$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a593915b-f851-3103-8b70-6d47fb33e307.roa File: a593915b-f851-3103-8b70-6d47fb33e307.roa (raw, json) Hash identifier: 77MoX9sy9Sab3Zq/6H1cq5GBJZCknQ2EjebD32TzpTk= Subject key identifier: 39:C4:01:AA:EF:F7:B6:5A:00:85:5C:36:62:D9:BF:70:9B:8D:71:B4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDB9567F0DD0043680F2E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a593915b-f851-3103-8b70-6d47fb33e307.roa Signing time: Thu 01 May 2025 17:26:22 +0000 ROA not before: Thu 01 May 2025 17:26:22 +0000 ROA not after: Wed 30 Jul 2025 17:26:22 +0000 asID: 22773 IP address blocks: 72.221.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:b9:56:7f:0d:d0:04:36:80:f2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:22 2025 GMT Not After : Jul 30 17:26:22 2025 GMT Subject: CN=7bdb872a-4cc8-45d7-9b3e-3d7cfcc2ae81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:c6:99:6b:64:32:85:8c:f9:7c:e5:40:cc: 29:06:96:ba:e5:0a:20:5f:23:2b:63:a3:ef:df:a7: db:72:2b:5c:1d:3e:af:ed:b2:f7:19:a6:6e:b8:45: 87:6a:e7:bf:9c:d7:98:f0:11:4a:bf:e3:f9:38:62: de:63:4d:49:3e:6a:d4:dc:c5:3a:f3:4c:28:36:97: fb:51:de:70:aa:70:c3:5c:11:79:99:d6:a2:f2:24: 6e:5d:bc:45:e6:b7:b9:94:aa:1c:5f:7e:f5:15:5e: 6c:3f:34:1d:8c:e6:59:11:e5:29:91:69:30:19:15: 04:a5:e6:54:72:5f:a5:bc:88:c7:81:bb:e2:4d:2f: d8:8d:dc:0f:7a:cd:82:68:19:8c:61:80:f2:40:0f: d6:5d:4a:b4:57:f4:65:2f:b8:e3:ed:28:7e:fe:85: 37:57:fb:c6:c5:ae:47:5b:fa:a0:e0:50:1d:c2:b6: 29:bf:5c:9f:b6:65:97:55:b4:04:eb:e9:95:54:13: 3b:84:ae:9c:bd:79:81:21:e4:58:2d:e9:5a:68:23: b8:e2:15:5f:52:e0:1f:d7:b4:16:e6:7a:9a:d1:1f: a0:13:20:13:9d:40:a6:55:9c:33:29:39:5e:2d:a6: 9a:35:79:a5:6c:7e:82:23:67:43:62:5b:94:b9:8a: 39:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C4:01:AA:EF:F7:B6:5A:00:85:5C:36:62:D9:BF:70:9B:8D:71:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a593915b-f851-3103-8b70-6d47fb33e307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:20:45:7a:2c:25:02:bf:35:b0:e2:fb:16:3e:64:4c:9f:08: d9:8d:ee:1f:4e:43:4a:af:78:0d:c2:20:27:3a:79:a9:e0:69: 3c:01:01:b3:c0:77:c2:ce:70:17:17:f4:ab:03:37:52:d1:0a: cd:eb:a1:85:06:3d:cd:bd:7d:b2:27:84:f6:9b:27:73:fe:c3: 93:9f:53:fc:d0:ec:8e:f0:72:b8:a3:8c:cd:32:70:8a:e5:78: 99:40:f0:94:4d:4a:09:70:75:5c:6f:79:4c:73:3e:59:17:7b: 54:4b:ae:3b:e1:53:25:0b:03:dd:10:b7:01:82:d3:ca:0e:db: ab:a8:99:e0:30:84:f1:ee:cc:15:9a:4e:24:df:80:e6:11:46: 70:44:58:66:2b:48:cd:6c:58:62:ed:9a:d0:75:ac:ee:38:9b: 1f:69:c3:1e:b2:cd:ce:30:05:4c:9a:85:c9:c3:d2:c0:b8:e6: 94:a8:de:19:db:68:bd:1e:0e:0b:76:6b:55:17:8b:68:58:f4: 0b:ab:7f:bf:ee:ac:ad:b1:cd:69:86:cd:d7:7d:4a:61:4e:4a: 2d:45:78:6e:30:d8:bb:40:33:cb:bc:ce:41:01:62:d9:0f:50: 9a:70:1c:0c:87:d8:9c:62:bc:c8:d1:63:57:e0:e8:f2:fc:79: 02:3b:a1:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/blWfw3QBDaA8uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYyMloXDTI1MDczMDE3MjYyMlowLzEtMCsGA1UEAxMk N2JkYjg3MmEtNGNjOC00NWQ3LTliM2UtM2Q3Y2ZjYzJhZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQHGmWtkMoWM+XzlQMwpBpa65QogXyMrY6Pv 36fbcitcHT6v7bL3GaZuuEWHaue/nNeY8BFKv+P5OGLeY01JPmrU3MU680woNpf7 Ud5wqnDDXBF5mdai8iRuXbxF5re5lKocX371FV5sPzQdjOZZEeUpkWkwGRUEpeZU cl+lvIjHgbviTS/YjdwPes2CaBmMYYDyQA/WXUq0V/RlL7jj7Sh+/oU3V/vGxa5H W/qg4FAdwrYpv1yftmWXVbQE6+mVVBM7hK6cvXmBIeRYLelaaCO44hVfUuAf17QW 5nqa0R+gEyATnUCmVZwzKTleLaaaNXmlbH6CI2dDYluUuYo5xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnEAarv97ZaAIVcNmLZv3CbjXG0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTU5MzkxNWItZjg1MS0z MTAzLThiNzAtNmQ0N2ZiMzNlMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8gRXosJQK/NbDi+xY+ZEyfCNmN7h9OQ0qveA3CICc6eangaTwBAbPA d8LOcBcX9KsDN1LRCs3roYUGPc29fbInhPabJ3P+w5OfU/zQ7I7wcrijjM0ycIrl eJlA8JRNSglwdVxveUxzPlkXe1RLrjvhUyULA90QtwGC08oO26uomeAwhPHuzBWa TiTfgOYRRnBEWGYrSM1sWGLtmtB1rO44mx9pwx6yzc4wBUyahcnD0sC45pSo3hnb aL0eDgt2a1UXi2hY9Aurf7/urK2xzWmGzdd9SmFOSi1FeG4w2LtAM8u8zkEBYtkP UJpwHAyH2JxivMjRY1fg6PL8eQI7oQs= -----END CERTIFICATE-----Generated at Sun May 11 15:38:36 2025 by rpki-client