$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd9d964a-3f01-30f3-8022-567f1099ca04.roa File: bd9d964a-3f01-30f3-8022-567f1099ca04.roa (raw, json) Hash identifier: AYbwp5v+HgtUByXVx+YWagw9wXm4t5c8HEGIJmLgPbA= Subject key identifier: A1:49:13:8B:84:AB:9E:1A:41:1B:85:AE:0E:5E:91:0E:EE:D2:CA:6C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD5F04D932DADD6F9DFC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd9d964a-3f01-30f3-8022-567f1099ca04.roa Signing time: Thu 01 May 2025 17:25:39 +0000 ROA not before: Thu 01 May 2025 17:25:39 +0000 ROA not after: Wed 30 Jul 2025 17:25:39 +0000 asID: 22773 IP address blocks: 72.197.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:5f:04:d9:32:da:dd:6f:9d:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:39 2025 GMT Not After : Jul 30 17:25:39 2025 GMT Subject: CN=ee1feab9-e7ca-4ee8-b0e2-ea42016dd3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:ef:1f:78:22:3e:4f:46:18:c0:ad:f5:a1: 70:5f:60:ae:37:b9:85:be:d2:15:b7:b8:1f:52:79: 03:90:c5:2d:21:5c:07:3b:3a:25:c7:8b:cc:61:02: 4b:a2:35:7a:11:68:b1:77:ff:ed:8e:98:15:5e:11: cb:f5:68:af:38:44:e0:45:e2:ac:04:dc:33:9c:5a: 42:ee:22:75:6b:fa:37:5e:e1:73:aa:b1:32:43:74: eb:69:40:34:4d:b1:04:1a:04:77:59:0c:9f:d7:47: 7a:01:6d:9b:4c:99:18:ba:6e:3d:7e:db:2f:79:41: 80:7d:3e:de:88:41:89:98:91:60:d8:61:8a:d1:9f: 92:b4:e1:e0:08:0f:a2:36:fa:91:f2:5f:8b:07:23: a2:b3:39:ca:6e:18:ab:e3:72:d8:dc:d2:1a:8a:f5: 36:01:08:e2:bd:f6:e0:2e:22:c1:d9:46:32:06:94: 3a:4f:69:94:d0:b5:38:03:61:74:22:fd:6b:8d:eb: 9a:ef:03:2e:d3:19:41:a0:a1:db:8c:48:85:e5:87: 20:94:38:c4:da:34:1a:3f:04:3f:84:23:76:b9:43: c4:1e:5c:84:b0:df:bf:fa:39:88:1f:27:ac:c7:18: d1:7e:b8:f6:32:08:9b:78:21:00:6c:6a:05:6a:97: c6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:49:13:8B:84:AB:9E:1A:41:1B:85:AE:0E:5E:91:0E:EE:D2:CA:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd9d964a-3f01-30f3-8022-567f1099ca04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f5:ff:9a:03:1a:47:a4:b9:a7:f4:97:59:09:fc:58:44:d9: 42:55:b9:01:20:21:f8:85:3f:d7:b5:8f:a8:fd:61:89:47:3d: ff:8b:f3:0f:55:b5:10:3e:d7:a4:ad:74:c2:ac:f5:83:88:d8: d6:a6:19:a4:a3:d2:aa:5e:3a:57:a1:f0:3f:36:18:e5:d0:5a: c9:f3:72:13:c7:02:d8:77:60:13:a7:73:4c:c6:44:b5:ab:db: 36:81:a5:cb:89:f4:24:29:d6:cc:fc:ab:1e:96:b2:3c:c0:c9: e9:38:41:14:4a:83:12:46:51:eb:96:2d:d6:43:01:97:76:5a: 72:79:8f:2f:b3:ca:68:56:06:11:43:d4:ef:f2:7b:33:5e:91: 70:20:17:4b:31:16:6a:38:84:44:bd:0c:3b:de:47:a1:79:a9: 7b:5f:25:90:87:88:bd:9c:62:3d:0b:97:cc:de:14:30:26:d3: fb:02:6c:06:8a:ed:11:f0:36:32:e2:73:69:f6:f2:51:11:93: 62:e5:04:1e:3e:6b:4a:18:a4:0e:e3:f8:42:14:24:74:aa:70: 43:81:f9:24:64:8f:b3:a5:f5:25:b2:62:46:e0:ae:ab:f2:6e: db:8d:20:b5:81:9d:a0:f8:0a:0d:0b:2c:71:6b:30:80:ee:f6: 43:7a:62:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/V8E2TLa3W+d/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUzOVoXDTI1MDczMDE3MjUzOVowLzEtMCsGA1UEAxMk ZWUxZmVhYjktZTdjYS00ZWU4LWIwZTItZWE0MjAxNmRkM2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNzvH3giPk9GGMCt9aFwX2CuN7mFvtIVt7gf UnkDkMUtIVwHOzolx4vMYQJLojV6EWixd//tjpgVXhHL9WivOETgReKsBNwznFpC 7iJ1a/o3XuFzqrEyQ3TraUA0TbEEGgR3WQyf10d6AW2bTJkYum49ftsveUGAfT7e iEGJmJFg2GGK0Z+StOHgCA+iNvqR8l+LByOisznKbhir43LY3NIaivU2AQjivfbg LiLB2UYyBpQ6T2mU0LU4A2F0Iv1rjeua7wMu0xlBoKHbjEiF5YcglDjE2jQaPwQ/ hCN2uUPEHlyEsN+/+jmIHyesxxjRfrj2MgibeCEAbGoFapfGMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFJE4uEq54aQRuFrg5ekQ7u0spsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmQ5ZDk2NGEtM2YwMS0z MGYzLTgwMjItNTY3ZjEwOTljYTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF71/5oDGkekuaf0l1kJ/FhE2UJVuQEgIfiFP9e1j6j9YYlHPf+L8w9V tRA+16StdMKs9YOI2NamGaSj0qpeOleh8D82GOXQWsnzchPHAth3YBOnc0zGRLWr 2zaBpcuJ9CQp1sz8qx6WsjzAyek4QRRKgxJGUeuWLdZDAZd2WnJ5jy+zymhWBhFD 1O/yezNekXAgF0sxFmo4hES9DDveR6F5qXtfJZCHiL2cYj0Ll8zeFDAm0/sCbAaK 7RHwNjLic2n28lERk2LlBB4+a0oYpA7j+EIUJHSqcEOB+SRkj7Ol9SWyYkbgrqvy btuNILWBnaD4Cg0LLHFrMIDu9kN6Yqs= -----END CERTIFICATE-----Generated at Sun May 11 16:52:46 2025 by rpki-client