$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5168e341-99c1-3b6e-8d47-9471210fc037.roa File: 5168e341-99c1-3b6e-8d47-9471210fc037.roa (raw, json) Hash identifier: pK9r6YGMnZriFh8b+dIe0mAKeolIH1gYimsuN3L0QR8= Subject key identifier: A9:44:14:83:11:62:4B:F8:95:64:97:20:96:BB:EE:58:52:46:9C:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD91EB4CB7BC18D8819080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5168e341-99c1-3b6e-8d47-9471210fc037.roa Signing time: Thu 01 May 2025 17:26:03 +0000 ROA not before: Thu 01 May 2025 17:26:03 +0000 ROA not after: Wed 30 Jul 2025 17:26:03 +0000 asID: 22773 IP address blocks: 72.220.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:91:eb:4c:b7:bc:18:d8:81:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:03 2025 GMT Not After : Jul 30 17:26:03 2025 GMT Subject: CN=c489a01e-e201-4bd0-a92a-1bd981144730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:32:b0:01:88:01:5f:0e:0b:79:54:b3:5a: 76:68:d0:0b:95:c4:39:15:7f:72:b5:35:66:78:68: ed:00:44:ba:02:06:20:f9:60:00:7d:15:2b:ba:7c: ab:c5:41:35:de:00:68:f1:51:dd:51:3b:5f:e3:94: c2:9f:30:3d:02:f4:b7:32:c0:1b:94:76:ef:fd:25: ba:f0:8e:04:f7:9e:14:87:67:2c:b1:b8:9a:91:69: 5b:93:20:7d:64:ba:21:67:45:78:7e:f4:49:2a:50: da:81:5f:ee:68:4d:52:f4:56:a8:fb:67:f5:27:06: 59:99:4c:cb:a9:8d:1b:49:4c:19:2a:6c:45:bc:43: 01:c5:11:e6:87:5b:25:a4:c0:d1:f3:9e:1e:ce:56: 5d:b6:47:76:e7:0b:8b:66:aa:27:4d:d2:38:91:9b: 41:19:99:13:f4:48:ac:a3:e0:03:6e:40:09:f9:44: 0e:45:18:c6:03:63:81:d2:2b:fc:78:1b:7b:dc:61: e7:89:8c:dc:08:14:9b:ee:39:d4:20:1f:13:55:b9: 0a:58:79:77:44:ee:09:a6:ac:cf:04:76:cf:a0:41: 5a:ab:c9:bb:d0:d9:62:c8:8d:db:b4:85:4d:ef:e1: 6c:f6:dd:f5:50:f5:2d:4d:9d:24:23:30:04:43:70: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:44:14:83:11:62:4B:F8:95:64:97:20:96:BB:EE:58:52:46:9C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5168e341-99c1-3b6e-8d47-9471210fc037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:25:1f:9f:ae:91:23:03:21:4b:ac:df:9c:77:b5:24:ee:fc: a9:09:54:5b:ef:d1:94:bd:a0:d6:09:6f:54:28:05:40:ea:f2: f4:d0:9e:91:0f:92:b6:a2:71:40:02:f2:ca:9e:cf:28:86:6e: 84:fb:44:b1:49:53:fe:b6:25:96:62:65:42:1b:66:29:ce:aa: 9b:1c:f2:7f:62:34:8b:1d:24:0e:f8:51:7e:79:45:82:d0:12: d1:5d:94:fd:a4:0d:d4:8e:15:e0:af:f6:39:cb:7a:a2:74:0e: bc:bb:01:f0:ff:18:3e:34:b8:3c:d4:5a:5f:0c:94:e7:92:fb: 96:07:72:3a:30:49:18:1d:48:ad:7d:22:eb:24:01:54:fc:39: 2c:27:c5:15:59:a6:7f:37:db:16:9a:1f:f0:37:7d:5d:f3:8c: bd:25:75:5c:33:fa:d0:d3:b6:ed:46:6d:0d:d8:02:13:2e:ca: 63:df:ba:e3:31:41:b5:80:59:e0:6e:11:50:88:b1:4d:6e:c6: b8:84:b0:a0:cf:16:8c:bc:05:e5:5b:71:ec:3a:9d:23:10:81: f6:f5:91:83:b0:5e:16:a5:4c:9c:49:01:f3:66:39:7e:a4:2b: 60:5d:40:c8:1e:f2:00:54:1b:d0:54:5f:0c:bd:05:a7:bc:bc: 41:0b:db:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/ZHrTLe8GNiBkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYwM1oXDTI1MDczMDE3MjYwM1owLzEtMCsGA1UEAxMk YzQ4OWEwMWUtZTIwMS00YmQwLWE5MmEtMWJkOTgxMTQ0NzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7wysAGIAV8OC3lUs1p2aNALlcQ5FX9ytTVm eGjtAES6AgYg+WAAfRUrunyrxUE13gBo8VHdUTtf45TCnzA9AvS3MsAblHbv/SW6 8I4E954Uh2cssbiakWlbkyB9ZLohZ0V4fvRJKlDagV/uaE1S9Fao+2f1JwZZmUzL qY0bSUwZKmxFvEMBxRHmh1slpMDR854ezlZdtkd25wuLZqonTdI4kZtBGZkT9Eis o+ADbkAJ+UQORRjGA2OB0iv8eBt73GHniYzcCBSb7jnUIB8TVbkKWHl3RO4JpqzP BHbPoEFaq8m70NliyI3btIVN7+Fs9t31UPUtTZ0kIzAEQ3C9QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlEFIMRYkv4lWSXIJa77lhSRpyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTE2OGUzNDEtOTljMS0z YjZlLThkNDctOTQ3MTIxMGZjMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8lH5+ukSMDIUus35x3tSTu/KkJVFvv0ZS9oNYJb1QoBUDq8vTQnpEP kraicUAC8sqezyiGboT7RLFJU/62JZZiZUIbZinOqpsc8n9iNIsdJA74UX55RYLQ EtFdlP2kDdSOFeCv9jnLeqJ0Dry7AfD/GD40uDzUWl8MlOeS+5YHcjowSRgdSK19 IuskAVT8OSwnxRVZpn832xaaH/A3fV3zjL0ldVwz+tDTtu1GbQ3YAhMuymPfuuMx QbWAWeBuEVCIsU1uxriEsKDPFoy8BeVbcew6nSMQgfb1kYOwXhalTJxJAfNmOX6k K2BdQMge8gBUG9BUXwy9Bae8vEEL24k= -----END CERTIFICATE-----Generated at Mon May 12 04:39:10 2025 by rpki-client