$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d33fb43e-988d-3cc1-80b8-f5e94bcce730.roa File: d33fb43e-988d-3cc1-80b8-f5e94bcce730.roa (raw, json) Hash identifier: 8akvKFGPXNYWAaBm/91ZnSV1Wx7xqC9N0F6bpTxXhYQ= Subject key identifier: ED:24:97:30:28:AD:A6:9F:7C:FB:6A:F0:DE:4F:1C:79:01:F5:46:6A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5DCF8437564483CF50A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d33fb43e-988d-3cc1-80b8-f5e94bcce730.roa Signing time: Thu 01 May 2025 17:10:31 +0000 ROA not before: Thu 01 May 2025 17:10:31 +0000 ROA not after: Wed 30 Jul 2025 17:10:31 +0000 asID: 22773 IP address blocks: 184.188.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:dc:f8:43:75:64:48:3c:f5:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:31 2025 GMT Not After : Jul 30 17:10:31 2025 GMT Subject: CN=b3682a95-59ab-48ba-b02a-8af2f89c58ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c4:4b:8c:b8:0b:96:b8:e1:ca:7b:47:b8:91: da:29:2b:dd:3c:7a:7a:a0:2e:be:92:df:04:ce:1b: 69:c9:1e:10:79:b1:a1:8c:2d:d1:f3:24:98:a4:9d: 37:31:60:42:0d:a7:aa:d7:19:69:9a:d8:8d:2a:79: d0:c6:25:94:2c:de:c4:7b:a8:c2:1b:0b:99:47:9a: 63:2c:47:da:81:0d:5c:fd:8f:ba:ab:6a:4d:67:4c: 39:7b:07:07:8f:08:92:62:cf:28:fa:73:bc:70:1f: 28:84:e8:fd:df:a6:29:e3:d2:5d:15:70:8d:a8:6d: 96:3a:3d:0a:8d:39:a1:c8:00:2f:21:e7:7a:f5:ae: c5:d9:6c:06:4d:db:2a:fb:da:be:d8:8e:74:f6:7e: c8:15:0c:e1:4e:38:e7:6e:26:89:1a:59:98:fe:3d: 3e:1f:ba:10:dd:7c:68:7b:1c:61:50:e2:d7:f6:79: 36:ba:9d:ad:f1:ef:3e:8e:d8:b5:e6:e7:85:13:a4: a1:db:8f:e6:94:e7:fd:01:bc:a4:9a:b9:93:8f:c1: 90:f3:47:a1:65:3a:ab:2c:87:77:b7:27:35:6e:70: 7d:ec:57:85:89:8d:e6:d2:df:b6:21:4c:eb:2c:a2: 3b:89:14:5c:ec:2a:31:40:af:d0:a9:5c:a0:8b:9e: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:24:97:30:28:AD:A6:9F:7C:FB:6A:F0:DE:4F:1C:79:01:F5:46:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d33fb43e-988d-3cc1-80b8-f5e94bcce730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 184.188.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:f9:a4:86:12:89:9e:0d:4a:80:96:bb:45:82:b1:86:77:f3: d9:59:2e:5e:3f:be:80:9f:33:ac:c4:87:5b:45:bc:ca:79:38: 75:b6:64:30:53:b9:4c:58:c7:f3:1d:66:8b:f8:83:82:29:96: f2:cc:33:5c:59:41:a3:8c:db:79:64:50:cb:68:c4:65:03:04: 7e:a2:9f:ce:0d:21:02:38:62:ea:6c:92:07:9c:cc:21:8a:b9: ed:65:cd:52:a4:e5:45:f7:ae:e4:33:45:2f:9e:38:d0:26:54: 5d:ef:50:c7:9d:a9:1e:75:38:fe:59:de:d8:c7:30:99:ac:35: a7:b2:3e:e4:22:f3:8c:f3:2d:5d:f0:03:43:74:23:65:68:72: d4:24:1e:95:3c:7c:a0:0b:e7:8c:2e:27:2c:a9:f9:17:85:dd: ac:c9:52:6a:c7:05:0f:43:20:3f:30:d8:13:57:3b:65:63:b3: c4:09:0c:03:5b:e3:06:b5:28:37:e0:1f:31:4a:46:de:e6:ab: 60:9b:ea:b7:8a:d9:ba:e0:c1:56:e3:01:4d:ea:57:63:63:3a: 5a:cf:5d:b6:7f:4e:56:61:b6:35:dc:d8:76:82:cd:c4:d6:ab: 5f:96:07:d9:1a:4c:3d:7f:74:6b:5c:d1:a3:b3:b5:38:a1:8d: aa:4c:78:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19dz4Q3VkSDz1CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAzMVoXDTI1MDczMDE3MTAzMVowLzEtMCsGA1UEAxMk YjM2ODJhOTUtNTlhYi00OGJhLWIwMmEtOGFmMmY4OWM1OGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8RLjLgLlrjhyntHuJHaKSvdPHp6oC6+kt8E zhtpyR4QebGhjC3R8ySYpJ03MWBCDaeq1xlpmtiNKnnQxiWULN7Ee6jCGwuZR5pj LEfagQ1c/Y+6q2pNZ0w5ewcHjwiSYs8o+nO8cB8ohOj936Yp49JdFXCNqG2WOj0K jTmhyAAvIed69a7F2WwGTdsq+9q+2I509n7IFQzhTjjnbiaJGlmY/j0+H7oQ3Xxo exxhUOLX9nk2up2t8e8+jti15ueFE6Sh24/mlOf9AbykmrmTj8GQ80ehZTqrLId3 tyc1bnB97FeFiY3m0t+2IUzrLKI7iRRc7CoxQK/QqVygi56VgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0klzAoraaffPtq8N5PHHkB9UZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDMzZmI0M2UtOTg4ZC0z Y2MxLTgwYjgtZjVlOTRiY2NlNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuLycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/5pIYSiZ4NSoCWu0WCsYZ389lZLl4/voCfM6zEh1tFvMp5OHW2ZDBT uUxYx/MdZov4g4IplvLMM1xZQaOM23lkUMtoxGUDBH6in84NIQI4YupskgeczCGK ue1lzVKk5UX3ruQzRS+eONAmVF3vUMedqR51OP5Z3tjHMJmsNaeyPuQi84zzLV3w A0N0I2VoctQkHpU8fKAL54wuJyyp+ReF3azJUmrHBQ9DID8w2BNXO2Vjs8QJDANb 4wa1KDfgHzFKRt7mq2Cb6reK2brgwVbjAU3qV2NjOlrPXbZ/TlZhtjXc2HaCzcTW q1+WB9kaTD1/dGtc0aOztTihjapMeAY= -----END CERTIFICATE-----Generated at Sat May 10 09:54:03 2025 by rpki-client