$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a9cd89f-a350-3feb-bd91-3ccf8f638ba5.roa File: 3a9cd89f-a350-3feb-bd91-3ccf8f638ba5.roa (raw, json) Hash identifier: 6yzlUqXLftXK3iWe87hEAVJ2WOf2qkBc7HmAXxraY2I= Subject key identifier: 6B:7A:E1:30:C1:6C:AA:4D:0E:6B:CD:60:A1:2D:F0:AB:F9:61:EA:78 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA616C17E12BA41F150732 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a9cd89f-a350-3feb-bd91-3ccf8f638ba5.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 72.222.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:61:6c:17:e1:2b:a4:1f:15:07:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=d7bcd545-5fc7-4011-a5a6-ee6a508a6334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:52:4d:13:5e:ed:a6:b8:e0:e3:75:4a:c2: 67:ed:26:82:4e:17:28:02:f8:c5:ac:39:3b:04:19: 7b:55:2f:23:61:c1:fe:e1:be:b7:e4:a3:06:f0:e2: cc:c3:81:8b:3a:3f:a6:d6:d0:68:f5:fc:f6:0f:05: f1:a3:3c:46:99:7f:a1:79:51:52:95:a5:5d:cb:70: 01:47:52:7e:b6:4a:11:c7:d4:3e:8b:f8:a7:23:89: 6a:dc:02:80:5a:47:8f:ec:6e:b1:a5:42:65:34:bc: a6:e8:24:45:a0:2b:73:4b:c0:cd:3f:23:f1:f3:c8: c9:0d:a7:5b:b3:70:0d:9e:95:86:f1:1d:fd:8c:59: 46:f5:96:1d:63:10:1a:14:0f:02:9a:40:ed:b9:ad: 3e:87:05:ed:a3:53:ab:11:6d:32:cf:31:62:4c:3f: 15:76:39:e9:33:e7:90:3e:f1:b0:91:e3:2a:81:5f: a6:8b:58:cf:92:ea:d5:97:f4:80:90:d6:6c:c8:a4: 90:85:0d:22:35:d7:0b:4e:4e:04:2f:9e:9f:b0:b1: 9c:4f:5e:22:ea:41:02:d8:80:61:b6:8f:84:43:42: fe:4a:66:f7:5d:8b:9b:8d:a2:83:5e:7c:21:e2:15: a9:4d:b9:06:17:ef:3c:c3:0b:22:d6:47:dd:36:f0: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7A:E1:30:C1:6C:AA:4D:0E:6B:CD:60:A1:2D:F0:AB:F9:61:EA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a9cd89f-a350-3feb-bd91-3ccf8f638ba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f4:eb:50:0e:32:31:cd:e9:f0:e5:d9:03:eb:5a:47:33:e3: 57:ea:09:10:0b:1a:68:2c:d4:4f:27:66:bf:13:7e:a6:34:35: ac:ad:4e:5c:0b:6f:16:21:ec:6b:03:a7:41:53:82:04:36:d6: 10:28:c6:89:07:df:9f:bc:b2:90:c1:11:8d:b3:f6:4a:43:23: 36:a0:bd:13:e1:00:60:1e:dc:bf:50:fc:df:5e:ed:c6:01:bd: 0f:35:1a:d9:81:12:51:8b:08:c5:68:91:73:a4:e0:57:49:b1: 57:bc:0e:41:35:98:b5:06:5a:24:a4:6d:02:33:a9:58:f5:7a: ba:d1:6a:ea:65:00:28:8c:dd:8b:bd:f4:69:e6:af:35:c8:e0: 1a:ea:72:7c:24:55:b3:8c:59:2b:1b:0d:e1:31:26:38:87:43: c3:cf:47:9f:4d:ea:fb:34:6c:46:0c:58:73:da:00:2d:08:a9: 85:19:ff:b3:cd:31:fa:ea:a8:81:e0:8a:38:fe:3b:a7:24:a7: 89:52:4d:29:26:da:93:e9:ef:74:d4:62:74:38:f2:89:84:3e: f1:aa:39:75:e4:6a:57:72:32:f5:2b:7c:81:43:54:cd:f8:0a: b1:e2:50:02:9e:16:bb:13:97:f3:e2:88:c3:fc:00:f1:28:be: 9b:26:7a:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6mFsF+ErpB8VBzIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZDdiY2Q1NDUtNWZjNy00MDExLWE1YTYtZWU2YTUwOGE2MzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVRSTRNe7aa44ON1SsJn7SaCThcoAvjFrDk7 BBl7VS8jYcH+4b635KMG8OLMw4GLOj+m1tBo9fz2DwXxozxGmX+heVFSlaVdy3AB R1J+tkoRx9Q+i/inI4lq3AKAWkeP7G6xpUJlNLym6CRFoCtzS8DNPyPx88jJDadb s3ANnpWG8R39jFlG9ZYdYxAaFA8CmkDtua0+hwXto1OrEW0yzzFiTD8VdjnpM+eQ PvGwkeMqgV+mi1jPkurVl/SAkNZsyKSQhQ0iNdcLTk4EL56fsLGcT14i6kEC2IBh to+EQ0L+Smb3XYubjaKDXnwh4hWpTbkGF+88wwsi1kfdNvDkpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGt64TDBbKpNDmvNYKEt8Kv5Yep4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2E5Y2Q4OWYtYTM1MC0z ZmViLWJkOTEtM2NjZjhmNjM4YmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFv061AOMjHN6fDl2QPrWkcz41fqCRALGmgs1E8nZr8TfqY0NaytTlwL bxYh7GsDp0FTggQ21hAoxokH35+8spDBEY2z9kpDIzagvRPhAGAe3L9Q/N9e7cYB vQ81GtmBElGLCMVokXOk4FdJsVe8DkE1mLUGWiSkbQIzqVj1errRauplACiM3Yu9 9GnmrzXI4BrqcnwkVbOMWSsbDeExJjiHQ8PPR59N6vs0bEYMWHPaAC0IqYUZ/7PN MfrqqIHgijj+O6ckp4lSTSkm2pPp73TUYnQ48omEPvGqOXXkaldyMvUrfIFDVM34 CrHiUAKeFrsTl/PiiMP8APEovpsmekU= -----END CERTIFICATE-----Generated at Mon Jun 30 19:28:00 2025 by rpki-client