$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/371ba68f-1cbb-3a49-8381-36a11a51d60b.roa File: 371ba68f-1cbb-3a49-8381-36a11a51d60b.roa (raw, json) Hash identifier: giWAfwcHSLX93bV0BNIvBLlLjn2AN6qUsaVUwYqyBsA= Subject key identifier: D1:03:38:77:3D:3E:0E:1A:BD:1A:0B:5F:B0:C1:71:A9:93:DE:FA:3E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD5EA81D48E11AC96C1540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/371ba68f-1cbb-3a49-8381-36a11a51d60b.roa Signing time: Thu 01 May 2025 17:25:39 +0000 ROA not before: Thu 01 May 2025 17:25:39 +0000 ROA not after: Wed 30 Jul 2025 17:25:39 +0000 asID: 22773 IP address blocks: 72.197.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:5e:a8:1d:48:e1:1a:c9:6c:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:39 2025 GMT Not After : Jul 30 17:25:39 2025 GMT Subject: CN=7ac26b7f-b0fb-42a3-90ef-726ded3602f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:c6:68:4c:11:37:29:a0:5b:47:11:fc:e5: 0e:76:6b:b7:f9:2e:ac:d9:0f:ed:26:67:cd:c6:2b: a3:cc:a8:51:38:2a:8d:5f:48:d1:bb:0b:d1:f9:70: eb:20:c9:56:df:48:c7:49:26:ec:89:64:32:c3:d5: f5:9f:5f:21:85:cd:dd:a5:9f:eb:e3:e6:fc:33:db: 85:ab:90:8b:ec:d8:1d:a1:1e:6f:67:c2:18:ff:88: e8:5b:57:c8:64:01:40:49:3c:70:0e:79:d9:2f:d7: fd:04:4e:9c:66:1c:09:3b:5a:7f:9b:0a:0b:1d:62: a9:5a:85:ce:d8:09:a2:fa:f1:a3:e2:2d:4d:af:4b: 84:c1:54:83:2f:f6:f2:95:11:59:78:19:f4:70:ba: 81:2e:2a:9c:c8:18:9f:65:30:e4:aa:14:c2:bc:21: 52:53:25:f9:e8:bd:1a:31:f6:c1:e2:cc:f3:77:e5: 6e:38:91:61:14:78:0a:44:9c:70:32:97:28:a5:d8: 7f:09:7e:a4:fc:4e:c6:d7:66:0f:01:73:ff:9c:01: 54:19:2d:52:28:ec:0a:1f:d7:6e:fa:6c:c7:d7:6a: 84:67:11:0d:0b:e3:a6:11:6d:3f:1d:fd:9c:65:fa: 98:51:d5:c5:20:ff:76:a1:6a:84:d9:8c:28:2a:7f: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:03:38:77:3D:3E:0E:1A:BD:1A:0B:5F:B0:C1:71:A9:93:DE:FA:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/371ba68f-1cbb-3a49-8381-36a11a51d60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:41:d6:84:27:f6:1d:67:3b:4c:8c:67:af:6f:b8:e5:e5:d5: d6:ad:d2:53:a5:88:08:a1:09:92:18:2d:1c:2e:54:1b:b9:36: 39:d2:69:2a:80:21:18:0d:3b:d7:5c:9d:7b:c9:48:cc:57:dd: a8:e0:36:04:4b:0f:5b:6f:30:05:bd:58:ea:dd:42:39:ac:41: 94:91:3d:8d:1e:ec:6d:fe:fb:4e:ca:94:af:30:77:d3:65:c2: 3e:c8:f5:5a:ac:cf:d9:e6:c5:b5:20:b6:1f:88:6d:ef:ef:49: 53:d5:d5:12:00:06:11:66:b6:5b:0f:a2:0d:03:4b:db:05:c0: 0f:a2:08:e6:ff:f3:bc:e7:aa:af:89:7f:fb:f7:be:c4:b0:7b: 2c:0e:25:6d:21:49:3b:97:77:4b:49:ff:8a:09:b2:a7:c6:ad: b8:03:2d:bc:21:8f:44:70:ef:b4:8d:13:67:8c:fc:24:58:6c: 23:12:b9:6a:21:60:9b:d8:ce:5d:56:59:ce:b4:22:b4:ce:1b: d5:5e:5c:e6:ac:3d:63:7a:19:24:b8:4d:8a:eb:5f:71:84:ca: c2:a1:75:db:26:68:ed:f5:bc:d9:f8:2d:f5:bb:20:a1:ce:39: 64:6c:4a:69:32:2f:34:31:ab:c0:d0:c3:ce:25:a7:68:99:0f: 26:38:4b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/V6oHUjhGslsFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUzOVoXDTI1MDczMDE3MjUzOVowLzEtMCsGA1UEAxMk N2FjMjZiN2YtYjBmYi00MmEzLTkwZWYtNzI2ZGVkMzYwMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLPGaEwRNymgW0cR/OUOdmu3+S6s2Q/tJmfN xiujzKhROCqNX0jRuwvR+XDrIMlW30jHSSbsiWQyw9X1n18hhc3dpZ/r4+b8M9uF q5CL7NgdoR5vZ8IY/4joW1fIZAFASTxwDnnZL9f9BE6cZhwJO1p/mwoLHWKpWoXO 2Ami+vGj4i1Nr0uEwVSDL/bylRFZeBn0cLqBLiqcyBifZTDkqhTCvCFSUyX56L0a MfbB4szzd+VuOJFhFHgKRJxwMpcopdh/CX6k/E7G12YPAXP/nAFUGS1SKOwKH9du +mzH12qEZxENC+OmEW0/Hf2cZfqYUdXFIP92oWqE2YwoKn8VqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEDOHc9Pg4avRoLX7DBcamT3vo+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzcxYmE2OGYtMWNiYi0z YTQ5LTgzODEtMzZhMTFhNTFkNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMUMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1B1oQn9h1nO0yMZ69vuOXl1dat0lOliAihCZIYLRwuVBu5NjnSaSqA IRgNO9dcnXvJSMxX3ajgNgRLD1tvMAW9WOrdQjmsQZSRPY0e7G3++07KlK8wd9Nl wj7I9Vqsz9nmxbUgth+Ibe/vSVPV1RIABhFmtlsPog0DS9sFwA+iCOb/87znqq+J f/v3vsSweywOJW0hSTuXd0tJ/4oJsqfGrbgDLbwhj0Rw77SNE2eM/CRYbCMSuWoh YJvYzl1WWc60IrTOG9VeXOasPWN6GSS4TYrrX3GEysKhddsmaO31vNn4LfW7IKHO OWRsSmkyLzQxq8DQw84lp2iZDyY4S+U= -----END CERTIFICATE-----Generated at Sun May 11 15:17:33 2025 by rpki-client