$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72db3c10-25ea-3af1-b8f9-3e7e40ae7251.roa File: 72db3c10-25ea-3af1-b8f9-3e7e40ae7251.roa (raw, json) Hash identifier: IhmfoGboTiKwxKADBqUXnE1C1Tp0deQVZctMAytrrvo= Subject key identifier: 82:2C:61:E8:0F:B7:8C:2D:94:6C:BE:3B:D8:A4:EF:06:DE:73:68:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F59C304C4C5ED8520014A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72db3c10-25ea-3af1-b8f9-3e7e40ae7251.roa Signing time: Thu 01 May 2025 17:10:01 +0000 ROA not before: Thu 01 May 2025 17:10:01 +0000 ROA not after: Wed 30 Jul 2025 17:10:01 +0000 asID: 22773 IP address blocks: 72.195.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:9c:30:4c:4c:5e:d8:52:00:14:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:01 2025 GMT Not After : Jul 30 17:10:01 2025 GMT Subject: CN=e24382c2-ad15-4859-911c-78dbea4c6026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:1e:b8:bf:8a:09:b0:d8:33:d7:e4:43:c2: 2b:9f:05:07:e7:33:fe:90:a0:2f:5a:d4:88:bd:44: 24:5d:b3:f3:33:fb:11:1f:d5:90:6f:50:76:fb:92: d5:6c:49:b3:42:9d:68:e3:d4:2e:d2:0b:8b:b9:38: 1d:f8:fd:1d:a5:95:1c:8d:db:7a:41:ed:23:ad:dd: 02:a4:74:bc:14:a7:d5:fb:5b:38:90:49:10:db:21: 7b:36:7a:13:bc:fa:0c:ac:fc:87:1c:a4:f9:e8:4e: 04:e0:62:00:a8:06:70:a8:73:e8:d5:0e:aa:0f:9f: 2a:6a:66:89:4c:23:ac:ff:4f:ec:b2:08:ad:91:b5: e1:98:7d:7c:7b:60:97:8a:9a:af:c9:8f:26:50:e3: 16:cc:bf:c7:f2:28:c0:6e:ab:36:56:5a:01:bf:46: cd:07:7e:a1:8f:a0:79:08:19:80:bc:01:67:11:b4: ba:84:1a:ac:54:16:bd:b2:dc:ab:44:94:26:33:07: 82:b5:6c:d9:3a:dd:4d:56:ff:e1:1f:17:26:23:2c: fd:b5:d4:bc:12:aa:66:f9:01:33:d1:f8:25:87:12: b2:13:22:81:c9:3d:0e:ae:4b:7c:2b:36:25:d6:91: 9d:f4:72:e6:e6:93:cf:4d:f4:a2:77:f8:03:9f:b9: 1f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2C:61:E8:0F:B7:8C:2D:94:6C:BE:3B:D8:A4:EF:06:DE:73:68:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72db3c10-25ea-3af1-b8f9-3e7e40ae7251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.195.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ad:f8:2e:22:d3:a3:2b:6a:46:6c:38:04:2c:82:20:d7:96: 3c:e0:c7:04:f3:28:e5:ba:32:99:30:2e:2d:43:c3:97:0e:5b: 44:63:fe:62:70:2d:d7:1b:20:29:1e:5a:31:eb:ef:7f:0b:a5: 4d:55:f2:3f:ed:24:ab:f8:11:02:07:7c:00:c3:85:53:25:b4: df:d0:58:41:33:7b:fa:e9:c4:0c:79:ac:f3:38:1b:ff:5b:3f: 48:e1:e4:22:1b:7f:a8:75:73:aa:3d:14:ab:60:2d:1e:91:bd: 04:df:ed:c1:f5:39:99:4d:b4:6e:1f:8a:aa:1e:96:59:24:41: 84:29:87:a7:09:71:19:f6:22:98:3e:b4:db:49:87:0d:b3:a7: a5:c8:62:f0:90:57:c0:bf:04:a3:d9:90:49:ee:75:4e:e1:2f: c2:b2:2a:bb:29:9d:e1:63:d3:d8:bf:0d:63:32:01:04:27:8f: da:37:e4:be:9c:9b:dc:f7:d1:c6:9b:36:43:99:05:55:1b:a3: 07:36:f2:0f:28:b8:93:6b:87:0d:7a:ad:83:81:3a:ef:40:88: 5a:17:db:89:40:2b:b7:61:47:7c:d2:39:3d:ba:da:f5:36:4e: 24:86:8a:1e:aa:45:e1:65:2c:53:2e:d5:7f:cc:61:9e:b0:13: 53:24:45:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19ZwwTExe2FIAFKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAwMVoXDTI1MDczMDE3MTAwMVowLzEtMCsGA1UEAxMk ZTI0MzgyYzItYWQxNS00ODU5LTkxMWMtNzhkYmVhNGM2MDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloceuL+KCbDYM9fkQ8IrnwUH5zP+kKAvWtSI vUQkXbPzM/sRH9WQb1B2+5LVbEmzQp1o49Qu0guLuTgd+P0dpZUcjdt6Qe0jrd0C pHS8FKfV+1s4kEkQ2yF7NnoTvPoMrPyHHKT56E4E4GIAqAZwqHPo1Q6qD58qamaJ TCOs/0/ssgitkbXhmH18e2CXipqvyY8mUOMWzL/H8ijAbqs2VloBv0bNB36hj6B5 CBmAvAFnEbS6hBqsVBa9styrRJQmMweCtWzZOt1NVv/hHxcmIyz9tdS8Eqpm+QEz 0fglhxKyEyKByT0Orkt8KzYl1pGd9HLm5pPPTfSid/gDn7kfhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIsYegPt4wtlGy+O9ik7wbec2jEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzJkYjNjMTAtMjVlYS0z YWYxLWI4ZjktM2U3ZTQwYWU3MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmt+C4i06MrakZsOAQsgiDXljzgxwTzKOW6MpkwLi1Dw5cOW0Rj/mJw LdcbICkeWjHr738LpU1V8j/tJKv4EQIHfADDhVMltN/QWEEze/rpxAx5rPM4G/9b P0jh5CIbf6h1c6o9FKtgLR6RvQTf7cH1OZlNtG4fiqoellkkQYQph6cJcRn2Ipg+ tNtJhw2zp6XIYvCQV8C/BKPZkEnudU7hL8KyKrspneFj09i/DWMyAQQnj9o35L6c m9z30cabNkOZBVUbowc28g8ouJNrhw16rYOBOu9AiFoX24lAK7dhR3zSOT262vU2 TiSGih6qReFlLFMu1X/MYZ6wE1MkRRM= -----END CERTIFICATE-----Generated at Sat May 10 22:10:22 2025 by rpki-client