$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3201164-e621-3974-8ba6-a54ad9d4b301.roa File: b3201164-e621-3974-8ba6-a54ad9d4b301.roa (raw, json) Hash identifier: OHkTn2g2qv7NLUnCVr3v0YNG4Z+QdLr/TuMWKBjgN0g= Subject key identifier: 4F:02:2E:B4:22:70:07:A7:44:DF:2F:1E:3D:70:9A:60:C4:6A:A0:BF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F59C938390E9E3A7F69300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3201164-e621-3974-8ba6-a54ad9d4b301.roa Signing time: Thu 01 May 2025 17:10:01 +0000 ROA not before: Thu 01 May 2025 17:10:01 +0000 ROA not after: Wed 30 Jul 2025 17:10:01 +0000 asID: 22773 IP address blocks: 72.195.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:9c:93:83:90:e9:e3:a7:f6:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:01 2025 GMT Not After : Jul 30 17:10:01 2025 GMT Subject: CN=852ca891-0a51-400f-8bc5-c70243d98d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:e0:2e:bc:ca:43:d0:2d:f0:09:0e:db:8d: 75:09:a3:5f:63:2e:ff:6b:da:5b:e9:e2:fc:34:e4: 43:d0:bf:aa:5b:39:76:47:a6:8e:4b:d5:0e:a4:03: f0:b4:cb:21:2b:18:01:4a:19:fd:10:9e:81:d1:4d: 7c:46:e6:a3:35:be:39:6d:eb:c3:d8:76:df:c5:91: 4e:28:ab:9c:0b:99:67:01:f5:17:2f:f9:cb:a8:b4: 1d:9e:f4:3f:79:55:d7:f0:dc:b6:71:8b:54:8c:2a: 02:14:fe:32:c2:e0:4b:78:59:9b:4c:e4:5a:b7:14: 9c:0f:18:35:34:e7:7c:75:f3:8e:68:46:2e:bf:62: e0:12:1a:85:ba:8f:42:66:21:00:08:5e:77:0a:7f: 22:c8:7e:95:3c:3a:9f:34:64:2d:7f:b8:f5:4b:84: d8:0c:c7:68:4c:56:7b:69:a9:91:94:f2:64:f6:3a: 7d:2e:e2:84:9d:d2:3c:ed:5a:3a:01:85:e0:46:e1: 16:b8:0e:7a:8c:f1:a0:45:48:3d:6e:8a:30:ca:5b: 14:7b:b2:6b:ab:0d:a5:00:3e:ca:55:4e:9c:fe:7c: b7:c0:82:f1:69:55:55:40:27:7f:fb:7f:ef:68:0b: f1:41:c2:53:6e:b7:c4:5a:10:b0:44:be:ed:73:0f: 49:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:02:2E:B4:22:70:07:A7:44:DF:2F:1E:3D:70:9A:60:C4:6A:A0:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3201164-e621-3974-8ba6-a54ad9d4b301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.195.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:3c:30:2e:c9:aa:3e:b0:f9:54:f7:de:83:e5:f6:9c:c3:40: 7d:9e:5c:12:32:f1:f6:54:57:6c:20:06:9a:d3:d2:ee:b2:9e: 0d:49:5f:99:33:cd:5d:05:52:28:60:cc:da:d1:82:8a:fb:7b: 75:de:05:4d:f3:1b:dd:c1:1e:b3:b5:9c:99:d3:ad:5a:07:4b: 57:02:c1:1b:89:da:20:91:54:d0:d4:e1:92:94:00:72:d5:7f: aa:e3:f6:ea:ea:55:bd:2e:f9:ec:ab:30:88:57:55:75:e9:47: 9f:18:69:ad:1b:70:f9:58:c5:d0:94:94:b1:62:c3:35:f5:0d: 09:d6:e5:84:9c:cf:1d:3e:4b:f9:78:95:f4:15:9c:03:e7:02: 2d:98:76:6c:ca:e1:59:29:fb:5d:48:ca:cf:0e:0c:e8:b0:19: a3:4e:ba:e3:de:37:94:de:24:a8:16:87:e0:94:03:e8:d1:0c: 56:a8:93:f9:9f:84:48:bf:ce:e4:22:86:29:69:7a:e2:77:31: 5d:c5:07:e4:5d:85:7f:f1:51:b5:07:c7:63:e3:a1:db:d8:cd: 6b:f1:fb:99:a8:14:5f:63:ba:aa:83:d7:7d:97:c9:e7:b3:b9: e5:c7:82:96:b6:69:15:a3:b5:97:d9:94:58:80:1c:06:e9:3a: 4e:45:e9:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19ZyTg5Dp46f2kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAwMVoXDTI1MDczMDE3MTAwMVowLzEtMCsGA1UEAxMk ODUyY2E4OTEtMGE1MS00MDBmLThiYzUtYzcwMjQzZDk4ZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbHgLrzKQ9At8AkO2411CaNfYy7/a9pb6eL8 NORD0L+qWzl2R6aOS9UOpAPwtMshKxgBShn9EJ6B0U18RuajNb45bevD2HbfxZFO KKucC5lnAfUXL/nLqLQdnvQ/eVXX8Ny2cYtUjCoCFP4ywuBLeFmbTORatxScDxg1 NOd8dfOOaEYuv2LgEhqFuo9CZiEACF53Cn8iyH6VPDqfNGQtf7j1S4TYDMdoTFZ7 aamRlPJk9jp9LuKEndI87Vo6AYXgRuEWuA56jPGgRUg9boowylsUe7Jrqw2lAD7K VU6c/ny3wILxaVVVQCd/+3/vaAvxQcJTbrfEWhCwRL7tcw9JlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8CLrQicAenRN8vHj1wmmDEaqC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjMyMDExNjQtZTYyMS0z OTc0LThiYTYtYTU0YWQ5ZDRiMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk8MC7Jqj6w+VT33oPl9pzDQH2eXBIy8fZUV2wgBprT0u6yng1JX5kz zV0FUihgzNrRgor7e3XeBU3zG93BHrO1nJnTrVoHS1cCwRuJ2iCRVNDU4ZKUAHLV f6rj9urqVb0u+eyrMIhXVXXpR58Yaa0bcPlYxdCUlLFiwzX1DQnW5YSczx0+S/l4 lfQVnAPnAi2YdmzK4Vkp+11Iys8ODOiwGaNOuuPeN5TeJKgWh+CUA+jRDFaok/mf hEi/zuQihilpeuJ3MV3FB+RdhX/xUbUHx2PjodvYzWvx+5moFF9juqqD132Xyeez ueXHgpa2aRWjtZfZlFiAHAbpOk5F6bM= -----END CERTIFICATE-----Generated at Mon May 12 12:45:46 2025 by rpki-client