$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/757fd3a2-b1f5-3dcd-84eb-bd504e207b2d.roa File: 757fd3a2-b1f5-3dcd-84eb-bd504e207b2d.roa (raw, json) Hash identifier: 1LuS4BOwRsjBKayug0lxzZWBcUD7Ev76getNJeYKf8Y= Subject key identifier: 28:A9:D6:C1:FD:44:65:7D:58:03:BC:3E:58:8A:E7:83:D4:55:8F:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F593A00B91F8E177C1EEC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/757fd3a2-b1f5-3dcd-84eb-bd504e207b2d.roa Signing time: Thu 01 May 2025 17:09:57 +0000 ROA not before: Thu 01 May 2025 17:09:57 +0000 ROA not after: Wed 30 Jul 2025 17:09:57 +0000 asID: 22773 IP address blocks: 72.192.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:93:a0:0b:91:f8:e1:77:c1:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:57 2025 GMT Not After : Jul 30 17:09:57 2025 GMT Subject: CN=fd61b68f-b5b6-4d02-8725-9549405a66bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:78:1d:31:ed:54:7d:53:38:15:38:71:cf: 4a:cd:49:1d:45:8f:a0:b0:c2:c6:6d:34:22:42:46: 09:f8:0c:b0:6c:ee:6d:98:f0:03:04:4a:5c:8d:62: cc:99:3e:d3:15:13:75:72:ed:49:09:d5:a4:36:bf: 62:fb:54:f3:f4:81:dd:d7:a1:3f:af:31:29:56:b1: 65:8e:bc:e8:cb:f2:46:2b:fe:bf:8e:aa:a0:d6:6a: 0b:07:f2:c9:fb:7d:85:98:b3:a9:9b:72:b0:b4:91: d5:24:38:02:5b:61:4f:6e:fd:f6:52:4c:f3:17:4d: cd:d7:82:06:66:e4:f0:97:38:9e:d4:1c:81:cb:a1: 61:1d:04:45:71:78:e8:9f:83:49:68:a5:aa:c7:27: 62:f1:10:38:83:16:23:00:40:05:90:e9:c5:d6:3d: 3f:31:a2:84:b0:0d:a7:e7:03:3f:b1:62:83:25:ac: 45:84:56:c7:f6:29:d9:e2:51:7b:f7:97:11:11:4f: 21:88:81:42:b1:26:86:2a:ef:9f:92:2c:59:37:c5: e7:20:fb:16:a9:d8:02:e4:da:18:a1:e4:cf:db:cb: c8:e4:da:16:29:95:58:78:cb:54:0e:07:c9:b2:cc: 05:1f:b7:1b:c5:cd:e9:78:73:26:0c:c1:b4:b8:dd: 2b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A9:D6:C1:FD:44:65:7D:58:03:BC:3E:58:8A:E7:83:D4:55:8F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/757fd3a2-b1f5-3dcd-84eb-bd504e207b2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:16:1a:a2:8f:28:32:2a:f5:2b:13:58:ec:e9:35:b6:ba:85: f1:e3:7a:1d:45:db:28:e8:c2:92:64:f9:42:e1:50:9d:8d:ba: 01:ba:13:0f:cc:90:16:d8:a7:c7:e2:df:10:76:48:9e:3b:22: e7:7f:54:62:14:60:63:67:9a:82:6a:c1:a8:99:b2:7e:61:f8: cc:72:2f:86:4d:30:58:2c:e0:1b:34:e8:ed:81:a4:5d:13:2e: f1:cf:e2:a0:5d:3c:9d:fb:c2:73:2d:9b:03:8a:40:91:b4:dd: eb:68:5f:56:b8:d1:50:4f:fc:b1:75:99:a8:c4:bd:33:3d:e0: 9a:d6:83:17:fc:c4:58:58:68:fd:b2:85:78:25:47:13:f4:a7: 6b:06:5e:c2:63:43:91:04:56:f1:68:97:64:b1:6a:15:da:c8: f1:f8:17:12:0a:3e:06:a5:2a:ae:7b:8e:2f:20:bd:0d:75:50: b7:79:e2:10:c3:ea:66:b4:7a:47:fb:04:4d:53:bd:65:11:b1: 8e:3b:72:ee:90:91:63:01:1c:6a:2e:d2:0d:26:6c:51:55:14: ce:4f:b4:58:f0:ea:7b:23:83:8e:1b:9c:05:bf:c3:58:d7:1c: 28:7f:da:c6:b0:cd:d4:f4:ed:5a:6d:66:c0:d5:e4:fc:a2:cc: 3f:ad:64:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19ZOgC5H44XfB7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk1N1oXDTI1MDczMDE3MDk1N1owLzEtMCsGA1UEAxMk ZmQ2MWI2OGYtYjViNi00ZDAyLTg3MjUtOTU0OTQwNWE2NmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI94HTHtVH1TOBU4cc9KzUkdRY+gsMLGbTQi QkYJ+AywbO5tmPADBEpcjWLMmT7TFRN1cu1JCdWkNr9i+1Tz9IHd16E/rzEpVrFl jrzoy/JGK/6/jqqg1moLB/LJ+32FmLOpm3KwtJHVJDgCW2FPbv32UkzzF03N14IG ZuTwlzie1ByBy6FhHQRFcXjon4NJaKWqxydi8RA4gxYjAEAFkOnF1j0/MaKEsA2n 5wM/sWKDJaxFhFbH9inZ4lF795cREU8hiIFCsSaGKu+fkixZN8XnIPsWqdgC5NoY oeTP28vI5NoWKZVYeMtUDgfJsswFH7cbxc3peHMmDMG0uN0r6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCip1sH9RGV9WAO8PliK54PUVY8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzU3ZmQzYTItYjFmNS0z ZGNkLTg0ZWItYmQ1MDRlMjA3YjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYWGqKPKDIq9SsTWOzpNba6hfHjeh1F2yjowpJk+ULhUJ2NugG6Ew/M kBbYp8fi3xB2SJ47Iud/VGIUYGNnmoJqwaiZsn5h+MxyL4ZNMFgs4Bs06O2BpF0T LvHP4qBdPJ37wnMtmwOKQJG03etoX1a40VBP/LF1majEvTM94JrWgxf8xFhYaP2y hXglRxP0p2sGXsJjQ5EEVvFol2SxahXayPH4FxIKPgalKq57ji8gvQ11ULd54hDD 6ma0ekf7BE1TvWURsY47cu6QkWMBHGou0g0mbFFVFM5PtFjw6nsjg44bnAW/w1jX HCh/2sawzdT07VptZsDV5PyizD+tZHA= -----END CERTIFICATE-----Generated at Sun May 11 12:42:06 2025 by rpki-client