$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d085037d-7180-3e64-947d-c4837186fff1.roa File: d085037d-7180-3e64-947d-c4837186fff1.roa (raw, json) Hash identifier: DKTbUAHeObmM2jQEl6iq5994YBSslzrGb4Gr7eybfLY= Subject key identifier: 75:68:D6:42:7E:4B:83:87:73:EF:FB:24:E7:2F:73:DD:1D:18:49:C0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F854040990AF4F33D62180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d085037d-7180-3e64-947d-c4837186fff1.roa Signing time: Thu 01 May 2025 17:15:29 +0000 ROA not before: Thu 01 May 2025 17:15:29 +0000 ROA not after: Wed 30 Jul 2025 17:15:29 +0000 asID: 22773 IP address blocks: 72.218.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:54:04:09:90:af:4f:33:d6:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:29 2025 GMT Not After : Jul 30 17:15:29 2025 GMT Subject: CN=2c509b61-821e-4714-8ecd-d09f84d0115a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:4e:d7:33:59:fa:a8:6d:1c:b9:7c:09:9f: df:08:09:40:58:43:51:e0:ac:4e:d8:03:dc:cb:f1: a4:93:28:87:14:10:2a:2e:43:19:2c:6c:6c:ab:d5: 0e:53:ad:91:ed:f8:af:b7:e6:f6:4d:04:ed:a1:d8: 16:db:1e:92:bf:eb:34:4d:c4:56:4b:7b:21:91:cb: 4e:a7:13:72:ab:ab:1c:12:96:a8:ed:7a:f2:ff:d9: 11:8d:f9:26:d2:df:10:de:87:72:7f:80:d1:94:8a: 80:0d:4e:39:4c:ce:cd:da:5e:90:80:8b:f6:54:c1: 7e:c3:b9:64:b8:1e:21:fa:15:a0:44:60:bd:26:4e: 3b:2b:9e:ca:ab:f3:7a:2f:49:8e:1a:9c:fa:c1:46: eb:13:3c:c7:8e:2a:85:04:07:ad:f0:2b:32:57:c9: ea:68:c0:bb:a4:b5:3a:ae:48:e0:13:37:d5:08:e0: 96:71:69:9f:43:c4:6e:3d:fd:fd:3f:0e:42:de:e2: b4:46:13:bc:50:bb:c6:b7:26:db:42:a6:93:d5:86: d0:17:c0:9b:12:20:8c:c3:25:99:48:6d:8e:a6:a0: e6:17:53:06:52:2b:28:4b:45:39:db:d5:ae:c8:82: a0:27:63:e9:42:0c:8a:65:a8:2c:4f:b1:73:08:7d: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:68:D6:42:7E:4B:83:87:73:EF:FB:24:E7:2F:73:DD:1D:18:49:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d085037d-7180-3e64-947d-c4837186fff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:04:7a:05:72:f7:c4:bf:69:97:46:f1:5c:cd:72:01:a5:c2: 4c:5b:78:f9:aa:15:83:87:8c:07:05:ff:49:93:94:77:99:e0: a8:78:1e:56:1c:ab:54:62:d9:1b:c4:90:f5:86:ba:6a:f8:47: 67:f3:96:93:6e:23:56:46:4e:5b:f1:12:8d:ab:81:78:3a:4a: eb:cc:35:91:54:54:dc:42:6e:3a:ca:e4:0f:f9:30:6e:f9:11: 64:e3:8f:6e:91:e0:16:0c:c3:eb:c9:68:9e:65:23:95:f0:f2: 2a:8a:03:c2:1c:6e:4f:1d:23:de:c6:ef:b3:00:f9:2c:a9:fc: 52:0c:21:ba:05:5c:43:2f:0b:af:b6:fa:b6:de:1c:58:f3:4f: 7e:4d:aa:53:66:58:74:32:ad:5e:da:94:3b:7a:62:d4:46:23: db:f1:03:55:2b:2c:3f:2b:ff:a6:e9:cb:d5:55:ce:17:d5:f1: fb:0b:15:ff:5d:b4:30:83:e2:06:76:47:a1:0b:9e:72:c4:ac: 93:9c:88:f0:82:db:10:37:75:10:11:b8:08:27:15:02:aa:51: 2e:82:ea:f2:90:d8:29:31:8f:fd:31:ff:07:bf:0b:67:02:5e: d8:68:da:ef:c0:74:f6:f2:e4:34:35:fc:dd:02:c8:6c:ab:24: bc:db:d8:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+FQECZCvTzPWIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUyOVoXDTI1MDczMDE3MTUyOVowLzEtMCsGA1UEAxMk MmM1MDliNjEtODIxZS00NzE0LThlY2QtZDA5Zjg0ZDAxMTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3JO1zNZ+qhtHLl8CZ/fCAlAWENR4KxO2APc y/GkkyiHFBAqLkMZLGxsq9UOU62R7fivt+b2TQTtodgW2x6Sv+s0TcRWS3shkctO pxNyq6scEpao7Xry/9kRjfkm0t8Q3odyf4DRlIqADU45TM7N2l6QgIv2VMF+w7lk uB4h+hWgRGC9Jk47K57Kq/N6L0mOGpz6wUbrEzzHjiqFBAet8CsyV8nqaMC7pLU6 rkjgEzfVCOCWcWmfQ8RuPf39Pw5C3uK0RhO8ULvGtybbQqaT1YbQF8CbEiCMwyWZ SG2OpqDmF1MGUisoS0U529WuyIKgJ2PpQgyKZagsT7FzCH1LZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVo1kJ+S4OHc+/7JOcvc90dGEnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDA4NTAzN2QtNzE4MC0z ZTY0LTk0N2QtYzQ4MzcxODZmZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNoMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIEegVy98S/aZdG8VzNcgGlwkxbePmqFYOHjAcF/0mTlHeZ4Kh4HlYc q1Ri2RvEkPWGumr4R2fzlpNuI1ZGTlvxEo2rgXg6SuvMNZFUVNxCbjrK5A/5MG75 EWTjj26R4BYMw+vJaJ5lI5Xw8iqKA8Icbk8dI97G77MA+Syp/FIMIboFXEMvC6+2 +rbeHFjzT35NqlNmWHQyrV7alDt6YtRGI9vxA1UrLD8r/6bpy9VVzhfV8fsLFf9d tDCD4gZ2R6ELnnLErJOciPCC2xA3dRARuAgnFQKqUS6C6vKQ2Ckxj/0x/we/C2cC Xtho2u/AdPby5DQ1/N0CyGyrJLzb2OE= -----END CERTIFICATE-----Generated at Sun May 11 12:29:12 2025 by rpki-client