$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/46f94513-6162-3acb-ad94-c93022ac2800.roa File: 46f94513-6162-3acb-ad94-c93022ac2800.roa (raw, json) Hash identifier: guQe5wYaN9oVnYuq61ZuCBxey10jhLq1qQrLZUlbhOc= Subject key identifier: CB:9C:5D:55:C8:E8:1C:38:7D:60:D5:7E:61:CB:95:FF:53:03:E4:D0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDF2B8E696A87B7DDEC300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/46f94513-6162-3acb-ad94-c93022ac2800.roa Signing time: Thu 01 May 2025 17:26:49 +0000 ROA not before: Thu 01 May 2025 17:26:49 +0000 ROA not after: Wed 30 Jul 2025 17:26:49 +0000 asID: 22773 IP address blocks: 174.65.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:f2:b8:e6:96:a8:7b:7d:de:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:49 2025 GMT Not After : Jul 30 17:26:49 2025 GMT Subject: CN=c252956e-e072-4c72-a0e8-4234cb7f4f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:f3:8c:a1:e0:41:64:23:ed:0f:32:e8:21: 78:e8:4e:b1:60:9b:95:f0:20:05:d7:80:6d:af:c6: 61:84:ed:21:72:79:2c:e6:68:6d:11:4c:f1:e7:13: 53:5e:11:12:cf:cb:b9:90:cc:9f:07:57:4a:7b:69: 7a:76:2e:27:47:38:c8:96:d4:63:8a:79:35:ed:ab: 29:56:75:8d:00:fe:83:bc:e5:28:78:c2:19:04:e9: 5a:88:b8:75:b4:10:08:8d:f1:dc:ee:9f:c6:96:b7: 37:bf:53:33:39:3d:51:ac:a6:b1:da:ef:c6:e3:1d: 05:d0:4b:88:ec:fb:bd:2d:a3:9d:79:c5:55:10:88: 4b:67:7d:15:c5:5e:fc:a0:79:b2:d2:a0:3a:21:58: 71:10:bc:54:32:60:3b:41:d2:2c:1a:18:c6:72:3f: 47:6b:1e:b0:67:68:6e:e8:99:65:d4:8b:51:51:50: d1:2f:16:87:ae:b5:53:a5:54:46:a9:26:28:f7:9d: 9f:d5:31:b5:09:17:81:5d:a6:f7:25:ff:2f:70:57: ed:36:be:44:e9:40:1a:a8:34:92:b1:57:f6:3a:ca: 77:c7:33:3b:50:e7:be:e2:bb:94:2a:d0:7e:40:d3: 38:87:42:b0:c1:3d:93:d9:df:fd:d5:0f:7e:5c:6c: 6b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9C:5D:55:C8:E8:1C:38:7D:60:D5:7E:61:CB:95:FF:53:03:E4:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/46f94513-6162-3acb-ad94-c93022ac2800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:0f:d8:cc:fb:ee:37:5b:2e:14:85:52:cc:ec:b9:79:3a:46: ad:50:7c:fe:c4:75:eb:a3:d7:8e:ae:eb:ff:dd:0b:af:18:02: 93:eb:ab:7d:6b:20:dc:ec:4b:1d:95:f8:91:63:60:a2:3b:7c: f6:d3:24:f3:81:e0:20:63:f8:d8:14:2d:ba:92:55:14:10:9d: 85:78:12:83:b8:0b:de:42:23:4a:bc:20:74:9a:5e:53:8e:0a: 76:05:59:82:78:f3:81:8b:62:90:9e:ab:8c:2a:16:27:2e:76: b2:27:71:7a:00:d9:b4:93:cc:2f:6c:93:84:6f:b7:8d:3d:87: ad:0a:67:7c:53:d5:1a:08:1f:41:97:a1:0e:05:bb:4b:2c:70: 16:25:fb:c6:10:8b:ee:bc:05:ea:ad:b0:de:8d:f7:b0:5f:cd: 9c:3d:74:1e:2e:00:ec:4b:1a:05:cf:ca:49:ef:4b:cf:b7:36: 99:4c:ec:08:1d:04:6c:8b:7b:70:d6:d7:22:ec:2f:c1:f3:e0: 54:b5:a1:5e:df:ad:a9:13:ee:02:27:4d:8a:72:56:da:2e:48: 13:ce:83:6a:a6:a0:71:84:14:2c:b3:76:b8:7c:32:c8:12:20: 72:c9:10:59:1a:90:f4:72:b5:d5:eb:35:9f:40:26:a1:65:5b: fa:f4:09:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/fK45paoe33ewwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjY0OVoXDTI1MDczMDE3MjY0OVowLzEtMCsGA1UEAxMk YzI1Mjk1NmUtZTA3Mi00YzcyLWEwZTgtNDIzNGNiN2Y0ZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvrzjKHgQWQj7Q8y6CF46E6xYJuV8CAF14Bt r8ZhhO0hcnks5mhtEUzx5xNTXhESz8u5kMyfB1dKe2l6di4nRzjIltRjink17asp VnWNAP6DvOUoeMIZBOlaiLh1tBAIjfHc7p/Glrc3v1MzOT1RrKax2u/G4x0F0EuI 7Pu9LaOdecVVEIhLZ30VxV78oHmy0qA6IVhxELxUMmA7QdIsGhjGcj9Hax6wZ2hu 6Jll1ItRUVDRLxaHrrVTpVRGqSYo952f1TG1CReBXab3Jf8vcFftNr5E6UAaqDSS sVf2Osp3xzM7UOe+4ruUKtB+QNM4h0KwwT2T2d/91Q9+XGxrXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMucXVXI6Bw4fWDVfmHLlf9TA+TQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDZmOTQ1MTMtNjE2Mi0z YWNiLWFkOTQtYzkzMDIyYWMyODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcP2Mz77jdbLhSFUszsuXk6Rq1QfP7Edeuj146u6//dC68YApPrq31r INzsSx2V+JFjYKI7fPbTJPOB4CBj+NgULbqSVRQQnYV4EoO4C95CI0q8IHSaXlOO CnYFWYJ484GLYpCeq4wqFicudrIncXoA2bSTzC9sk4Rvt409h60KZ3xT1RoIH0GX oQ4Fu0sscBYl+8YQi+68BeqtsN6N97BfzZw9dB4uAOxLGgXPyknvS8+3NplM7Agd BGyLe3DW1yLsL8Hz4FS1oV7frakT7gInTYpyVtouSBPOg2qmoHGEFCyzdrh8MsgS IHLJEFkakPRytdXrNZ9AJqFlW/r0CWE= -----END CERTIFICATE-----Generated at Mon May 12 19:28:30 2025 by rpki-client