$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9823cfe6-424c-331f-ae58-9c15b096596d.roa File: 9823cfe6-424c-331f-ae58-9c15b096596d.roa (raw, json) Hash identifier: Y/QkhVGf3em5fDxqOXG+tuqf++jUmszm8LWLvr8V8qU= Subject key identifier: 89:2B:E6:F2:52:17:DA:FC:9D:5A:29:09:A1:80:87:E8:D4:90:89:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDAABF729D4AD632CEE480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9823cfe6-424c-331f-ae58-9c15b096596d.roa Signing time: Thu 01 May 2025 17:26:15 +0000 ROA not before: Thu 01 May 2025 17:26:15 +0000 ROA not after: Wed 30 Jul 2025 17:26:15 +0000 asID: 22773 IP address blocks: 72.220.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:aa:bf:72:9d:4a:d6:32:ce:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:15 2025 GMT Not After : Jul 30 17:26:15 2025 GMT Subject: CN=8983ae58-3efe-4111-9c4e-843c4d5e93b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:3f:60:1b:c2:de:54:30:dc:2e:66:90:29: 0d:3a:b0:cf:b1:39:8a:90:30:9f:5d:7b:50:c5:c8: 7a:22:ce:63:c2:99:fd:7a:59:8b:d4:cd:9e:c3:6a: 8a:8c:9a:91:51:18:b3:03:cc:24:da:c9:2e:27:da: 3a:2c:98:a9:44:09:ab:99:ed:18:d0:2a:2c:8d:45: bb:5c:99:d9:a2:5d:9f:91:91:d1:55:5e:97:c0:9e: 16:0f:67:b8:e5:0b:93:dd:84:13:d3:d8:b0:38:eb: e5:37:92:f6:06:5f:43:60:f6:5b:46:96:f9:ff:d5: 01:04:90:9f:62:87:44:54:a0:c7:f9:23:44:c7:9c: f8:98:ea:ef:6b:e3:76:80:38:e9:7b:6c:c3:4a:61: ca:93:e2:3d:8a:ae:c1:b7:8e:48:b2:88:bd:90:a1: cb:cb:bd:af:57:4d:8f:7b:c5:6d:58:61:98:40:e6: c5:70:16:ce:5b:57:f2:79:53:9e:d3:af:67:d8:6d: ab:2f:76:7f:a6:bc:8c:00:67:48:53:45:17:4d:8c: 43:86:c7:82:a1:ca:68:69:a8:2f:16:b4:ea:d7:ee: fc:b8:4d:43:b6:0e:f5:a6:26:ee:6a:23:7a:65:ec: f1:f7:0f:50:a9:74:8f:11:e3:61:31:98:db:48:eb: 92:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2B:E6:F2:52:17:DA:FC:9D:5A:29:09:A1:80:87:E8:D4:90:89:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9823cfe6-424c-331f-ae58-9c15b096596d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:93:28:f8:c8:34:7e:3a:01:e7:8a:0b:84:44:fd:21:e1:91: de:24:52:b8:1b:37:9a:58:dd:76:02:9e:47:48:89:ce:f4:a4: b3:9f:5f:16:53:10:03:2c:4a:20:df:e9:3d:10:d2:ec:fd:87: 36:47:c6:aa:e4:15:b9:1d:b7:6b:7b:33:9d:97:63:60:ee:53: 53:7c:c0:aa:a1:37:e2:c3:9b:72:8b:77:d1:3c:39:db:c2:85: 14:51:b5:5c:94:7b:46:76:d7:33:18:33:ae:2b:3d:62:3f:29: ae:a4:c6:1e:cd:f0:8b:8c:d9:32:dd:88:fa:eb:72:86:78:53: 52:f0:a0:c8:4c:53:75:04:7b:92:a9:42:12:4b:a0:5b:dd:99: 87:4d:a5:09:5e:e7:04:9c:37:cf:49:22:9d:eb:7c:f2:f8:fd: 2a:bd:73:32:ea:33:9c:3c:22:b1:2d:69:6c:b4:c4:bc:e3:8e: 7b:f0:90:29:7f:2e:80:23:1d:be:df:3b:17:28:80:c7:51:eb: d3:78:e8:66:e2:88:7f:26:dd:8d:81:13:58:2a:9e:46:54:06: a7:3d:2c:d8:e3:1a:ec:ea:3d:97:3b:e6:51:83:97:e8:c7:30: 2f:32:f8:8e:7d:7e:90:c4:eb:db:39:0e:47:fc:76:f3:f9:a5: f2:6c:58:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/aq/cp1K1jLO5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYxNVoXDTI1MDczMDE3MjYxNVowLzEtMCsGA1UEAxMk ODk4M2FlNTgtM2VmZS00MTExLTljNGUtODQzYzRkNWU5M2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3c/YBvC3lQw3C5mkCkNOrDPsTmKkDCfXXtQ xch6Is5jwpn9elmL1M2ew2qKjJqRURizA8wk2skuJ9o6LJipRAmrme0Y0CosjUW7 XJnZol2fkZHRVV6XwJ4WD2e45QuT3YQT09iwOOvlN5L2Bl9DYPZbRpb5/9UBBJCf YodEVKDH+SNEx5z4mOrva+N2gDjpe2zDSmHKk+I9iq7Bt45Isoi9kKHLy72vV02P e8VtWGGYQObFcBbOW1fyeVOe069n2G2rL3Z/pryMAGdIU0UXTYxDhseCocpoaagv FrTq1+78uE1Dtg71pibuaiN6Zezx9w9QqXSPEeNhMZjbSOuS2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkr5vJSF9r8nVopCaGAh+jUkIlVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTgyM2NmZTYtNDI0Yy0z MzFmLWFlNTgtOWMxNWIwOTY1OTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNz2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyTKPjINH46AeeKC4RE/SHhkd4kUrgbN5pY3XYCnkdIic70pLOfXxZT EAMsSiDf6T0Q0uz9hzZHxqrkFbkdt2t7M52XY2DuU1N8wKqhN+LDm3KLd9E8OdvC hRRRtVyUe0Z21zMYM64rPWI/Ka6kxh7N8IuM2TLdiPrrcoZ4U1LwoMhMU3UEe5Kp QhJLoFvdmYdNpQle5wScN89JIp3rfPL4/Sq9czLqM5w8IrEtaWy0xLzjjnvwkCl/ LoAjHb7fOxcogMdR69N46GbiiH8m3Y2BE1gqnkZUBqc9LNjjGuzqPZc75lGDl+jH MC8y+I59fpDE69s5Dkf8dvP5pfJsWOc= -----END CERTIFICATE-----Generated at Sun May 11 09:28:11 2025 by rpki-client