$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b573e1c2-cc91-3966-9351-cff3f368128a.roa File: b573e1c2-cc91-3966-9351-cff3f368128a.roa (raw, json) Hash identifier: Dlaoq7Zl4bSJmK+e8Q9cB8zPu4zSlPPvkhyZMOIjS7A= Subject key identifier: FF:AE:56:A7:FB:6C:00:DF:B3:46:39:56:2B:55:05:CA:84:56:94:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD7C0AD735B3FF4DEA0A30 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b573e1c2-cc91-3966-9351-cff3f368128a.roa Signing time: Thu 01 May 2025 17:25:53 +0000 ROA not before: Thu 01 May 2025 17:25:53 +0000 ROA not after: Wed 30 Jul 2025 17:25:53 +0000 asID: 22773 IP address blocks: 72.199.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:7c:0a:d7:35:b3:ff:4d:ea:0a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:53 2025 GMT Not After : Jul 30 17:25:53 2025 GMT Subject: CN=e9edeed0-9a43-4637-9812-e8ac6ffc464b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:d5:a5:07:07:a5:89:89:3d:13:a2:ab:35: 89:3f:f4:e4:94:0e:31:3e:e9:ff:4b:24:35:76:2c: f3:e8:91:f5:49:cb:1a:e6:19:34:8b:b5:f1:4e:cc: bc:97:cd:99:c3:c2:ed:ac:4c:69:f1:69:b9:e9:51: c0:2c:40:c1:15:7e:3e:a0:ad:e8:ce:79:35:d2:a8: bc:04:ba:16:8c:4a:28:4e:dc:ef:79:72:01:fd:d8: cd:09:b2:ec:bb:84:ec:6a:e7:02:df:ba:29:f2:77: 43:f0:04:9b:6d:e0:f9:c6:38:23:86:25:ac:5a:f1: 0b:15:22:ca:d0:ed:5e:af:06:46:5b:7d:ea:67:fd: d6:5a:8a:4e:9b:78:ac:aa:55:10:02:8a:48:99:6f: c3:d4:2c:48:50:58:60:92:ff:1f:bf:f6:cc:53:6e: f8:7f:b9:13:9d:40:9a:18:c0:75:ea:33:c5:3c:d1: 32:62:4f:af:e2:3d:88:7d:b1:e8:4b:80:04:f6:82: 0e:c3:5d:28:2f:67:3a:7c:e7:33:e8:5c:dc:2d:f4: fc:0b:47:6d:82:db:06:f7:82:61:aa:d1:80:94:61: b6:e2:62:27:20:ce:25:ad:11:b2:c0:96:95:64:e3: e0:0d:b2:04:8b:03:64:ce:94:e8:f5:74:ea:54:d7: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AE:56:A7:FB:6C:00:DF:B3:46:39:56:2B:55:05:CA:84:56:94:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b573e1c2-cc91-3966-9351-cff3f368128a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f4:a9:8b:ce:b5:8f:59:f5:4b:c8:2c:8c:f8:fe:e7:0f:50: cf:f4:d6:db:18:3b:88:c4:65:48:a6:a9:a8:cb:50:7f:9b:5d: c5:19:5c:e5:db:33:8f:a4:0b:ce:a2:0c:0e:25:5c:77:29:ff: ea:4e:e6:16:bc:e4:d3:5f:dc:5e:01:e5:8a:fd:c4:48:80:cf: cf:b7:f1:48:a7:a7:03:2d:95:49:fe:4a:fb:f6:2a:a9:d7:8c: 5c:f8:cf:a7:7f:be:90:7a:32:4f:7d:75:4f:2b:b5:88:6c:47: fc:00:c3:3e:49:64:bd:7c:08:aa:91:49:3c:dc:6d:79:2d:21: a8:76:c7:40:ff:e2:b9:45:6c:5f:6b:59:d3:a4:b8:93:30:f8: b5:e4:40:b0:aa:27:92:93:47:fd:cf:7d:92:2b:11:c9:6a:25: 27:92:02:d2:4b:49:c7:e3:32:b5:50:1d:85:bd:46:d5:a8:a7: 0d:bf:f6:a5:95:2e:23:2a:36:76:27:55:c9:8a:23:94:a3:c6: 27:f5:5b:26:c8:f4:9d:8a:49:e6:14:0f:40:0b:ca:bd:50:a2: 84:75:c9:41:03:9b:2b:d7:7e:33:ec:31:2e:4a:00:24:5a:88: 62:75:c1:33:80:9c:53:e6:e3:96:74:57:3a:20:22:95:18:38: c1:c5:a1:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/XwK1zWz/03qCjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjU1M1oXDTI1MDczMDE3MjU1M1owLzEtMCsGA1UEAxMk ZTllZGVlZDAtOWE0My00NjM3LTk4MTItZThhYzZmZmM0NjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreXVpQcHpYmJPROiqzWJP/TklA4xPun/SyQ1 dizz6JH1Scsa5hk0i7XxTsy8l82Zw8LtrExp8Wm56VHALEDBFX4+oK3oznk10qi8 BLoWjEooTtzveXIB/djNCbLsu4TsaucC37op8ndD8ASbbeD5xjgjhiWsWvELFSLK 0O1erwZGW33qZ/3WWopOm3isqlUQAopImW/D1CxIUFhgkv8fv/bMU274f7kTnUCa GMB16jPFPNEyYk+v4j2IfbHoS4AE9oIOw10oL2c6fOcz6FzcLfT8C0dtgtsG94Jh qtGAlGG24mInIM4lrRGywJaVZOPgDbIEiwNkzpTo9XTqVNeoowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+uVqf7bADfs0Y5VitVBcqEVpRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjU3M2UxYzItY2M5MS0z OTY2LTkzNTEtY2ZmM2YzNjgxMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH70qYvOtY9Z9UvILIz4/ucPUM/01tsYO4jEZUimqajLUH+bXcUZXOXb M4+kC86iDA4lXHcp/+pO5ha85NNf3F4B5Yr9xEiAz8+38UinpwMtlUn+Svv2KqnX jFz4z6d/vpB6Mk99dU8rtYhsR/wAwz5JZL18CKqRSTzcbXktIah2x0D/4rlFbF9r WdOkuJMw+LXkQLCqJ5KTR/3PfZIrEclqJSeSAtJLScfjMrVQHYW9RtWopw2/9qWV LiMqNnYnVcmKI5Sjxif1WybI9J2KSeYUD0ALyr1QooR1yUEDmyvXfjPsMS5KACRa iGJ1wTOAnFPm45Z0VzogIpUYOMHFoXg= -----END CERTIFICATE-----Generated at Tue May 13 01:59:26 2025 by rpki-client