$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ac35c469-8b6e-3bc2-893a-7537735f0ac8.roa File: ac35c469-8b6e-3bc2-893a-7537735f0ac8.roa (raw, json) Hash identifier: 8Kw9sTVIqx194tbU0io6spY1vS828E+6geulljXdRTM= Subject key identifier: 37:A0:2F:2C:17:AC:68:EB:7E:53:34:65:2A:64:23:9A:29:99:27:81 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5A833A7C2EB4625B1C780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ac35c469-8b6e-3bc2-893a-7537735f0ac8.roa Signing time: Thu 01 May 2025 17:10:06 +0000 ROA not before: Thu 01 May 2025 17:10:06 +0000 ROA not after: Wed 30 Jul 2025 17:10:06 +0000 asID: 22773 IP address blocks: 72.209.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:a8:33:a7:c2:eb:46:25:b1:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:06 2025 GMT Not After : Jul 30 17:10:06 2025 GMT Subject: CN=ec159592-3fba-4716-88b0-d955c3017afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:04:32:d7:f2:b7:49:89:ce:d9:9b:de:5b: a3:39:b8:dd:20:a0:b1:e4:e0:a0:04:1b:52:47:27: af:ff:e5:6a:a0:5f:44:f2:db:4b:33:b0:0c:95:8b: 01:42:7c:36:93:dc:c0:25:67:fe:c8:ad:1c:22:55: a7:b7:e5:9f:a0:62:c8:82:47:6f:69:bd:e8:e7:92: 5b:13:6c:c1:c0:d3:53:38:0f:25:01:5b:59:b0:a3: 0d:36:db:6d:31:88:e0:ab:96:04:e1:01:ef:f0:3e: 68:fe:7b:b5:31:0e:38:20:c0:65:47:b0:dd:62:61: 1d:a0:4a:64:8a:ca:4f:a2:9d:b3:60:38:f7:91:1e: 81:b5:0a:20:c1:17:b6:40:b6:63:c7:99:1e:96:fe: e9:8f:2c:8a:93:32:7c:ab:6a:8f:46:a5:95:54:11: bd:dd:1f:98:38:47:6e:99:ce:74:38:1b:99:0b:e2: f9:47:95:c1:6e:5b:19:bc:4e:47:79:a6:5d:2f:bb: a7:f4:9a:d5:c6:23:c3:49:8f:87:58:57:e2:be:07: 13:59:8b:6b:32:55:b4:16:34:b6:43:8c:75:f8:c9: eb:ba:1e:59:89:99:40:62:b8:73:f1:0d:85:33:b1: 9d:f7:22:a5:b0:21:d9:83:22:13:93:59:8b:6a:db: c4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A0:2F:2C:17:AC:68:EB:7E:53:34:65:2A:64:23:9A:29:99:27:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ac35c469-8b6e-3bc2-893a-7537735f0ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:47:72:68:64:4e:b4:6d:22:7b:73:5d:58:3e:85:03:92:f6: a7:4d:73:6b:c2:4d:75:58:0f:fe:34:be:a8:eb:ed:77:5f:8a: 01:9e:8c:bb:91:6a:d4:39:f5:32:95:e7:8d:e8:83:57:83:31: 9a:ed:f2:86:91:fc:98:60:09:ff:5f:94:ba:9c:cc:9e:84:e0: ec:4a:e6:7d:47:89:8c:43:6f:db:74:df:f3:7d:e2:45:62:5f: 59:0e:e7:89:8e:a3:61:5f:ac:b5:9d:29:a9:33:ea:03:18:8f: 26:45:e2:f7:38:22:77:6c:cc:d9:30:89:7c:00:6c:81:a4:be: 84:4e:3f:81:6b:28:13:69:1c:37:9e:fc:cb:58:08:52:3b:84: 9b:b9:20:fa:8d:3c:cd:1d:9a:04:8c:4f:08:a2:46:90:76:b9: 90:f6:6c:ee:25:14:8e:6d:93:d6:a4:06:a2:04:c7:27:09:e8: f7:3e:32:02:5a:c5:95:5e:05:63:54:0d:7e:5c:b6:86:f1:52: dc:68:b9:a2:58:df:86:88:d1:65:30:81:7d:23:25:7b:59:40: b9:b6:41:cd:49:49:bb:59:81:cd:ac:fb:79:21:78:69:64:21: 09:8c:be:fb:d1:db:73:d3:9c:ec:6c:81:a4:fc:94:1a:35:69: 64:ff:89:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19agzp8LrRiWxx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAwNloXDTI1MDczMDE3MTAwNlowLzEtMCsGA1UEAxMk ZWMxNTk1OTItM2ZiYS00NzE2LTg4YjAtZDk1NWMzMDE3YWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMIEMtfyt0mJztmb3lujObjdIKCx5OCgBBtS Ryev/+VqoF9E8ttLM7AMlYsBQnw2k9zAJWf+yK0cIlWnt+WfoGLIgkdvab3o55Jb E2zBwNNTOA8lAVtZsKMNNtttMYjgq5YE4QHv8D5o/nu1MQ44IMBlR7DdYmEdoEpk ispPop2zYDj3kR6BtQogwRe2QLZjx5kelv7pjyyKkzJ8q2qPRqWVVBG93R+YOEdu mc50OBuZC+L5R5XBblsZvE5HeaZdL7un9JrVxiPDSY+HWFfivgcTWYtrMlW0FjS2 Q4x1+Mnruh5ZiZlAYrhz8Q2FM7Gd9yKlsCHZgyITk1mLatvEGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDegLywXrGjrflM0ZSpkI5opmSeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWMzNWM0NjktOGI2ZS0z YmMyLTg5M2EtNzUzNzczNWYwYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVHcmhkTrRtIntzXVg+hQOS9qdNc2vCTXVYD/40vqjr7XdfigGejLuR atQ59TKV543og1eDMZrt8oaR/JhgCf9flLqczJ6E4OxK5n1HiYxDb9t03/N94kVi X1kO54mOo2FfrLWdKakz6gMYjyZF4vc4IndszNkwiXwAbIGkvoROP4FrKBNpHDee /MtYCFI7hJu5IPqNPM0dmgSMTwiiRpB2uZD2bO4lFI5tk9akBqIExycJ6Pc+MgJa xZVeBWNUDX5ctobxUtxouaJY34aI0WUwgX0jJXtZQLm2Qc1JSbtZgc2s+3kheGlk IQmMvvvR23PTnOxsgaT8lBo1aWT/ies= -----END CERTIFICATE-----Generated at Mon May 12 04:04:00 2025 by rpki-client