$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/854ffdc2-cd12-30b8-ae67-d408e0a3c989.roa File: 854ffdc2-cd12-30b8-ae67-d408e0a3c989.roa (raw, json) Hash identifier: 6lJYOljI8rd9GiAOyxi2PcxmxB+ci07IKPWtMcNyR6M= Subject key identifier: 13:6E:F2:7C:89:1C:CC:0E:85:2B:50:4A:B2:3B:D7:6F:47:99:7D:A6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F85786D0E61F346E9CC280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/854ffdc2-cd12-30b8-ae67-d408e0a3c989.roa Signing time: Thu 01 May 2025 17:15:31 +0000 ROA not before: Thu 01 May 2025 17:15:31 +0000 ROA not after: Wed 30 Jul 2025 17:15:31 +0000 asID: 22773 IP address blocks: 72.218.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:57:86:d0:e6:1f:34:6e:9c:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:31 2025 GMT Not After : Jul 30 17:15:31 2025 GMT Subject: CN=f510d466-491a-4f00-b53e-e4648404b1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dc:d6:e1:f5:c5:1b:2a:f5:89:50:bb:bf:89: aa:90:8e:11:03:c4:93:40:6b:04:ad:2f:16:5c:e0: 41:d6:96:20:ec:99:32:35:da:52:1c:2c:19:02:c1: 34:68:16:99:24:4f:7e:8b:64:f2:86:6a:e3:ed:d2: 29:ad:be:98:c7:51:f1:a8:0c:a6:ee:b5:ce:06:6f: c9:ac:6c:5d:f2:8d:99:b0:2c:76:4a:a1:95:dd:5e: ab:52:d2:17:cf:45:80:06:ec:a5:3c:42:ea:d8:02: 1c:e0:d2:11:77:21:be:70:76:27:bf:e6:2b:d2:ae: 9f:ab:0c:f1:c0:02:25:fe:f6:e2:b7:0d:7e:a7:51: 6b:aa:df:83:16:c7:4b:7b:2e:a0:b2:83:ef:16:d4: 5d:66:9b:2d:f8:26:6a:12:8c:09:08:93:fd:bb:77: c5:ef:d6:29:67:6c:09:05:6e:51:71:5f:3e:b6:ae: ea:1c:17:00:ce:71:f5:a6:4d:ed:d5:fa:e7:5d:c1: 95:df:b5:6b:da:21:3a:9e:f3:55:2d:1e:f6:cc:ee: 74:5f:50:21:77:65:f4:b8:ed:11:09:25:ee:b6:af: f2:bb:3b:e8:07:f3:d2:3f:22:7b:d7:1d:d3:06:55: ee:19:fa:53:6b:94:f4:d3:71:00:4b:84:c8:d0:a5: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6E:F2:7C:89:1C:CC:0E:85:2B:50:4A:B2:3B:D7:6F:47:99:7D:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/854ffdc2-cd12-30b8-ae67-d408e0a3c989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ff:6b:3b:dd:6e:19:0d:3b:bc:b4:10:ea:55:fb:d1:0e:c8: 41:6d:d2:90:34:45:9f:5c:34:f7:19:d7:d7:64:e0:21:c1:34: 15:d5:59:a5:07:cc:6f:63:98:1b:07:87:ef:b6:71:e9:30:39: 48:1a:3a:db:6a:76:e3:5f:74:d2:4c:8e:ec:32:cd:48:44:4c: 3b:fc:48:82:e3:b5:a0:e2:77:23:c4:a1:7b:93:9b:47:8c:5e: 2e:b0:91:72:57:db:da:9e:16:82:a3:49:49:e6:63:45:4f:ed: 88:25:85:4c:ef:b2:59:1e:29:6e:0e:b5:9f:24:c4:ae:5f:72: d2:db:6f:c1:27:6c:3d:89:60:c7:cb:a3:46:97:36:c5:20:16: a0:86:05:03:c0:82:31:12:96:76:3b:65:f9:cc:bc:87:00:ed: 00:46:ea:56:2c:6a:be:8c:ff:cb:5c:d1:01:66:74:ab:75:08: 50:61:5e:9e:87:2a:88:9a:e3:48:90:0e:82:41:15:87:91:21: 87:22:13:4c:d7:2b:f3:fe:b3:a8:7c:d0:ed:d2:68:af:79:79: 02:67:02:0a:14:3e:44:e6:18:79:f9:e4:b9:f0:fa:4a:d0:65: 61:30:68:2a:b1:46:65:1a:cf:c0:91:78:0c:da:0b:1f:13:55: 2b:84:46:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+FeG0OYfNG6cwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUzMVoXDTI1MDczMDE3MTUzMVowLzEtMCsGA1UEAxMk ZjUxMGQ0NjYtNDkxYS00ZjAwLWI1M2UtZTQ2NDg0MDRiMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9zW4fXFGyr1iVC7v4mqkI4RA8STQGsErS8W XOBB1pYg7JkyNdpSHCwZAsE0aBaZJE9+i2Tyhmrj7dIprb6Yx1HxqAym7rXOBm/J rGxd8o2ZsCx2SqGV3V6rUtIXz0WABuylPELq2AIc4NIRdyG+cHYnv+Yr0q6fqwzx wAIl/vbitw1+p1Frqt+DFsdLey6gsoPvFtRdZpst+CZqEowJCJP9u3fF79YpZ2wJ BW5RcV8+tq7qHBcAznH1pk3t1frnXcGV37Vr2iE6nvNVLR72zO50X1Ahd2X0uO0R CSXutq/yuzvoB/PSPyJ71x3TBlXuGfpTa5T003EAS4TI0KXSxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNu8nyJHMwOhStQSrI7129HmX2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODU0ZmZkYzItY2QxMi0z MGI4LWFlNjctZDQwOGUwYTNjOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNo0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL/azvdbhkNO7y0EOpV+9EOyEFt0pA0RZ9cNPcZ19dk4CHBNBXVWaUH zG9jmBsHh++2cekwOUgaOttqduNfdNJMjuwyzUhETDv8SILjtaDidyPEoXuTm0eM Xi6wkXJX29qeFoKjSUnmY0VP7YglhUzvslkeKW4OtZ8kxK5fctLbb8EnbD2JYMfL o0aXNsUgFqCGBQPAgjESlnY7ZfnMvIcA7QBG6lYsar6M/8tc0QFmdKt1CFBhXp6H Koia40iQDoJBFYeRIYciE0zXK/P+s6h80O3SaK95eQJnAgoUPkTmGHn55Lnw+krQ ZWEwaCqxRmUaz8CReAzaCx8TVSuERhA= -----END CERTIFICATE-----Generated at Sun May 11 16:19:16 2025 by rpki-client