$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d09dd0a-98bc-39e9-bba7-64ea2f886eb2.roa File: 3d09dd0a-98bc-39e9-bba7-64ea2f886eb2.roa (raw, json) Hash identifier: yO+epp+ezhb8qaCHBFJM+4iOKs3P0Y9JbD1B++Uzip8= Subject key identifier: 01:98:26:1E:98:BB:A8:42:20:9C:FB:A3:00:E7:4C:65:F5:82:7B:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDB132B11DC61624567A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d09dd0a-98bc-39e9-bba7-64ea2f886eb2.roa Signing time: Thu 01 May 2025 17:26:18 +0000 ROA not before: Thu 01 May 2025 17:26:18 +0000 ROA not after: Wed 30 Jul 2025 17:26:18 +0000 asID: 22773 IP address blocks: 72.221.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:b1:32:b1:1d:c6:16:24:56:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:18 2025 GMT Not After : Jul 30 17:26:18 2025 GMT Subject: CN=afc3916d-9f08-4dc8-b624-9d0b0db050ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:10:37:ea:45:82:81:c6:b4:0b:50:b4:97: b1:a8:be:e4:7e:9a:c8:62:85:f4:7b:5f:f0:85:6b: 35:47:18:65:e9:c1:9b:ce:9e:5b:04:11:a1:be:f1: 75:62:77:3c:88:76:75:cf:56:cc:aa:40:4e:96:27: 45:7e:c7:db:d0:62:19:ba:73:d7:83:44:0c:2c:4a: 10:06:16:3b:4d:33:a2:ed:35:a0:fc:d2:f2:d5:90: 63:54:ae:f7:1d:04:72:47:90:2f:90:b4:c6:6e:54: 0f:bd:bc:f9:f8:4b:ee:f2:2b:fa:d8:1d:eb:f8:c9: 85:3f:4c:b5:f6:4a:67:12:2a:ea:9b:b3:39:fd:24: c8:2e:38:31:5e:d4:59:8a:ea:47:a2:4e:39:a6:0e: 06:59:f1:b4:9a:95:de:07:74:b2:59:30:56:f6:f2: 8e:e7:36:6a:33:f4:de:18:d3:bd:91:45:85:a4:71: e4:af:99:b1:bf:e3:62:61:e3:37:0a:19:ea:c4:da: eb:80:f6:d9:ec:a7:3e:2c:47:ae:8c:2d:81:c9:a7: 75:5c:e1:9d:67:ef:0e:5c:55:82:c1:a8:f8:a5:47: 8e:ab:de:b3:c2:db:55:a1:b1:41:36:49:35:f1:c4: 59:60:37:7a:81:68:de:7a:4c:4e:0d:7d:4f:70:4e: d2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:98:26:1E:98:BB:A8:42:20:9C:FB:A3:00:E7:4C:65:F5:82:7B:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d09dd0a-98bc-39e9-bba7-64ea2f886eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:7c:a2:59:e1:3b:c4:ae:27:fe:11:b1:2c:00:92:4d:f2:36: 72:ec:30:5f:e6:c2:91:67:16:dd:e7:41:0a:6e:a7:14:90:9a: 7b:9f:3c:26:22:a1:d2:86:dd:23:cd:59:0a:db:e1:fd:e2:8a: 53:a2:72:6d:7d:d9:9d:7d:55:27:6e:ff:fa:ef:84:ec:9b:ec: a3:1b:1d:8b:e1:f1:fa:2e:d9:0d:7a:8c:07:47:9a:7f:87:92: 3c:79:e9:3f:a7:d3:25:fd:b5:5c:38:49:5c:7b:f6:28:be:85: 48:b4:22:86:86:08:94:ec:c1:66:21:bb:70:de:d7:2d:53:7b: 2d:9f:26:0c:eb:64:71:09:c7:c0:8f:22:6b:af:ea:f1:de:6e: b9:93:d3:2d:11:0c:5c:07:03:39:f1:75:19:16:ce:0b:ae:84: 3f:36:be:b9:e2:90:10:01:e8:f5:af:25:11:c7:a3:1c:a9:48: 1c:ea:56:ac:25:08:f4:82:7f:af:80:85:f8:66:45:7f:39:eb: ab:d1:c6:ee:39:6b:a7:0a:60:68:7e:fd:d8:09:0d:f6:87:3b: 82:5e:f1:a4:f8:88:14:53:7a:5f:97:4b:88:2f:96:a8:cc:df: 5c:c6:33:45:f9:e8:2e:e1:3e:ad:77:db:fc:83:83:bc:74:65: 30:a6:16:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/bEysR3GFiRWeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYxOFoXDTI1MDczMDE3MjYxOFowLzEtMCsGA1UEAxMk YWZjMzkxNmQtOWYwOC00ZGM4LWI2MjQtOWQwYjBkYjA1MGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEsQN+pFgoHGtAtQtJexqL7kfprIYoX0e1/w hWs1Rxhl6cGbzp5bBBGhvvF1Ync8iHZ1z1bMqkBOlidFfsfb0GIZunPXg0QMLEoQ BhY7TTOi7TWg/NLy1ZBjVK73HQRyR5AvkLTGblQPvbz5+Evu8iv62B3r+MmFP0y1 9kpnEirqm7M5/STILjgxXtRZiupHok45pg4GWfG0mpXeB3SyWTBW9vKO5zZqM/Te GNO9kUWFpHHkr5mxv+NiYeM3ChnqxNrrgPbZ7Kc+LEeujC2Byad1XOGdZ+8OXFWC waj4pUeOq96zwttVobFBNkk18cRZYDd6gWjeekxODX1PcE7SLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGYJh6Yu6hCIJz7owDnTGX1gntBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2QwOWRkMGEtOThiYy0z OWU5LWJiYTctNjRlYTJmODg2ZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF8olnhO8SuJ/4RsSwAkk3yNnLsMF/mwpFnFt3nQQpupxSQmnufPCYi odKG3SPNWQrb4f3iilOicm192Z19VSdu//rvhOyb7KMbHYvh8fou2Q16jAdHmn+H kjx56T+n0yX9tVw4SVx79ii+hUi0IoaGCJTswWYhu3De1y1Tey2fJgzrZHEJx8CP Imuv6vHebrmT0y0RDFwHAznxdRkWzguuhD82vrnikBAB6PWvJRHHoxypSBzqVqwl CPSCf6+AhfhmRX8566vRxu45a6cKYGh+/dgJDfaHO4Je8aT4iBRTel+XS4gvlqjM 31zGM0X56C7hPq132/yDg7x0ZTCmFuQ= -----END CERTIFICATE-----Generated at Sun May 11 22:44:58 2025 by rpki-client