$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85b42910-8bc2-3cc8-acfb-0c40f9a039ec.roa File: 85b42910-8bc2-3cc8-acfb-0c40f9a039ec.roa (raw, json) Hash identifier: N4t7+2V1BactnA9zikMqKI6Ve1ljKCmMyDT96nzWkcM= Subject key identifier: A2:E7:76:E3:0C:0B:54:F8:46:B9:5A:8B:23:4F:5B:7B:FE:72:D5:34 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD924D6809D6713E152F10 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85b42910-8bc2-3cc8-acfb-0c40f9a039ec.roa Signing time: Thu 01 May 2025 17:26:03 +0000 ROA not before: Thu 01 May 2025 17:26:03 +0000 ROA not after: Wed 30 Jul 2025 17:26:03 +0000 asID: 22773 IP address blocks: 72.220.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:92:4d:68:09:d6:71:3e:15:2f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:03 2025 GMT Not After : Jul 30 17:26:03 2025 GMT Subject: CN=8e40d8f6-bf23-4bbd-9b56-f1ff8fd8d99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:c3:3c:ca:66:85:84:55:17:c8:eb:1a:b0: 4a:60:87:a2:53:6d:f9:bb:2b:3d:f4:ca:e5:82:ff: 52:40:d6:3e:ad:4f:c2:5c:92:7b:62:e1:fa:c0:3b: a5:c6:ee:32:59:0c:6e:bc:8c:e3:a9:71:aa:40:03: d0:bd:dd:62:61:83:ca:fd:f3:45:77:c2:03:f8:8a: 5f:74:0f:b3:b9:1e:78:c4:81:74:1a:b9:06:8d:4e: 21:1f:3c:b0:ab:5e:ec:f9:7b:f1:25:fd:a4:9c:93: 89:1e:27:07:02:a6:4c:9f:7a:dc:de:fd:b2:2b:9c: 6c:29:9b:34:7c:d6:4a:e8:73:e5:79:ea:80:49:e5: 35:c8:cb:fe:b3:84:71:44:f3:5f:de:a5:0e:3a:50: ee:b5:07:01:bc:5a:52:87:f1:b9:ea:88:4d:7e:5e: f5:2d:39:98:c4:4e:33:ad:66:fc:bd:73:57:e5:6a: 97:67:c6:67:16:8a:54:95:b4:33:66:ac:ad:e7:d8: 59:15:76:f4:92:9e:83:36:e0:9c:05:35:6b:fb:91: 3f:9d:7e:56:f9:0d:0f:15:c5:87:bd:a8:fa:0d:20: 51:29:25:51:58:03:47:77:10:24:6a:d9:93:f5:82: c4:fe:d6:c4:17:27:c2:e2:dc:b9:92:a6:18:29:27: 2c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E7:76:E3:0C:0B:54:F8:46:B9:5A:8B:23:4F:5B:7B:FE:72:D5:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85b42910-8bc2-3cc8-acfb-0c40f9a039ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:47:4f:e0:8a:18:97:c9:bf:d6:47:e6:fd:f7:23:3e:88:5c: bb:3d:9c:73:80:04:14:14:0a:1b:f8:37:7e:cc:43:5b:ac:31: 2e:60:f4:ca:73:5b:37:b9:a2:85:2e:9b:a4:0c:23:d9:7b:e2: 01:20:00:e3:9e:8b:3e:10:33:6e:08:83:2a:f1:bb:9d:90:39: 58:20:6d:1d:d1:0c:c5:e4:4c:a2:b6:5d:42:cf:df:cf:0f:a8: 6e:92:30:bb:81:d0:4a:3f:4f:3f:4c:63:3b:8c:c2:f3:83:f2: af:a4:37:6d:b8:50:70:f7:29:57:61:7c:04:b4:4a:7a:42:bc: 69:37:8c:6e:cc:98:69:06:de:c7:8d:80:8a:76:2b:af:46:7e: aa:53:58:9c:d3:ce:2e:da:47:87:b4:5b:08:33:30:75:8c:29: 32:b2:2c:67:a2:cb:58:ce:51:d0:66:df:a0:d7:4d:4d:d5:ca: 19:76:69:9b:f3:14:1d:27:8f:2e:ea:61:67:d5:dc:66:54:95: 8f:d5:57:c8:3e:36:bb:2f:bb:a5:a3:05:0f:11:2c:f5:ee:e5: 39:5f:0a:cc:09:97:77:66:57:2d:1e:24:13:5f:e9:c3:7f:e0: 11:ae:90:6e:29:e3:8c:f4:8d:cb:a9:0c:8c:d9:8a:38:5e:d2: 58:58:9b:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/ZJNaAnWcT4VLxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYwM1oXDTI1MDczMDE3MjYwM1owLzEtMCsGA1UEAxMk OGU0MGQ4ZjYtYmYyMy00YmJkLTliNTYtZjFmZjhmZDhkOTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPfDPMpmhYRVF8jrGrBKYIeiU235uys99Mrl gv9SQNY+rU/CXJJ7YuH6wDulxu4yWQxuvIzjqXGqQAPQvd1iYYPK/fNFd8ID+Ipf dA+zuR54xIF0GrkGjU4hHzywq17s+XvxJf2knJOJHicHAqZMn3rc3v2yK5xsKZs0 fNZK6HPleeqASeU1yMv+s4RxRPNf3qUOOlDutQcBvFpSh/G56ohNfl71LTmYxE4z rWb8vXNX5WqXZ8ZnFopUlbQzZqyt59hZFXb0kp6DNuCcBTVr+5E/nX5W+Q0PFcWH vaj6DSBRKSVRWANHdxAkatmT9YLE/tbEFyfC4ty5kqYYKScs+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLnduMMC1T4RrlaiyNPW3v+ctU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODViNDI5MTAtOGJjMi0z Y2M4LWFjZmItMGM0MGY5YTAzOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxHT+CKGJfJv9ZH5v33Iz6IXLs9nHOABBQUChv4N37MQ1usMS5g9Mpz Wze5ooUum6QMI9l74gEgAOOeiz4QM24Igyrxu52QOVggbR3RDMXkTKK2XULP388P qG6SMLuB0Eo/Tz9MYzuMwvOD8q+kN224UHD3KVdhfAS0SnpCvGk3jG7MmGkG3seN gIp2K69GfqpTWJzTzi7aR4e0WwgzMHWMKTKyLGeiy1jOUdBm36DXTU3Vyhl2aZvz FB0njy7qYWfV3GZUlY/VV8g+Nrsvu6WjBQ8RLPXu5TlfCswJl3dmVy0eJBNf6cN/ 4BGukG4p44z0jcupDIzZijhe0lhYm5E= -----END CERTIFICATE-----Generated at Thu May 8 10:11:58 2025 by rpki-client