$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/473e7f71-c4a4-3db0-966a-61c53377afe5.roa File: 473e7f71-c4a4-3db0-966a-61c53377afe5.roa (raw, json) Hash identifier: sBqf+BkGZkPXr4eYWTddW0kpv6UQBhmnAocNURspyeo= Subject key identifier: 5A:24:98:D2:8A:D5:E6:C1:E9:39:40:27:13:29:52:A5:38:1A:E1:18 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F59F86B01CEE1D3E22B280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/473e7f71-c4a4-3db0-966a-61c53377afe5.roa Signing time: Thu 01 May 2025 17:10:02 +0000 ROA not before: Thu 01 May 2025 17:10:02 +0000 ROA not after: Wed 30 Jul 2025 17:10:02 +0000 asID: 22773 IP address blocks: 72.200.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:9f:86:b0:1c:ee:1d:3e:22:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:02 2025 GMT Not After : Jul 30 17:10:02 2025 GMT Subject: CN=a6ffbe00-fcd8-4df7-9abc-dd597242074b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:02:79:d9:a1:6f:f4:8c:d7:df:4b:1a:b1: 19:16:53:65:9e:21:c1:ec:e6:20:6a:7a:51:17:e8: 4f:79:11:08:d0:5c:ba:c3:b1:e3:96:1b:75:0f:51: f9:25:c7:d4:db:1d:91:75:89:7b:7e:6f:08:76:70: 82:7b:79:8b:50:93:f6:fa:af:08:15:32:a0:0a:15: f4:c6:c6:94:04:31:7d:21:fc:30:04:39:94:eb:4c: d8:0b:d7:44:c3:3e:a5:94:0d:ba:c4:a4:67:c1:e3: 24:11:46:bd:91:30:95:ab:5e:3b:a2:30:9c:78:67: 88:dd:67:87:7e:44:90:55:fe:47:5f:b1:d5:98:d7: 1a:c2:bb:12:56:2c:cb:d8:af:be:25:45:04:2c:2d: 60:63:f8:d1:6e:da:06:a9:da:85:03:02:f4:11:50: 30:37:8e:19:5f:b8:50:0d:04:cb:72:ee:29:0b:ff: 3d:e0:d4:46:7d:5d:93:4e:be:bd:4d:5d:69:c3:18: c7:04:5c:3f:ca:02:63:1e:8e:6e:0a:d8:44:c7:2b: 38:52:2f:82:56:09:e0:97:a9:31:8f:5f:08:72:7c: a2:db:2e:47:16:22:81:8f:65:bc:f1:9d:54:a7:c1: d5:d1:5c:78:49:68:74:f5:f3:44:1c:29:d0:16:c0: 35:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:24:98:D2:8A:D5:E6:C1:E9:39:40:27:13:29:52:A5:38:1A:E1:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/473e7f71-c4a4-3db0-966a-61c53377afe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:2c:e7:b1:61:f1:27:d2:a4:dc:1f:a8:ba:a3:8f:84:04:f8: 30:0c:d5:e2:d3:3f:08:67:c0:82:7b:51:e9:0c:20:d0:4a:44: 19:db:84:60:00:19:7c:63:cf:8e:ef:89:87:32:4f:52:ba:93: 01:6e:a4:7e:c0:2d:a9:58:23:c2:f8:e0:8b:37:f0:e3:69:13: 2e:20:c1:bb:37:0b:a6:b1:47:45:21:a1:64:22:6d:ac:d9:95: 4c:86:9d:d3:53:3c:54:15:5a:bd:51:90:2f:92:6a:5c:e4:28: 15:0c:04:a7:40:97:55:1b:c3:84:18:6e:4d:6d:3a:5e:48:9f: b5:17:6d:ba:da:13:98:44:eb:28:c7:6a:54:48:7f:5b:96:50: 1a:11:c8:a7:0c:ce:d1:a2:2b:f4:ae:60:fe:a0:84:86:eb:bf: 1c:c4:77:d4:2f:43:30:00:d1:5b:4f:5e:31:e3:45:df:f4:46: bd:6f:1f:cb:bc:fd:cb:b0:8f:47:15:8a:92:37:18:6a:a7:c7: 23:d4:12:8d:5d:dd:cd:4d:ab:19:a0:d7:af:ed:a1:93:5b:e8: 7c:20:8b:ab:5a:60:7e:36:f3:58:a7:4a:57:f9:ea:d7:65:65: 71:b1:7e:32:61:86:3a:4f:34:c0:87:1b:bd:e0:21:27:8d:1f: 70:b2:03:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19Z+GsBzuHT4isoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAwMloXDTI1MDczMDE3MTAwMlowLzEtMCsGA1UEAxMk YTZmZmJlMDAtZmNkOC00ZGY3LTlhYmMtZGQ1OTcyNDIwNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLMCedmhb/SM199LGrEZFlNlniHB7OYganpR F+hPeREI0Fy6w7Hjlht1D1H5JcfU2x2RdYl7fm8IdnCCe3mLUJP2+q8IFTKgChX0 xsaUBDF9IfwwBDmU60zYC9dEwz6llA26xKRnweMkEUa9kTCVq147ojCceGeI3WeH fkSQVf5HX7HVmNcawrsSVizL2K++JUUELC1gY/jRbtoGqdqFAwL0EVAwN44ZX7hQ DQTLcu4pC/894NRGfV2TTr69TV1pwxjHBFw/ygJjHo5uCthExys4Ui+CVgngl6kx j18Icnyi2y5HFiKBj2W88Z1Up8HV0Vx4SWh09fNEHCnQFsA1qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFokmNKK1ebB6TlAJxMpUqU4GuEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDczZTdmNzEtYzRhNC0z ZGIwLTk2NmEtNjFjNTMzNzdhZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMs57Fh8SfSpNwfqLqjj4QE+DAM1eLTPwhnwIJ7UekMINBKRBnbhGAA GXxjz47viYcyT1K6kwFupH7ALalYI8L44Is38ONpEy4gwbs3C6axR0UhoWQibazZ lUyGndNTPFQVWr1RkC+SalzkKBUMBKdAl1Ubw4QYbk1tOl5In7UXbbraE5hE6yjH alRIf1uWUBoRyKcMztGiK/SuYP6ghIbrvxzEd9QvQzAA0VtPXjHjRd/0Rr1vH8u8 /cuwj0cVipI3GGqnxyPUEo1d3c1Nqxmg16/toZNb6Hwgi6taYH4281inSlf56tdl ZXGxfjJhhjpPNMCHG73gISeNH3CyAxc= -----END CERTIFICATE-----Generated at Sun May 11 14:46:29 2025 by rpki-client