$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad5743a-ed2e-3cb5-990d-4294f1e76d27.roa File: bad5743a-ed2e-3cb5-990d-4294f1e76d27.roa (raw, json) Hash identifier: bpsfNrz2YUu0Kem35lqpt7nx36WZ+aR4s6pFUWzQEG8= Subject key identifier: A7:53:5D:B9:19:DB:0F:33:63:25:74:A2:5F:86:98:C7:6C:A9:8C:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDBCB47498769F0C736080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad5743a-ed2e-3cb5-990d-4294f1e76d27.roa Signing time: Thu 01 May 2025 17:26:23 +0000 ROA not before: Thu 01 May 2025 17:26:23 +0000 ROA not after: Wed 30 Jul 2025 17:26:23 +0000 asID: 22773 IP address blocks: 72.221.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:bc:b4:74:98:76:9f:0c:73:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:23 2025 GMT Not After : Jul 30 17:26:23 2025 GMT Subject: CN=392a2db2-d3db-4c5d-8a21-72bfbba0820a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:32:3a:f1:25:2f:d3:9a:e0:cf:6d:3c:72: e8:fb:c6:0b:b7:4d:d8:6a:b5:1b:48:e9:1b:5b:24: 59:b5:94:e8:cd:29:0b:fb:32:d2:d0:82:78:8e:3a: 40:dd:89:3e:1e:62:67:82:54:0d:65:22:ac:4a:33: 7b:c6:e8:a7:8f:7a:1e:0e:6a:95:8f:ba:74:ab:ac: 79:70:32:67:1e:95:39:30:a1:93:ae:11:7a:fc:2b: d4:2f:36:6a:94:ac:f4:53:cf:f7:95:4a:dc:94:1e: 22:6c:13:30:e9:6a:fc:3a:4c:ed:ac:b0:98:13:77: 8a:1d:01:02:a1:ce:82:7c:58:2d:f7:ea:2c:a2:9e: 07:8f:aa:78:75:0d:99:18:9b:70:ff:3a:fe:d5:ed: e7:c7:86:a8:ae:6b:f0:ea:dd:9b:4f:0f:65:8a:68: 93:67:87:ae:e4:96:2b:b9:51:6e:cd:bf:18:f9:25: 83:74:ed:5b:ab:41:fe:20:92:95:20:54:e8:93:99: d8:6f:05:4f:c3:11:ca:eb:fa:f0:20:51:36:a8:1a: 4e:f5:6b:3b:97:80:93:d9:51:9d:44:59:de:eb:a5: 36:a6:59:2f:d6:25:b3:7b:25:67:66:6d:72:8d:04: 1c:06:54:65:8a:18:d6:4e:3c:b8:c1:bb:f1:a8:11: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:53:5D:B9:19:DB:0F:33:63:25:74:A2:5F:86:98:C7:6C:A9:8C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad5743a-ed2e-3cb5-990d-4294f1e76d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e6:36:2f:79:de:f8:5d:44:bf:15:d1:96:6f:3f:f0:76:18: 8d:b8:8b:b8:aa:83:58:bc:d6:47:62:a2:0c:44:74:be:ee:d5: fe:11:1b:2b:c4:bc:fd:82:82:5f:c0:52:32:e2:b1:7d:52:5a: 38:5f:4f:cf:a9:8e:cc:7e:83:92:cf:af:db:2f:db:59:d1:01: eb:ed:8c:c7:39:f0:ef:cd:e2:e9:3a:68:5a:05:be:d5:37:09: 38:bc:39:d6:7a:c6:8d:79:40:f1:1a:94:b1:f6:9e:af:48:33: 12:2c:3f:91:bf:f9:7b:d7:c3:8e:87:cc:d0:0c:35:cf:89:dc: be:c1:1b:55:4f:a9:af:f2:f6:e9:3e:fa:93:d7:fa:ce:ff:5c: e1:2e:cf:bb:06:2b:8c:4a:cc:4d:19:a0:99:f8:2b:25:80:d6: db:e8:2e:96:a0:12:6e:f7:e7:9b:c2:ca:48:72:c8:bf:ea:a8: ff:0f:c7:60:f9:31:bd:00:93:88:b7:a5:4e:59:85:ae:de:2b: 1d:46:2e:72:36:db:e6:ca:25:93:06:b0:aa:f1:0f:f5:33:6f: f4:0f:6a:ae:2f:8c:a7:04:8c:0c:da:5b:0a:19:24:85:fd:28: ce:99:3b:b4:4c:5a:d1:cf:54:f5:67:24:67:8e:40:d6:29:65: 54:6d:33:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/by0dJh2nwxzYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYyM1oXDTI1MDczMDE3MjYyM1owLzEtMCsGA1UEAxMk MzkyYTJkYjItZDNkYi00YzVkLThhMjEtNzJiZmJiYTA4MjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0QyOvElL9Oa4M9tPHLo+8YLt03YarUbSOkb WyRZtZTozSkL+zLS0IJ4jjpA3Yk+HmJnglQNZSKsSjN7xuinj3oeDmqVj7p0q6x5 cDJnHpU5MKGTrhF6/CvULzZqlKz0U8/3lUrclB4ibBMw6Wr8OkztrLCYE3eKHQEC oc6CfFgt9+osop4Hj6p4dQ2ZGJtw/zr+1e3nx4aormvw6t2bTw9limiTZ4eu5JYr uVFuzb8Y+SWDdO1bq0H+IJKVIFTok5nYbwVPwxHK6/rwIFE2qBpO9Ws7l4CT2VGd RFne66U2plkv1iWzeyVnZm1yjQQcBlRlihjWTjy4wbvxqBEbYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdTXbkZ2w8zYyV0ol+GmMdsqYyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFkNTc0M2EtZWQyZS0z Y2I1LTk5MGQtNDI5NGYxZTc2ZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArmNi953vhdRL8V0ZZvP/B2GI24i7iqg1i81kdiogxEdL7u1f4RGyvE vP2Cgl/AUjLisX1SWjhfT8+pjsx+g5LPr9sv21nRAevtjMc58O/N4uk6aFoFvtU3 CTi8OdZ6xo15QPEalLH2nq9IMxIsP5G/+XvXw46HzNAMNc+J3L7BG1VPqa/y9uk+ +pPX+s7/XOEuz7sGK4xKzE0ZoJn4KyWA1tvoLpagEm7355vCykhyyL/qqP8Px2D5 Mb0Ak4i3pU5Zha7eKx1GLnI22+bKJZMGsKrxD/Uzb/QPaq4vjKcEjAzaWwoZJIX9 KM6ZO7RMWtHPVPVnJGeOQNYpZVRtM1Q= -----END CERTIFICATE-----Generated at Sun May 11 09:06:28 2025 by rpki-client