$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc90a226-2c3c-3e39-9b7d-7e2f4741a029.roa File: bc90a226-2c3c-3e39-9b7d-7e2f4741a029.roa (raw, json) Hash identifier: /manUoVqWd0th5bpnSSVkRZlZqBTgThpTtcZcaPeSz4= Subject key identifier: 5C:B5:CE:1F:FD:51:85:57:40:3C:DA:B9:B4:EB:C6:2F:24:55:01:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD90E351C07F64A890E500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc90a226-2c3c-3e39-9b7d-7e2f4741a029.roa Signing time: Thu 01 May 2025 17:26:02 +0000 ROA not before: Thu 01 May 2025 17:26:02 +0000 ROA not after: Wed 30 Jul 2025 17:26:02 +0000 asID: 22773 IP address blocks: 72.199.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:90:e3:51:c0:7f:64:a8:90:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:02 2025 GMT Not After : Jul 30 17:26:02 2025 GMT Subject: CN=46252b92-da6b-491c-8809-71b6d84c8fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:c7:5f:8f:32:41:55:16:91:1e:01:3d:11: a7:1a:20:0f:bf:9f:0b:9e:1e:98:2c:9f:9c:ac:20: fd:72:6f:0f:3c:a3:07:f9:e2:0c:49:de:81:70:97: f2:7d:1c:df:af:08:38:80:2d:42:2b:76:e8:ba:81: be:3c:88:6e:46:0c:4e:d5:b4:db:e1:ce:b1:ed:68: f4:c3:7d:34:4a:58:59:39:5f:31:de:77:3e:30:9f: bc:c4:ed:10:40:bf:80:9d:b9:43:10:13:fd:69:14: a2:44:4a:73:dc:bd:7c:33:84:32:9d:8c:78:b5:31: dc:80:a2:5c:99:00:ba:b2:d6:56:27:23:6c:2e:58: 6f:de:bc:84:2e:e1:61:24:d5:7b:32:73:02:e7:54: 7f:87:f7:b5:61:22:c8:b0:13:10:4a:b8:f1:0e:21: 31:0a:cb:0c:79:50:9c:da:5b:95:11:c3:6c:3a:9c: ee:59:9a:cc:c9:6f:aa:7c:39:20:a3:3f:54:8f:62: f6:60:5c:1e:b4:cd:51:1b:34:e0:72:b5:23:33:cd: 03:df:15:b6:90:1d:7b:80:de:d8:d3:47:1a:6d:24: bd:6e:7c:7f:4c:09:47:b5:ae:64:d1:14:96:d9:33: 3a:1f:9d:da:53:5b:45:49:a8:b3:dc:c4:e7:62:6e: 39:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B5:CE:1F:FD:51:85:57:40:3C:DA:B9:B4:EB:C6:2F:24:55:01:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc90a226-2c3c-3e39-9b7d-7e2f4741a029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:19:1e:bc:7f:13:29:ed:46:1e:0d:03:6e:be:9d:16:9c:f5: af:28:11:ae:d5:c8:4b:76:c6:3e:22:f0:ca:b1:b9:c8:bb:92: 72:31:34:a6:63:7e:42:a2:c9:3b:a9:30:5b:52:96:4a:d0:6c: b6:66:be:52:a9:f4:38:59:6a:4c:7f:b0:36:c0:ab:9a:36:85: f6:9a:97:77:95:93:d9:d0:08:a3:c8:71:10:f2:dc:3e:a1:39: 75:86:d8:40:dc:c3:05:5e:b7:bd:96:81:15:dc:7e:69:4b:b7: 50:4e:e1:3c:df:20:65:b6:ad:4f:e5:a7:7b:23:8e:24:76:7c: 13:32:87:69:42:b4:e5:b0:79:dd:d5:f8:92:6f:d4:70:60:01: c0:2a:12:b7:a5:12:22:e9:44:b2:b0:3d:c6:87:75:3b:1a:8a: 49:fc:97:f6:11:77:8a:7e:f4:e5:75:be:36:76:48:b5:25:72: 92:c6:4b:cb:3a:e5:ca:12:ab:35:a9:f0:04:ee:b9:7d:42:8e: 29:cc:47:53:7f:85:90:20:db:d7:f0:af:bb:0f:aa:d5:8f:fd: 11:6d:cc:66:bf:e3:da:b5:f3:33:ba:69:fe:88:81:80:b1:5c: db:fe:53:6d:d2:3b:9e:0a:8e:81:9e:ab:98:f7:8b:42:c9:b0: ad:59:c1:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/ZDjUcB/ZKiQ5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYwMloXDTI1MDczMDE3MjYwMlowLzEtMCsGA1UEAxMk NDYyNTJiOTItZGE2Yi00OTFjLTg4MDktNzFiNmQ4NGM4ZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnDHX48yQVUWkR4BPRGnGiAPv58Lnh6YLJ+c rCD9cm8PPKMH+eIMSd6BcJfyfRzfrwg4gC1CK3bouoG+PIhuRgxO1bTb4c6x7Wj0 w300SlhZOV8x3nc+MJ+8xO0QQL+AnblDEBP9aRSiREpz3L18M4QynYx4tTHcgKJc mQC6stZWJyNsLlhv3ryELuFhJNV7MnMC51R/h/e1YSLIsBMQSrjxDiExCssMeVCc 2luVEcNsOpzuWZrMyW+qfDkgoz9Uj2L2YFwetM1RGzTgcrUjM80D3xW2kB17gN7Y 00cabSS9bnx/TAlHta5k0RSW2TM6H53aU1tFSaiz3MTnYm45dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy1zh/9UYVXQDzaubTrxi8kVQFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmM5MGEyMjYtMmMzYy0z ZTM5LTliN2QtN2UyZjQ3NDFhMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4ZHrx/EyntRh4NA26+nRac9a8oEa7VyEt2xj4i8Mqxuci7knIxNKZj fkKiyTupMFtSlkrQbLZmvlKp9DhZakx/sDbAq5o2hfaal3eVk9nQCKPIcRDy3D6h OXWG2EDcwwVet72WgRXcfmlLt1BO4TzfIGW2rU/lp3sjjiR2fBMyh2lCtOWwed3V +JJv1HBgAcAqErelEiLpRLKwPcaHdTsaikn8l/YRd4p+9OV1vjZ2SLUlcpLGS8s6 5coSqzWp8ATuuX1CjinMR1N/hZAg29fwr7sPqtWP/RFtzGa/49q18zO6af6IgYCx XNv+U23SO54KjoGeq5j3i0LJsK1Zwd0= -----END CERTIFICATE-----Generated at Sat May 10 20:44:24 2025 by rpki-client