$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f982281-ce69-3f28-9de6-2a19d2df3daa.roa File: 6f982281-ce69-3f28-9de6-2a19d2df3daa.roa (raw, json) Hash identifier: rDoK2b+8fSsq91SSh61vwR2DQzEiroMCAew1du6M0k4= Subject key identifier: C6:F1:FB:E3:3B:C1:45:C2:CC:E4:12:DE:72:B8:C1:F4:54:0D:6A:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD9EE071C64D3AA3869580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f982281-ce69-3f28-9de6-2a19d2df3daa.roa Signing time: Thu 01 May 2025 17:26:09 +0000 ROA not before: Thu 01 May 2025 17:26:09 +0000 ROA not after: Wed 30 Jul 2025 17:26:09 +0000 asID: 22773 IP address blocks: 72.220.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:9e:e0:71:c6:4d:3a:a3:86:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:09 2025 GMT Not After : Jul 30 17:26:09 2025 GMT Subject: CN=0d098ea5-b3ed-4516-bf67-83b01c75b6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:55:8b:cd:c0:0f:a8:c9:3b:15:2d:f3:35:d2: c9:d3:4a:16:a6:4a:34:3b:cb:f7:00:59:a1:76:e2: 42:dd:6c:37:99:e0:57:2e:71:ea:2e:1b:c8:b5:70: 74:19:69:ce:87:50:f7:87:63:7d:7e:07:2d:d3:5e: 56:82:0b:f7:60:82:31:e3:ca:71:aa:9b:af:85:d5: f3:9e:a0:2c:80:55:c8:89:35:0a:4f:3c:4f:c3:72: 27:1f:03:cb:6f:7b:b3:fe:e9:56:08:96:8c:67:b9: 3f:82:73:74:d1:0b:c4:f5:94:37:31:f5:ad:48:c9: e4:f2:17:e6:c6:46:39:f4:68:03:65:17:e4:a5:8b: 9a:25:17:2b:82:5c:42:c5:24:25:cb:63:66:86:bd: 3e:8f:8e:5a:48:b0:fd:c3:6c:c8:76:0a:a8:99:2f: 8b:31:10:48:44:2f:63:89:d4:10:c0:c1:16:96:5f: 1c:cd:15:0e:eb:8f:7f:05:5f:c8:59:d5:64:9e:a3: 98:bb:6a:ef:1b:3d:82:47:3b:9c:1d:41:1d:0b:65: 6c:ea:80:98:ef:8a:c7:f7:fa:2b:48:12:38:e2:2b: 37:98:7f:c6:e3:f4:67:44:7c:69:03:46:09:8f:2e: b0:bb:ee:f8:10:67:b7:27:8b:72:0a:24:77:f2:45: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F1:FB:E3:3B:C1:45:C2:CC:E4:12:DE:72:B8:C1:F4:54:0D:6A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f982281-ce69-3f28-9de6-2a19d2df3daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:4a:4e:24:d7:68:02:f4:81:7e:ba:60:af:05:84:aa:92:f9: 4c:27:81:b4:96:a9:7b:e8:74:a1:ff:34:ac:c0:ee:c5:74:6c: 0f:ab:51:08:3c:3a:12:da:32:0b:ce:fb:e9:04:e0:15:fd:f4: f2:ca:6c:9a:89:e0:b0:14:8a:ee:15:bf:d3:c7:c2:ad:17:83: ef:87:1c:59:d5:de:d3:c7:cc:e8:c8:34:f4:90:17:ec:0d:32: e2:3d:cf:b6:3f:44:81:63:6a:65:ae:98:ae:8f:d0:c1:9c:65: 9a:44:6e:be:3a:68:84:d6:08:98:2d:07:d4:4c:5b:4c:34:bf: ec:47:a9:2c:4a:80:9a:67:db:63:36:0e:d0:05:7e:7a:f3:4f: ec:40:a9:15:03:49:5d:9e:62:d3:c7:8a:0e:e7:77:7c:cd:48: 41:08:ae:6e:ab:ea:2e:57:04:66:8c:fc:3d:84:98:06:32:63: cd:3d:e0:6e:ba:c4:38:b4:a2:93:21:97:82:e7:a5:39:fa:70: f9:89:da:b8:26:79:60:f9:ca:84:86:19:d2:f5:fb:7f:d8:25: 0f:b4:fe:75:2c:5f:af:c6:9e:e6:e9:36:63:8d:76:c6:55:f2: a2:d2:b0:28:5d:16:40:64:b8:f5:1f:2e:e3:b9:96:4b:87:7f: ed:1d:f3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Z7gccZNOqOGlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYwOVoXDTI1MDczMDE3MjYwOVowLzEtMCsGA1UEAxMk MGQwOThlYTUtYjNlZC00NTE2LWJmNjctODNiMDFjNzViNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1WLzcAPqMk7FS3zNdLJ00oWpko0O8v3AFmh duJC3Ww3meBXLnHqLhvItXB0GWnOh1D3h2N9fgct015Wggv3YIIx48pxqpuvhdXz nqAsgFXIiTUKTzxPw3InHwPLb3uz/ulWCJaMZ7k/gnN00QvE9ZQ3MfWtSMnk8hfm xkY59GgDZRfkpYuaJRcrglxCxSQly2Nmhr0+j45aSLD9w2zIdgqomS+LMRBIRC9j idQQwMEWll8czRUO649/BV/IWdVknqOYu2rvGz2CRzucHUEdC2Vs6oCY74rH9/or SBI44is3mH/G4/RnRHxpA0YJjy6wu+74EGe3J4tyCiR38kVCBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbx++M7wUXCzOQS3nK4wfRUDWpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmY5ODIyODEtY2U2OS0z ZjI4LTlkZTYtMmExOWQyZGYzZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1KTiTXaAL0gX66YK8FhKqS+UwngbSWqXvodKH/NKzA7sV0bA+rUQg8 OhLaMgvO++kE4BX99PLKbJqJ4LAUiu4Vv9PHwq0Xg++HHFnV3tPHzOjINPSQF+wN MuI9z7Y/RIFjamWumK6P0MGcZZpEbr46aITWCJgtB9RMW0w0v+xHqSxKgJpn22M2 DtAFfnrzT+xAqRUDSV2eYtPHig7nd3zNSEEIrm6r6i5XBGaM/D2EmAYyY8094G66 xDi0opMhl4LnpTn6cPmJ2rgmeWD5yoSGGdL1+3/YJQ+0/nUsX6/GnubpNmONdsZV 8qLSsChdFkBkuPUfLuO5lkuHf+0d80A= -----END CERTIFICATE-----Generated at Sat May 10 04:54:43 2025 by rpki-client