$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7b2e3cd-57f9-3ef2-b6dc-79857aaa3fe4.roa File: a7b2e3cd-57f9-3ef2-b6dc-79857aaa3fe4.roa (raw, json) Hash identifier: c4k8YNUZ9BB+KXavH4filBkRxGWWKr6imUdLhVsZ3wo= Subject key identifier: 76:4B:96:A9:2C:8B:FB:E2:59:E1:8B:46:56:1E:35:AE:72:14:CA:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F8668BF413FB9BB8527580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7b2e3cd-57f9-3ef2-b6dc-79857aaa3fe4.roa Signing time: Thu 01 May 2025 17:15:38 +0000 ROA not before: Thu 01 May 2025 17:15:38 +0000 ROA not after: Wed 30 Jul 2025 17:15:38 +0000 asID: 22773 IP address blocks: 72.218.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:66:8b:f4:13:fb:9b:b8:52:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:38 2025 GMT Not After : Jul 30 17:15:38 2025 GMT Subject: CN=3bd45da0-7aeb-4e22-b264-7955383e3981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5a:46:f7:5d:bb:9b:d0:ec:8a:f8:f8:eb:84: 7d:c1:d4:57:ba:e9:51:a4:f8:cd:c7:03:03:8b:60: 30:3b:b5:ea:0e:c5:f1:c7:ff:27:3a:2b:d7:ed:14: 58:12:72:20:1b:b7:0f:e7:ff:a7:6f:10:a9:3a:a7: 5c:5c:14:dd:ce:26:c0:e5:28:e7:b5:06:3e:47:f6: 8e:5e:c5:ef:d7:f8:de:e0:66:57:3b:5a:03:cd:79: 7e:39:f8:e1:e5:7d:98:c9:a5:4d:65:13:a0:31:73: 16:17:13:ef:6d:30:87:6f:16:d2:f2:ad:2b:a4:ae: 77:a1:f0:b6:9b:7f:9e:70:ff:69:82:ae:d5:ce:71: b2:3b:ba:9a:8c:55:6a:c4:35:3a:98:79:96:69:08: 43:bc:9a:b5:45:ab:ed:80:a8:28:ff:97:5b:af:89: 9a:3f:20:52:a8:66:d5:ec:84:55:8b:62:58:0a:d8: b4:15:4c:e9:c7:7c:3e:42:ac:f3:2b:59:9a:14:85: ac:81:30:28:15:35:40:14:0f:ba:7e:0d:55:b4:e5: ca:47:9b:5b:b1:88:75:ad:45:64:fd:33:f8:ef:70: c0:18:7b:5a:b9:e3:60:02:a3:8a:50:38:62:13:7c: b0:f6:63:de:c3:2e:30:f6:13:4d:bd:d2:19:29:82: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4B:96:A9:2C:8B:FB:E2:59:E1:8B:46:56:1E:35:AE:72:14:CA:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7b2e3cd-57f9-3ef2-b6dc-79857aaa3fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:85:ae:e9:6b:2b:71:f8:6c:aa:9b:eb:6e:2d:db:d7:d9:f8: f0:6c:ea:21:fc:c1:b1:57:fe:46:48:79:f9:90:45:b8:fc:d5: c5:a7:8f:62:e1:d7:44:9f:64:09:34:ae:26:c3:14:d1:45:1b: 37:dd:49:86:13:10:e6:ce:0e:23:3e:49:d5:3c:15:93:25:f5: cb:e6:67:ba:ca:02:86:35:a5:b7:fd:78:79:5e:eb:08:8f:51: 2e:6e:c5:75:48:88:e4:57:85:8e:13:81:23:aa:2c:a5:30:d8: 2c:d9:a0:5e:83:09:52:89:e3:8a:7c:7c:f0:83:da:d8:93:cc: 3c:d8:bd:d2:53:83:49:45:47:8f:72:be:ed:a4:f2:52:fa:db: ec:0b:5f:52:fd:3e:99:00:26:cd:89:df:0f:01:cb:2c:b3:71: 14:7c:7c:b5:0a:98:c3:6c:aa:76:bf:90:05:d7:a2:bd:2f:f7: bc:79:a5:36:69:27:95:c0:f1:dc:ff:c1:f3:5d:1e:56:07:67: f1:3d:3a:41:2a:b3:33:6c:f4:7c:22:09:d2:7b:56:a2:00:93: 36:77:00:96:02:5e:19:13:05:e1:8c:9a:07:43:45:5e:73:3f: 9b:49:b9:11:19:6a:b5:e7:f1:8c:6e:52:24:79:3b:ba:dd:39: 7d:6b:41:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+GaL9BP7m7hSdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUzOFoXDTI1MDczMDE3MTUzOFowLzEtMCsGA1UEAxMk M2JkNDVkYTAtN2FlYi00ZTIyLWIyNjQtNzk1NTM4M2UzOTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61pG9127m9Dsivj464R9wdRXuulRpPjNxwMD i2AwO7XqDsXxx/8nOivX7RRYEnIgG7cP5/+nbxCpOqdcXBTdzibA5SjntQY+R/aO XsXv1/je4GZXO1oDzXl+Ofjh5X2YyaVNZROgMXMWFxPvbTCHbxbS8q0rpK53ofC2 m3+ecP9pgq7VznGyO7qajFVqxDU6mHmWaQhDvJq1RavtgKgo/5dbr4maPyBSqGbV 7IRVi2JYCti0FUzpx3w+QqzzK1maFIWsgTAoFTVAFA+6fg1VtOXKR5tbsYh1rUVk /TP473DAGHtaueNgAqOKUDhiE3yw9mPewy4w9hNNvdIZKYJyrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZLlqksi/viWeGLRlYeNa5yFMoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTdiMmUzY2QtNTdmOS0z ZWYyLWI2ZGMtNzk4NTdhYWEzZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiFrulrK3H4bKqb624t29fZ+PBs6iH8wbFX/kZIefmQRbj81cWnj2Lh 10SfZAk0ribDFNFFGzfdSYYTEObODiM+SdU8FZMl9cvmZ7rKAoY1pbf9eHle6wiP US5uxXVIiORXhY4TgSOqLKUw2CzZoF6DCVKJ44p8fPCD2tiTzDzYvdJTg0lFR49y vu2k8lL62+wLX1L9PpkAJs2J3w8ByyyzcRR8fLUKmMNsqna/kAXXor0v97x5pTZp J5XA8dz/wfNdHlYHZ/E9OkEqszNs9HwiCdJ7VqIAkzZ3AJYCXhkTBeGMmgdDRV5z P5tJuREZarXn8YxuUiR5O7rdOX1rQS4= -----END CERTIFICATE-----Generated at Sun May 11 12:33:19 2025 by rpki-client