$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/933ea5b5-5ec1-3397-8d62-443a8babf2aa.roa File: 933ea5b5-5ec1-3397-8d62-443a8babf2aa.roa (raw, json) Hash identifier: RRBEGEt1H4hs2kAYq/eJpDNOZ8ktu4SMAAzZg6yOIIo= Subject key identifier: 8D:10:6F:29:98:94:FA:E7:23:36:B5:E6:F8:12:9F:E9:1E:D1:EB:1D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD996D92F02957881D8450 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/933ea5b5-5ec1-3397-8d62-443a8babf2aa.roa Signing time: Thu 01 May 2025 17:26:06 +0000 ROA not before: Thu 01 May 2025 17:26:06 +0000 ROA not after: Wed 30 Jul 2025 17:26:06 +0000 asID: 22773 IP address blocks: 72.220.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:99:6d:92:f0:29:57:88:1d:84:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:06 2025 GMT Not After : Jul 30 17:26:06 2025 GMT Subject: CN=0cd37b59-ea4b-4a96-94a0-a404e55972b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:09:9b:57:c0:1b:09:9f:c3:a3:7d:c3:62:43: d6:25:59:10:6e:49:ab:13:76:74:e5:9e:db:04:f6: 2f:5b:09:96:3d:15:0b:fb:bc:3c:1e:96:08:8e:40: 4c:79:92:e0:5d:31:f2:a8:52:a8:ea:87:20:76:ac: e1:9c:ce:54:19:c0:75:89:27:6f:93:69:f8:cf:8b: 24:da:12:55:48:93:1a:1b:6f:de:a1:79:d7:11:bd: 0e:7a:ce:bb:ce:a9:6d:7c:a7:9c:19:d2:23:42:21: 9c:15:24:12:74:69:67:cb:d2:e7:20:1e:89:a1:a5: 4f:59:74:0f:e3:8d:80:aa:ff:ec:2f:8c:bf:01:a0: 11:0e:58:ec:27:61:5e:c3:9c:d9:2c:11:20:65:f6: 4a:cd:e9:79:d1:11:b8:2d:18:3a:ce:61:c1:a6:8c: e2:38:22:cf:c3:9a:ea:60:c5:f9:a3:4a:38:69:a9: 1d:2f:67:d5:83:c2:0f:61:d7:be:ea:14:3a:0f:44: 6a:db:47:79:7b:c0:0b:2d:68:71:7d:35:9e:db:9b: 5a:c5:a0:91:03:8c:42:1a:7c:30:65:81:53:ca:27: 28:6e:76:da:9c:f0:f7:5d:01:a3:d9:72:83:77:7d: bd:61:a0:c5:76:cf:aa:d9:aa:08:2d:7e:c9:35:2a: 37:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:10:6F:29:98:94:FA:E7:23:36:B5:E6:F8:12:9F:E9:1E:D1:EB:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/933ea5b5-5ec1-3397-8d62-443a8babf2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ae:95:7d:5d:0b:3a:1b:b5:ea:37:ca:65:d5:1f:71:2b:d6: bf:2d:cc:72:99:cc:18:f8:ad:99:a0:6c:d9:ae:72:52:dc:73: 1a:68:c1:8e:de:4d:7a:b1:e2:bc:c3:0b:c4:d5:34:a2:03:e3: 0b:b4:2b:44:2e:22:a2:86:56:c8:13:ea:e2:78:02:5a:2c:96: 86:60:dd:d4:1c:bf:00:ff:a6:40:37:15:26:47:7e:ee:d4:60: 70:7b:19:c1:66:ab:84:97:7b:54:37:cc:f7:1b:84:7a:83:7b: b7:04:f6:16:f7:b3:e2:cb:45:dd:aa:f4:f2:1a:c8:d6:02:26: 69:1d:1f:22:5a:f6:b8:01:b3:0b:01:71:34:72:9b:6b:d0:15: 41:ae:7f:2c:3f:8c:e0:f1:81:08:e1:46:14:d5:79:00:25:9e: 42:69:f7:93:dd:f7:2a:fe:f1:c3:07:c5:f3:7d:db:f1:e6:90: 91:60:78:44:3b:b8:83:d8:e3:89:47:57:3d:05:21:c4:9f:d7: dd:e0:a4:52:de:50:d0:88:ae:49:bf:74:f2:56:ef:6d:37:a0: 69:b5:54:30:3e:35:14:8a:c8:7e:8d:68:1c:f8:dd:df:18:a9: 9e:f0:c6:c1:48:12:4e:7f:d0:a9:64:7f:34:a2:0d:f6:a2:36: 57:14:bf:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/ZltkvApV4gdhFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYwNloXDTI1MDczMDE3MjYwNlowLzEtMCsGA1UEAxMk MGNkMzdiNTktZWE0Yi00YTk2LTk0YTAtYTQwNGU1NTk3MmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigmbV8AbCZ/Do33DYkPWJVkQbkmrE3Z05Z7b BPYvWwmWPRUL+7w8HpYIjkBMeZLgXTHyqFKo6ocgdqzhnM5UGcB1iSdvk2n4z4sk 2hJVSJMaG2/eoXnXEb0Oes67zqltfKecGdIjQiGcFSQSdGlny9LnIB6JoaVPWXQP 442Aqv/sL4y/AaARDljsJ2Few5zZLBEgZfZKzel50RG4LRg6zmHBpoziOCLPw5rq YMX5o0o4aakdL2fVg8IPYde+6hQ6D0Rq20d5e8ALLWhxfTWe25taxaCRA4xCGnww ZYFTyicobnbanPD3XQGj2XKDd329YaDFds+q2aoILX7JNSo3jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0QbymYlPrnIza15vgSn+ke0esdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTMzZWE1YjUtNWVjMS0z Mzk3LThkNjItNDQzYThiYWJmMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGulX1dCzobteo3ymXVH3Er1r8tzHKZzBj4rZmgbNmuclLccxpowY7e TXqx4rzDC8TVNKID4wu0K0QuIqKGVsgT6uJ4AlosloZg3dQcvwD/pkA3FSZHfu7U YHB7GcFmq4SXe1Q3zPcbhHqDe7cE9hb3s+LLRd2q9PIayNYCJmkdHyJa9rgBswsB cTRym2vQFUGufyw/jODxgQjhRhTVeQAlnkJp95Pd9yr+8cMHxfN92/HmkJFgeEQ7 uIPY44lHVz0FIcSf193gpFLeUNCIrkm/dPJW7203oGm1VDA+NRSKyH6NaBz43d8Y qZ7wxsFIEk5/0KlkfzSiDfaiNlcUv9M= -----END CERTIFICATE-----Generated at Tue May 13 01:55:41 2025 by rpki-client