8e:49:b4:09:fb: 5e:7e:af:ff:4c:d3:4e:94:08:82:7a:6e:58:b8:d1: 61:05:26:6c:2c:17:c3:00:0d:a8:f2:23:da:40:70: 43:3c:78:0d:32:5f:10:ea:0e:34:f3:bf:42:5c:7b: 52:8f:cc:d5:66:57:5a:ea:b1:ba:8e:36:3b:6f:e3: f7:c4:c5:ac:4e:d6:e1:cf:2d:c6:c3:d9:dc:9d:72: cc:b9:a8:11:2a:63:ba:cc:60:df:2d:94:67:ee:cd: cd:a8:5d:93:5b:37:f9:0d:9b:63:5f:a5:2f:0b:ae: d4:60:96:d5:a7:e3:cf:37:17:81:d9:c9:5b:4b:c4: 8f:ae:16:5b:2d:1b:3d:b4:74:e4:f3:59:94:87:8f: 64:61:36:8f:9d:15:7a:79:c0:12:74:76:42:ed:00: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B9:22:66:35:EA:7E:43:69:F4:60:B4:4A:9A:65:A2:D8:09:29:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/338cdf57-6ebb-34c3-95a2-0eb9f603060a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d7:b3:b2:17:02:3d:23:1d:1b:d4:fc:58:0b:f9:e6:46:01: e3:e7:62:76:0b:f2:bd:26:f8:21:be:e1:81:59:e1:5b:5b:9e: e9:b0:90:20:7c:78:f1:f7:2d:a5:df:17:8b:78:02:e9:4a:d1: 6d:7e:9a:e3:f9:e3:64:ff:0b:1f:b3:03:ba:e9:fa:45:84:d0: 38:e3:2c:e0:7a:10:f4:47:72:e4:69:7f:4e:73:42:3d:49:0b: f5:67:0e:3f:0d:b5:17:0f:ec:b6:53:10:7a:d1:c2:f3:54:47: 82:11:16:0c:88:1b:7f:ec:2a:34:65:b0:82:c1:07:ed:0a:55: b6:46:61:1c:de:bd:b6:a6:3a:a7:d5:33:df:da:93:c6:47:8c: 6e:a9:b8:33:ae:48:99:e9:c3:30:ba:c1:1d:27:dd:13:46:8c: ff:b0:72:5f:e5:71:c8:bc:22:d4:2e:1e:27:5e:62:99:5b:08: 80:d5:59:64:8d:6e:22:be:7c:6c:3b:dd:75:6e:72:b8:35:d7: 2f:95:16:2d:bd:9b:2f:95:6d:96:79:19:78:7c:2a:8a:75:a1: d3:ae:43:27:ec:ae:b9:85:10:b3:5a:80:22:c2:17:6c:2e:94: b1:06:e1:5a:f6:63:fd:1e:ba:55:50:4a:84:72:ea:9e:b4:ce: 91:1e:6f:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/ZKpCoOXQqUdMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYwM1oXDTI1MDczMDE3MjYwM1owLzEtMCsGA1UEAxMk Y2VlZWVmZDYtNTYwYy00MjRkLTk1ZjctYWE2MjkyMWRhNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssIYvnOZVtABQtZIPHOCmR1Asvb7mhTaveGG teboXxVx6AqjnwdXzK32rwBVTt2QPWUGVy7fWL8CbxzXOT3uVmGMDgqHjmnwQVnm ZOQH8/MQWPFsmFIrTMVPBAGAzgOhkdNLjkm0Cftefq//TNNOlAiCem5YuNFhBSZs LBfDAA2o8iPaQHBDPHgNMl8Q6g40879CXHtSj8zVZlda6rG6jjY7b+P3xMWsTtbh zy3Gw9ncnXLMuagRKmO6zGDfLZRn7s3NqF2TWzf5DZtjX6UvC67UYJbVp+PPNxeB 2clbS8SPrhZbLRs9tHTk81mUh49kYTaPnRV6ecASdHZC7QAc6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBS5ImY16n5DafRgtEqaZaLYCSnvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzM4Y2RmNTctNmViYi0z NGMzLTk1YTItMGViOWY2MDMwNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfXs7IXAj0jHRvU/FgL+eZGAePnYnYL8r0m+CG+4YFZ4VtbnumwkCB8 ePH3LaXfF4t4AulK0W1+muP542T/Cx+zA7rp+kWE0DjjLOB6EPRHcuRpf05zQj1J C/VnDj8NtRcP7LZTEHrRwvNUR4IRFgyIG3/sKjRlsILBB+0KVbZGYRzevbamOqfV M9/ak8ZHjG6puDOuSJnpwzC6wR0n3RNGjP+wcl/lcci8ItQuHideYplbCIDVWWSN biK+fGw73XVucrg11y+VFi29my+VbZZ5GXh8Kop1odOuQyfsrrmFELNagCLCF2wu lLEG4Vr2Y/0eulVQSoRy6p60zpEeb1U= -----END CERTIFICATE-----Generated at Sun May 11 16:13:20 2025 by rpki-client