$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a69bffea-90da-36be-a56b-1d4aa30b8228.roa File: a69bffea-90da-36be-a56b-1d4aa30b8228.roa (raw, json) Hash identifier: 11nlB8VwyQrsbqJsBlaQcjiKoMJ246LBY4mnM/p/u8w= Subject key identifier: F3:F3:61:38:7C:09:45:92:11:DF:10:1A:3E:79:A7:68:3B:09:F3:52 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD8692BAEFAC27EA668CC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a69bffea-90da-36be-a56b-1d4aa30b8228.roa Signing time: Thu 01 May 2025 17:25:58 +0000 ROA not before: Thu 01 May 2025 17:25:58 +0000 ROA not after: Wed 30 Jul 2025 17:25:58 +0000 asID: 22773 IP address blocks: 72.199.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:86:92:ba:ef:ac:27:ea:66:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:58 2025 GMT Not After : Jul 30 17:25:58 2025 GMT Subject: CN=4f808c86-a7eb-48fa-9155-ec244b533ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bf:2c:9e:e5:25:fd:be:61:cb:7d:9f:15:9d: 9d:d0:79:2c:4e:df:53:b2:34:3d:1a:ad:26:f7:45: 94:74:da:ae:2d:ef:24:15:43:50:ce:2c:93:69:b3: a6:16:cf:3a:95:44:c8:46:39:18:f5:e1:58:d8:0c: a8:e7:3c:e4:cd:b4:f5:9e:90:cb:18:42:8c:a4:2c: 9b:56:89:d5:bf:3c:dc:b5:63:f2:d1:d8:b5:2c:6c: 75:7a:ca:31:a9:70:a9:8f:7b:45:f5:cd:6c:ef:e0: ee:eb:bf:b1:4c:8d:a3:04:ce:68:28:d6:84:9f:c6: b7:05:81:a5:fe:8d:51:1a:64:73:ee:1d:14:82:77: 94:53:9b:ee:98:0b:67:ba:43:87:24:8b:84:7f:57: 73:e1:b3:c4:12:4e:bf:e1:23:28:ca:65:e4:e7:30: de:55:88:b4:6c:a7:15:3a:c1:a2:7c:73:2f:02:f7: 3a:99:ff:e9:da:a9:32:e4:c7:6c:86:59:13:13:0c: 7e:55:ce:6c:da:e8:6f:3c:bd:a1:b6:bd:e9:5c:09: 0c:de:74:c3:2b:d4:91:f2:14:ee:c1:20:37:87:9f: 2f:93:bf:ac:a2:2e:88:21:3b:ee:fe:8a:7a:61:ab: 02:34:a4:e8:b5:0d:e7:4d:63:a1:92:d0:0b:dc:f2: 7b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F3:61:38:7C:09:45:92:11:DF:10:1A:3E:79:A7:68:3B:09:F3:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a69bffea-90da-36be-a56b-1d4aa30b8228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:60:6c:b4:f3:f6:0c:16:a9:af:3c:01:d2:03:52:bf:df:29: e0:ef:db:85:9c:4b:e4:54:f6:16:1f:f9:ba:6d:c7:f1:86:cd: 7d:39:bb:2a:9e:c5:54:70:a2:bd:8f:a0:20:ce:0b:77:38:5d: 58:76:33:74:1d:a8:3b:8c:a7:49:49:e4:fc:54:1e:49:c1:93: 4d:c2:03:c0:c4:c2:2e:28:21:d1:a1:29:f9:30:49:b2:4e:ed: 4c:a1:75:23:e6:44:de:3a:5e:69:b9:83:cf:db:3e:48:f2:42: c3:99:f7:9e:df:8b:b2:4c:d0:da:5b:3d:44:7b:28:15:13:14: c4:fe:c8:c6:3c:41:9d:e8:47:59:4c:db:23:cc:53:e3:68:b2: d5:5d:af:d2:33:65:e8:f9:0a:db:44:71:93:4b:8a:78:a6:a4: 56:59:ce:cb:47:20:99:8c:46:3a:bf:4e:74:2b:86:e3:53:16: 07:64:c1:80:c1:5a:72:64:8c:2d:98:c9:41:1e:c4:4f:5f:fb: 13:ef:82:66:4d:80:96:56:43:87:84:aa:bb:83:1c:24:bb:f2: 4d:78:cf:b1:7c:85:a1:a0:70:44:36:6d:13:fe:91:de:09:eb: b9:4d:a9:f2:e9:00:43:21:34:a7:db:d4:5c:bd:86:e9:b2:d4: b0:c7:15:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/YaSuu+sJ+pmjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjU1OFoXDTI1MDczMDE3MjU1OFowLzEtMCsGA1UEAxMk NGY4MDhjODYtYTdlYi00OGZhLTkxNTUtZWMyNDRiNTMzZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr8snuUl/b5hy32fFZ2d0HksTt9TsjQ9Gq0m 90WUdNquLe8kFUNQziyTabOmFs86lUTIRjkY9eFY2Ayo5zzkzbT1npDLGEKMpCyb VonVvzzctWPy0di1LGx1esoxqXCpj3tF9c1s7+Du67+xTI2jBM5oKNaEn8a3BYGl /o1RGmRz7h0UgneUU5vumAtnukOHJIuEf1dz4bPEEk6/4SMoymXk5zDeVYi0bKcV OsGifHMvAvc6mf/p2qky5MdshlkTEwx+Vc5s2uhvPL2htr3pXAkM3nTDK9SR8hTu wSA3h58vk7+soi6IITvu/op6YasCNKTotQ3nTWOhktAL3PJ7CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPzYTh8CUWSEd8QGj55p2g7CfNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY5YmZmZWEtOTBkYS0z NmJlLWE1NmItMWQ0YWEzMGI4MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNgbLTz9gwWqa88AdIDUr/fKeDv24WcS+RU9hYf+bptx/GGzX05uyqe xVRwor2PoCDOC3c4XVh2M3QdqDuMp0lJ5PxUHknBk03CA8DEwi4oIdGhKfkwSbJO 7UyhdSPmRN46Xmm5g8/bPkjyQsOZ957fi7JM0NpbPUR7KBUTFMT+yMY8QZ3oR1lM 2yPMU+NostVdr9IzZej5CttEcZNLinimpFZZzstHIJmMRjq/TnQrhuNTFgdkwYDB WnJkjC2YyUEexE9f+xPvgmZNgJZWQ4eEqruDHCS78k14z7F8haGgcEQ2bRP+kd4J 67lNqfLpAEMhNKfb1Fy9humy1LDHFbE= -----END CERTIFICATE-----Generated at Sat May 10 07:40:41 2025 by rpki-client