$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d61a9d5-472a-3656-9f1a-1b8a1c34a308.roa File: 5d61a9d5-472a-3656-9f1a-1b8a1c34a308.roa (raw, json) Hash identifier: vtVs1m3i+s4NXWTq49p9X6J0THwEn1T3JANy32aGS4Y= Subject key identifier: 89:4C:6E:9E:6D:C1:09:39:81:B3:59:D7:C8:58:50:70:6F:7C:BA:4B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD9F4773180BC1FBBCD280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d61a9d5-472a-3656-9f1a-1b8a1c34a308.roa Signing time: Thu 01 May 2025 17:26:09 +0000 ROA not before: Thu 01 May 2025 17:26:09 +0000 ROA not after: Wed 30 Jul 2025 17:26:09 +0000 asID: 22773 IP address blocks: 72.220.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:9f:47:73:18:0b:c1:fb:bc:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:09 2025 GMT Not After : Jul 30 17:26:09 2025 GMT Subject: CN=f2be95cb-ec84-4dd8-9678-447abde27918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:59:13:05:ed:38:b6:cd:5e:a7:36:f4:e1:86: fe:76:f0:25:a9:ea:ee:dc:91:80:9c:dd:37:13:17: 29:1b:a8:d6:3f:1f:82:6b:d1:48:b3:b1:f4:5d:de: c6:ce:29:6b:20:91:1a:9f:c4:4c:6a:1b:1c:c4:fa: aa:83:aa:e5:ef:d1:cc:99:95:cb:aa:72:ad:25:10: ba:4e:b7:7a:bc:ff:33:ed:c8:46:dc:aa:8f:32:d3: 3a:3a:47:0e:61:1b:cd:9b:fb:71:f6:8e:f7:1f:5a: 40:f6:63:3b:5f:d6:70:f4:9b:66:d8:40:0a:de:3e: 50:21:f1:ee:00:11:d8:5d:a7:a0:08:13:c1:11:37: 3f:f7:02:f2:9d:50:35:cf:da:b7:a0:40:cd:de:63: 79:37:06:05:b3:ef:63:f2:a7:61:59:5f:b8:39:ff: 11:de:f5:60:53:d5:7b:23:ba:36:a2:ae:04:f2:19: 59:b6:df:de:35:cd:fc:08:a5:2c:b8:d3:a4:88:e6: e3:e3:c6:76:f1:8f:4a:86:13:72:fd:38:2d:a1:da: 06:51:5a:e0:ef:f1:0c:a1:ab:16:e4:a5:8a:4b:4e: 3d:1c:7c:93:09:70:eb:af:c3:2e:ac:81:1a:a5:15: 2b:a4:13:8e:51:9c:93:9c:7c:36:df:f7:df:c0:b1: 67:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4C:6E:9E:6D:C1:09:39:81:B3:59:D7:C8:58:50:70:6F:7C:BA:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d61a9d5-472a-3656-9f1a-1b8a1c34a308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:09:c4:c3:07:39:df:92:79:bb:19:53:ab:13:25:43:6b:e1: b0:56:f5:d5:dc:ca:68:ed:b7:cc:af:2a:b8:70:1a:ca:80:ee: ef:16:24:e3:8a:87:d6:59:6e:9f:33:82:98:c5:55:04:74:5f: 6a:3e:5a:eb:1e:0a:04:57:e0:8d:a0:1e:85:00:a6:dd:5f:e3: dc:43:63:28:f1:a9:f2:e6:e9:8d:28:f0:cc:95:e4:e8:1b:fe: 44:90:58:f8:b5:bf:5c:0d:a8:63:9c:9a:e4:29:e9:a4:db:10: 59:f5:31:e2:a4:a4:56:11:58:70:d8:51:c1:9d:cc:c0:47:a7: 6d:a9:dc:b2:8d:af:db:25:a1:71:97:12:93:83:f7:11:f8:2c: 18:1f:46:2d:b6:a5:4a:db:2d:09:6d:31:38:ae:7e:b7:82:90: a1:b6:47:2b:8c:b4:93:1d:5a:07:8f:73:0b:2f:fa:ac:0f:3e: 3e:09:26:88:49:7e:06:9e:83:98:27:81:87:11:f0:db:51:fc: df:c9:e8:6e:61:7a:2e:aa:ba:12:69:3f:8f:26:ac:d3:b7:c0: 32:10:8f:4d:71:c4:ff:c3:fa:5d:1a:1d:e1:85:f7:3f:c6:4b: 70:69:4b:6b:03:f3:61:02:f0:6d:5e:35:a5:8f:da:cc:a9:6e: 7f:95:2f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Z9HcxgLwfu80oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYwOVoXDTI1MDczMDE3MjYwOVowLzEtMCsGA1UEAxMk ZjJiZTk1Y2ItZWM4NC00ZGQ4LTk2NzgtNDQ3YWJkZTI3OTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlkTBe04ts1epzb04Yb+dvAlqeru3JGAnN03 ExcpG6jWPx+Ca9FIs7H0Xd7GzilrIJEan8RMahscxPqqg6rl79HMmZXLqnKtJRC6 Trd6vP8z7chG3KqPMtM6OkcOYRvNm/tx9o73H1pA9mM7X9Zw9Jtm2EAK3j5QIfHu ABHYXaegCBPBETc/9wLynVA1z9q3oEDN3mN5NwYFs+9j8qdhWV+4Of8R3vVgU9V7 I7o2oq4E8hlZtt/eNc38CKUsuNOkiObj48Z28Y9KhhNy/TgtodoGUVrg7/EMoasW 5KWKS049HHyTCXDrr8MurIEapRUrpBOOUZyTnHw23/ffwLFnmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlMbp5twQk5gbNZ18hYUHBvfLpLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWQ2MWE5ZDUtNDcyYS0z NjU2LTlmMWEtMWI4YTFjMzRhMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNyMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMJxMMHOd+SebsZU6sTJUNr4bBW9dXcymjtt8yvKrhwGsqA7u8WJOOK h9ZZbp8zgpjFVQR0X2o+WuseCgRX4I2gHoUApt1f49xDYyjxqfLm6Y0o8MyV5Ogb /kSQWPi1v1wNqGOcmuQp6aTbEFn1MeKkpFYRWHDYUcGdzMBHp22p3LKNr9sloXGX EpOD9xH4LBgfRi22pUrbLQltMTiufreCkKG2RyuMtJMdWgePcwsv+qwPPj4JJohJ fgaeg5gngYcR8NtR/N/J6G5hei6quhJpP48mrNO3wDIQj01xxP/D+l0aHeGF9z/G S3BpS2sD82EC8G1eNaWP2sypbn+VL4E= -----END CERTIFICATE-----Generated at Mon May 12 15:40:11 2025 by rpki-client