$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8dade44c-6349-3d33-b6d4-7ca8b93f3fd3.roa File: 8dade44c-6349-3d33-b6d4-7ca8b93f3fd3.roa (raw, json) Hash identifier: RcKVAR8e/zCRAx06VyW5Ybgi2U6WfGYrbBGFwLIWlNo= Subject key identifier: C7:22:92:AC:55:2A:01:86:01:0E:C1:F0:7B:78:55:1B:C7:80:AD:C7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDAE7F7EB88F87A8C68B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8dade44c-6349-3d33-b6d4-7ca8b93f3fd3.roa Signing time: Thu 01 May 2025 17:26:16 +0000 ROA not before: Thu 01 May 2025 17:26:16 +0000 ROA not after: Wed 30 Jul 2025 17:26:16 +0000 asID: 22773 IP address blocks: 72.221.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:ae:7f:7e:b8:8f:87:a8:c6:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:16 2025 GMT Not After : Jul 30 17:26:16 2025 GMT Subject: CN=3eab2e55-2122-4d13-854c-57c3ef0bf44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:59:75:25:03:a3:3e:82:bc:84:c6:6a:44: bf:4b:3a:8f:9c:18:68:a1:16:46:d4:aa:d5:6d:e6: f6:21:e3:7c:78:fc:a6:17:db:0c:a3:49:5f:3d:ac: 31:c7:a0:ad:61:55:48:ab:c7:c0:3d:10:23:bc:83: bd:10:45:34:64:8e:2f:ef:75:2b:af:b6:65:e9:ae: 8d:7d:f2:7c:35:66:96:28:25:9e:cf:b5:0e:6c:3a: 92:b0:68:5c:b5:92:d9:d2:e3:7e:62:3f:7d:65:18: c0:a7:85:b4:aa:30:25:75:c0:fa:8c:ce:39:44:7e: 37:45:68:e1:ee:02:53:0f:5b:7d:93:1a:53:04:c6: c7:b2:02:73:4b:0d:b5:2f:62:e7:f3:64:49:97:5a: 6b:d7:05:2b:44:a1:f2:66:2d:bf:3a:7e:b6:48:b7: ad:d7:ef:0b:1a:8e:b6:79:97:6d:a4:d3:9d:c3:54: a2:ff:93:c7:9c:6c:b5:a7:21:3f:5b:ca:c1:62:7f: 15:f6:be:c8:c1:8e:9d:5a:36:08:7a:a1:51:14:3a: 13:82:32:cf:30:0d:8b:ab:c1:1d:18:41:6c:8e:94: dd:99:cc:5b:f6:18:52:73:c2:5a:a0:b7:7c:fd:0e: bb:75:18:b1:8b:cc:6a:de:d6:40:77:3b:a6:46:f7: cb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:22:92:AC:55:2A:01:86:01:0E:C1:F0:7B:78:55:1B:C7:80:AD:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8dade44c-6349-3d33-b6d4-7ca8b93f3fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:21:84:73:bd:c7:4e:3e:81:0c:74:49:c7:a7:3e:75:3a:ad: 01:6d:9c:ec:c6:8c:e5:0a:64:8e:18:28:e2:59:04:f7:2d:35: db:04:2b:11:ea:c7:a0:1c:4a:96:84:20:f7:f3:d5:f1:8d:e4: 30:99:c0:2f:0f:79:d4:1e:0b:a8:9a:27:9b:d5:b4:7d:c4:93: 6e:b7:ac:87:52:4c:67:4f:e8:15:f0:3d:de:c4:d5:71:6c:cd: 17:59:39:9b:22:2e:ea:7b:98:df:0e:aa:20:15:58:43:0c:57: 67:e3:be:89:df:41:b1:be:9d:70:fa:57:d1:95:aa:7f:23:ae: 75:fb:83:fa:de:a9:0f:82:be:2a:a3:c8:6f:59:64:ea:de:a4: 32:2a:2f:1c:3f:56:88:4a:5d:c3:2d:f1:cf:02:cf:b9:8b:97: 58:2b:f5:53:ea:8a:86:5b:82:76:e4:19:7b:f8:46:c1:dd:f4: 48:5c:69:f7:66:8b:f1:b7:8e:fb:c7:d0:e2:86:a6:4d:3f:4f: e1:e3:80:55:fa:17:d6:0e:b6:d4:4c:61:58:f2:7c:c5:24:62: 75:61:b3:af:b1:7a:9a:b4:f3:33:b5:54:53:18:d8:84:03:99: 6d:31:22:c1:1e:2c:f5:45:26:ec:3f:a0:f8:b1:45:d4:a9:75: 58:1b:cf:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/a5/friPh6jGi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYxNloXDTI1MDczMDE3MjYxNlowLzEtMCsGA1UEAxMk M2VhYjJlNTUtMjEyMi00ZDEzLTg1NGMtNTdjM2VmMGJmNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGlZdSUDoz6CvITGakS/SzqPnBhooRZG1KrV beb2IeN8ePymF9sMo0lfPawxx6CtYVVIq8fAPRAjvIO9EEU0ZI4v73Urr7Zl6a6N ffJ8NWaWKCWez7UObDqSsGhctZLZ0uN+Yj99ZRjAp4W0qjAldcD6jM45RH43RWjh 7gJTD1t9kxpTBMbHsgJzSw21L2Ln82RJl1pr1wUrRKHyZi2/On62SLet1+8LGo62 eZdtpNOdw1Si/5PHnGy1pyE/W8rBYn8V9r7IwY6dWjYIeqFRFDoTgjLPMA2Lq8Ed GEFsjpTdmcxb9hhSc8JaoLd8/Q67dRixi8xq3tZAdzumRvfLKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcikqxVKgGGAQ7B8Ht4VRvHgK3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGRhZGU0NGMtNjM0OS0z ZDMzLWI2ZDQtN2NhOGI5M2YzZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwhhHO9x04+gQx0ScenPnU6rQFtnOzGjOUKZI4YKOJZBPctNdsEKxHq x6AcSpaEIPfz1fGN5DCZwC8PedQeC6iaJ5vVtH3Ek263rIdSTGdP6BXwPd7E1XFs zRdZOZsiLup7mN8OqiAVWEMMV2fjvonfQbG+nXD6V9GVqn8jrnX7g/reqQ+Cviqj yG9ZZOrepDIqLxw/VohKXcMt8c8Cz7mLl1gr9VPqioZbgnbkGXv4RsHd9Ehcafdm i/G3jvvH0OKGpk0/T+HjgFX6F9YOttRMYVjyfMUkYnVhs6+xepq08zO1VFMY2IQD mW0xIsEeLPVFJuw/oPixRdSpdVgbzyI= -----END CERTIFICATE-----Generated at Sun May 11 03:51:53 2025 by rpki-client