$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36a37225-c315-36a1-805b-79d0a7a8f429.roa File: 36a37225-c315-36a1-805b-79d0a7a8f429.roa (raw, json) Hash identifier: 3uAZoKNtctHYHMNL11+NPz9aLVgXEdbMGP5sqjJBIdI= Subject key identifier: BE:5F:29:F1:56:69:DB:F0:91:2C:D3:C3:F2:92:61:5C:AD:2F:99:34 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5AE159BDDA4315DE2B800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36a37225-c315-36a1-805b-79d0a7a8f429.roa Signing time: Thu 01 May 2025 17:10:09 +0000 ROA not before: Thu 01 May 2025 17:10:09 +0000 ROA not after: Wed 30 Jul 2025 17:10:09 +0000 asID: 22773 IP address blocks: 72.221.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:ae:15:9b:dd:a4:31:5d:e2:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:09 2025 GMT Not After : Jul 30 17:10:09 2025 GMT Subject: CN=643220cb-0430-4d53-b399-071c3cbfdb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f2:06:95:45:7b:b3:c8:b5:31:36:68:0e:5c: 1c:62:12:37:7c:ec:40:56:9b:02:24:cc:ad:97:26: 29:31:b9:7e:72:82:00:4f:17:7d:17:70:fe:79:d0: 07:a3:f6:c2:ae:42:8f:fd:96:2d:3c:ea:5c:62:08: 67:4c:1d:d8:51:4f:c2:ed:b0:e0:44:03:cc:70:2d: 3d:01:28:6f:88:12:3d:7c:9f:b2:a4:47:3b:6e:09: bd:6c:cb:9a:a4:46:d9:38:fd:e4:d4:5c:49:6c:d0: 4a:76:2d:79:bd:86:96:ef:47:b6:b5:bb:74:96:4a: 22:11:01:9d:e0:3c:55:53:3c:d7:f6:0a:8c:d2:b9: 0a:3f:76:c3:a1:d1:25:ad:9f:db:f4:fd:81:88:9e: 73:5d:dc:aa:84:54:17:38:c8:2d:5c:57:97:96:f6: f6:7c:43:c5:76:3f:c5:c5:01:50:6d:21:7f:1d:69: e7:74:ba:fb:f1:fc:a3:cd:64:71:76:32:49:92:df: f1:04:62:20:4d:8c:a4:4e:44:3e:fe:85:4b:2d:24: 27:d6:c8:12:3c:b7:a8:84:24:26:56:b3:15:48:b0: 82:e6:01:fa:91:4b:9b:bc:6c:74:7e:7a:69:22:72: 49:2a:05:14:3f:72:c5:0e:15:fa:1e:2e:f2:63:c0: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5F:29:F1:56:69:DB:F0:91:2C:D3:C3:F2:92:61:5C:AD:2F:99:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36a37225-c315-36a1-805b-79d0a7a8f429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:09:91:39:11:d0:39:a4:42:0e:12:d8:4b:06:a3:30:81:46: d3:ea:93:3f:ed:fb:24:5c:b6:9c:ed:21:c5:00:b2:0f:38:88: 10:9e:d6:f0:b3:f3:20:1b:ec:90:24:78:da:cf:9e:75:ff:0f: db:52:5c:79:b4:07:71:c5:21:09:62:41:87:e8:52:2b:fa:ae: c1:9c:87:12:ad:01:bd:42:f4:4a:1a:9c:9b:0b:b3:b1:53:3c: 57:8e:d5:52:96:ae:07:30:00:8d:74:17:5e:1f:26:d8:9d:ed: 33:26:90:85:59:04:fe:99:0f:6f:df:8a:0b:97:66:3c:56:22: ff:d9:1c:76:ae:be:a2:e6:c6:8d:e6:9b:d7:b6:32:60:64:f6: 4e:3a:41:7c:5d:3f:8e:7b:ec:e4:67:1f:86:9f:b0:95:73:67: 07:ce:60:ad:6c:74:eb:d9:db:02:91:93:63:54:7c:fe:f6:f8: 12:08:e7:b0:3b:a0:2f:24:26:0c:88:5e:09:06:27:fc:ae:99: 7c:fd:cd:8e:f2:19:11:88:9d:53:99:e6:8c:3c:a3:19:3e:c6: cc:17:8a:fd:ec:0b:3d:2b:17:f4:56:f6:e6:e6:aa:e7:86:9b: 05:85:87:dd:49:e6:f1:cb:08:31:26:e1:fc:f3:79:2d:7b:fd: 08:47:33:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19a4Vm92kMV3iuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAwOVoXDTI1MDczMDE3MTAwOVowLzEtMCsGA1UEAxMk NjQzMjIwY2ItMDQzMC00ZDUzLWIzOTktMDcxYzNjYmZkYjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPIGlUV7s8i1MTZoDlwcYhI3fOxAVpsCJMyt lyYpMbl+coIATxd9F3D+edAHo/bCrkKP/ZYtPOpcYghnTB3YUU/C7bDgRAPMcC09 AShviBI9fJ+ypEc7bgm9bMuapEbZOP3k1FxJbNBKdi15vYaW70e2tbt0lkoiEQGd 4DxVUzzX9gqM0rkKP3bDodElrZ/b9P2BiJ5zXdyqhFQXOMgtXFeXlvb2fEPFdj/F xQFQbSF/HWnndLr78fyjzWRxdjJJkt/xBGIgTYykTkQ+/oVLLSQn1sgSPLeohCQm VrMVSLCC5gH6kUubvGx0fnppInJJKgUUP3LFDhX6Hi7yY8D+XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5fKfFWadvwkSzTw/KSYVytL5k0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzZhMzcyMjUtYzMxNS0z NmExLTgwNWItNzlkMGE3YThmNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUJkTkR0DmkQg4S2EsGozCBRtPqkz/t+yRctpztIcUAsg84iBCe1vCz 8yAb7JAkeNrPnnX/D9tSXHm0B3HFIQliQYfoUiv6rsGchxKtAb1C9EoanJsLs7FT PFeO1VKWrgcwAI10F14fJtid7TMmkIVZBP6ZD2/figuXZjxWIv/ZHHauvqLmxo3m m9e2MmBk9k46QXxdP4577ORnH4afsJVzZwfOYK1sdOvZ2wKRk2NUfP72+BII57A7 oC8kJgyIXgkGJ/yumXz9zY7yGRGInVOZ5ow8oxk+xswXiv3sCz0rF/RW9ubmqueG mwWFh91J5vHLCDEm4fzzeS17/QhHM68= -----END CERTIFICATE-----Generated at Sun May 11 21:49:15 2025 by rpki-client