$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8db401f-446d-38b3-92d7-8159fcea5976.roa File: b8db401f-446d-38b3-92d7-8159fcea5976.roa (raw, json) Hash identifier: oDonLQ+ajcbChcESwZJ3BBQavXxlHa+CPrHJwmdN+UU= Subject key identifier: 69:68:1B:6E:B6:3D:0D:78:FD:3F:A9:AB:3A:57:84:96:CC:BA:94:0E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD598247182DB5C9AD33C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8db401f-446d-38b3-92d7-8159fcea5976.roa Signing time: Thu 01 May 2025 17:25:36 +0000 ROA not before: Thu 01 May 2025 17:25:36 +0000 ROA not after: Wed 30 Jul 2025 17:25:36 +0000 asID: 22773 IP address blocks: 72.192.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:59:82:47:18:2d:b5:c9:ad:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:36 2025 GMT Not After : Jul 30 17:25:36 2025 GMT Subject: CN=37acb0e7-4113-4722-8d5d-21720d0c6bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:53:8d:66:af:e6:47:fc:4a:13:3e:52:e9:c8: 0f:50:a8:9d:e9:72:fc:05:94:64:5a:33:51:8b:76: eb:4c:26:fe:31:22:3c:e4:c2:87:a6:5f:3c:7b:d4: ae:e5:af:2a:19:2e:b3:21:39:da:8a:66:2e:93:ce: 1b:43:d3:cc:1f:bd:a0:5f:df:64:0d:67:f5:b4:b4: 9a:18:e8:cb:92:43:d4:61:b7:1e:52:a8:99:0e:e1: 2c:69:ca:7d:97:27:80:ea:83:19:f3:94:c3:b6:fd: 65:40:75:b4:4e:52:12:fe:34:54:35:9f:a2:b0:87: 10:e9:c1:2d:55:60:a5:b3:c2:1c:91:be:3b:c9:ff: b8:80:72:7f:17:c4:bb:11:9c:c2:18:ff:40:17:fe: 79:19:8b:a3:de:68:93:dc:99:06:a2:ff:e6:8f:bd: 51:36:67:eb:8b:ed:14:9e:a1:f4:e6:0c:7a:5d:dc: fd:91:82:54:29:58:77:9d:84:2e:ff:aa:54:e2:df: 7e:fc:af:11:c2:56:37:ac:1b:10:30:31:f6:76:f7: fc:7e:94:87:96:1e:95:42:c2:47:ce:17:d2:a1:40: 81:f0:ef:02:5c:c0:ef:88:ac:50:49:1a:e2:61:cd: 55:32:82:1c:1c:8e:bb:1f:88:ab:24:ab:be:40:63: 3c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:68:1B:6E:B6:3D:0D:78:FD:3F:A9:AB:3A:57:84:96:CC:BA:94:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8db401f-446d-38b3-92d7-8159fcea5976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ac:34:c3:bb:8e:70:a5:0c:66:9c:51:f3:7e:03:08:11:3f: d8:bb:8e:9a:e0:f9:7e:8c:53:f4:12:94:86:d0:4f:7b:1c:d5: 7b:ef:e2:32:62:cd:4d:94:69:05:a9:76:78:82:fb:92:8c:a8: 22:41:f9:5d:1c:a2:e9:33:40:85:85:bc:66:d9:4a:56:ed:fd: a1:ca:1a:92:f2:d3:5b:c1:60:28:a2:61:c0:77:52:75:54:2f: 25:2d:b0:8d:b0:ff:13:06:4f:f5:57:2c:8d:a0:6b:13:5b:bf: 7d:5a:00:69:e8:2d:b4:83:91:46:2e:ca:96:68:8a:d6:0e:87: 01:bf:86:06:31:ee:69:ee:37:44:2e:2f:3f:d0:92:6b:5d:ed: df:ab:9c:bd:06:2a:ea:0a:2e:d3:ed:56:d1:7a:e4:ed:62:20: fd:57:6f:c3:4f:b7:80:d0:31:43:57:ef:a9:86:7f:b7:26:84: 73:fd:11:6f:ca:73:0f:31:21:ea:7d:fe:10:fd:59:98:46:a4: c7:ef:c9:6e:3d:25:4c:7d:50:31:f4:45:d0:6b:eb:02:b1:b8: 15:d4:d4:77:40:33:5b:47:53:57:da:8b:e6:47:41:ff:8f:c1: cb:7c:ca:36:76:d4:48:de:75:e2:45:23:fb:5a:ee:a4:c1:d0: f6:43:45:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/VmCRxgttcmtM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUzNloXDTI1MDczMDE3MjUzNlowLzEtMCsGA1UEAxMk MzdhY2IwZTctNDExMy00NzIyLThkNWQtMjE3MjBkMGM2YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21ONZq/mR/xKEz5S6cgPUKid6XL8BZRkWjNR i3brTCb+MSI85MKHpl88e9Su5a8qGS6zITnaimYuk84bQ9PMH72gX99kDWf1tLSa GOjLkkPUYbceUqiZDuEsacp9lyeA6oMZ85TDtv1lQHW0TlIS/jRUNZ+isIcQ6cEt VWCls8Ickb47yf+4gHJ/F8S7EZzCGP9AF/55GYuj3miT3JkGov/mj71RNmfri+0U nqH05gx6Xdz9kYJUKVh3nYQu/6pU4t9+/K8RwlY3rBsQMDH2dvf8fpSHlh6VQsJH zhfSoUCB8O8CXMDviKxQSRriYc1VMoIcHI67H4irJKu+QGM8jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGloG262PQ14/T+pqzpXhJbMupQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjhkYjQwMWYtNDQ2ZC0z OGIzLTkyZDctODE1OWZjZWE1OTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABysNMO7jnClDGacUfN+AwgRP9i7jprg+X6MU/QSlIbQT3sc1Xvv4jJi zU2UaQWpdniC+5KMqCJB+V0coukzQIWFvGbZSlbt/aHKGpLy01vBYCiiYcB3UnVU LyUtsI2w/xMGT/VXLI2gaxNbv31aAGnoLbSDkUYuypZoitYOhwG/hgYx7mnuN0Qu Lz/Qkmtd7d+rnL0GKuoKLtPtVtF65O1iIP1Xb8NPt4DQMUNX76mGf7cmhHP9EW/K cw8xIep9/hD9WZhGpMfvyW49JUx9UDH0RdBr6wKxuBXU1HdAM1tHU1fai+ZHQf+P wct8yjZ21EjedeJFI/ta7qTB0PZDRQ0= -----END CERTIFICATE-----Generated at Sun May 11 04:45:18 2025 by rpki-client