$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce62c3a2-36d3-390f-b7c9-d671e14c82f5.roa File: ce62c3a2-36d3-390f-b7c9-d671e14c82f5.roa (raw, json) Hash identifier: sAfD2cPEeHFb0m18btZx82ms0jCkovUG6o4AWisBmZc= Subject key identifier: C2:B7:BE:4A:D4:8E:A3:C9:2E:3F:A9:AB:74:53:4A:3E:21:7A:BF:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F85F12DC9EE0203ECC0500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce62c3a2-36d3-390f-b7c9-d671e14c82f5.roa Signing time: Thu 01 May 2025 17:15:34 +0000 ROA not before: Thu 01 May 2025 17:15:34 +0000 ROA not after: Wed 30 Jul 2025 17:15:34 +0000 asID: 22773 IP address blocks: 72.218.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:5f:12:dc:9e:e0:20:3e:cc:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:34 2025 GMT Not After : Jul 30 17:15:34 2025 GMT Subject: CN=2a9aa0a2-a1c1-4900-b03c-d26ef96bd75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:27:a4:1c:99:3e:21:a5:8f:de:60:3f:36: 9d:41:ba:25:54:33:4f:bb:06:d9:dc:3a:b2:53:7b: 28:2c:0a:8b:86:ea:ef:88:c9:cb:ec:96:97:03:df: 27:30:74:e5:5a:78:e7:ca:84:1e:99:71:92:00:34: b8:e3:5a:44:e7:8e:70:d7:5d:00:b2:d6:49:14:58: f3:40:e0:42:87:ee:a3:c9:42:1e:c5:34:19:ca:bd: d8:82:d3:a0:1a:61:d8:df:1c:2f:dc:45:21:8f:0e: c3:ae:1b:ef:51:b9:29:0f:9e:65:18:da:70:78:36: f7:72:bf:f9:7b:31:bf:1d:09:9f:f7:15:31:1a:67: 75:a5:2f:c9:19:6a:89:04:70:19:1d:29:66:86:ed: 0e:db:49:8a:33:a1:96:10:ed:d1:e9:64:4f:bd:13: 9d:51:f3:3b:ed:c1:25:fc:42:4d:d8:99:95:3c:1a: b1:ec:07:7b:5a:36:65:27:a9:a6:e8:b3:55:4a:d9: 70:d3:6c:b3:f7:38:de:bc:1c:c5:8d:af:43:fb:bc: b1:a5:31:2a:8a:68:a8:b9:d6:63:09:ac:82:3a:86: d6:97:09:0b:dc:8a:44:10:10:cb:43:a4:3d:f6:14: 15:5b:cf:1f:c4:03:01:d2:24:12:26:1c:04:29:1a: aa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B7:BE:4A:D4:8E:A3:C9:2E:3F:A9:AB:74:53:4A:3E:21:7A:BF:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce62c3a2-36d3-390f-b7c9-d671e14c82f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:0d:4d:cb:ca:2d:dc:fb:70:3c:bb:66:f6:55:1f:91:ac:1d: 84:e6:75:8c:75:d6:c6:e2:bd:ad:65:e1:6d:e4:69:5c:90:34: 40:9c:cb:ad:55:10:44:d6:1f:40:cb:69:dd:d9:a9:dc:ef:7a: 9f:20:7f:fb:79:ed:83:8e:03:fa:80:aa:6c:a4:77:d5:17:a7: c8:57:5a:6a:2e:e9:87:a9:0d:7d:a6:21:2c:9f:2d:3e:1a:07: 88:24:9b:54:7a:82:33:01:5e:37:ee:61:ac:6d:4d:c4:3f:d0: 1b:6f:18:9a:55:38:93:74:ee:68:c4:90:f2:99:e8:3d:0c:dd: 09:b1:ff:0a:6a:ad:9f:6e:a8:f5:85:9b:f2:6e:f8:cc:57:25: 1e:11:e0:9a:8a:f3:23:9a:86:1a:c9:af:5a:23:f0:cc:d7:26: 62:57:77:0c:54:a3:ce:e7:52:03:73:61:17:74:32:b0:b9:33: e8:14:10:0c:28:05:c0:28:f3:69:29:5e:7c:25:24:6d:7d:1f: 5f:da:13:0b:4f:36:9d:29:9d:9a:60:1f:f6:87:3e:ea:a5:b7: 31:ef:65:86:ee:92:99:34:b3:2e:fa:7f:3b:b8:a4:6a:9b:63: 99:ad:d5:17:53:80:38:cf:29:54:47:6e:cc:1b:3f:13:95:d6: ce:fd:8b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+F8S3J7gID7MBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUzNFoXDTI1MDczMDE3MTUzNFowLzEtMCsGA1UEAxMk MmE5YWEwYTItYTFjMS00OTAwLWIwM2MtZDI2ZWY5NmJkNzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7wnpByZPiGlj95gPzadQbolVDNPuwbZ3Dqy U3soLAqLhurviMnL7JaXA98nMHTlWnjnyoQemXGSADS441pE545w110AstZJFFjz QOBCh+6jyUIexTQZyr3YgtOgGmHY3xwv3EUhjw7DrhvvUbkpD55lGNpweDb3cr/5 ezG/HQmf9xUxGmd1pS/JGWqJBHAZHSlmhu0O20mKM6GWEO3R6WRPvROdUfM77cEl /EJN2JmVPBqx7Ad7WjZlJ6mm6LNVStlw02yz9zjevBzFja9D+7yxpTEqimioudZj CayCOobWlwkL3IpEEBDLQ6Q99hQVW88fxAMB0iQSJhwEKRqqxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK3vkrUjqPJLj+pq3RTSj4her9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2U2MmMzYTItMzZkMy0z OTBmLWI3YzktZDY3MWUxNGM4MmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcNTcvKLdz7cDy7ZvZVH5GsHYTmdYx11sbiva1l4W3kaVyQNECcy61V EETWH0DLad3Zqdzvep8gf/t57YOOA/qAqmykd9UXp8hXWmou6YepDX2mISyfLT4a B4gkm1R6gjMBXjfuYaxtTcQ/0BtvGJpVOJN07mjEkPKZ6D0M3Qmx/wpqrZ9uqPWF m/Ju+MxXJR4R4JqK8yOahhrJr1oj8MzXJmJXdwxUo87nUgNzYRd0MrC5M+gUEAwo BcAo82kpXnwlJG19H1/aEwtPNp0pnZpgH/aHPuqltzHvZYbukpk0sy76fzu4pGqb Y5mt1RdTgDjPKVRHbswbPxOV1s79i+g= -----END CERTIFICATE-----Generated at Sat May 10 19:19:28 2025 by rpki-client