$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d34f7888-7473-3daf-8c4f-748fd422ad05.roa File: d34f7888-7473-3daf-8c4f-748fd422ad05.roa (raw, json) Hash identifier: 5fNgYHHZL12Y5FRuIRbUIUs8nhSv+3ayi/AJ9tj4N9s= Subject key identifier: 96:16:4E:8D:40:BE:1F:65:FB:85:45:84:11:30:53:8D:38:F8:85:27 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDB8FF444176C572A7EE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d34f7888-7473-3daf-8c4f-748fd422ad05.roa Signing time: Thu 01 May 2025 17:26:21 +0000 ROA not before: Thu 01 May 2025 17:26:21 +0000 ROA not after: Wed 30 Jul 2025 17:26:21 +0000 asID: 22773 IP address blocks: 72.221.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:b8:ff:44:41:76:c5:72:a7:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:21 2025 GMT Not After : Jul 30 17:26:21 2025 GMT Subject: CN=160d76bf-6462-4f5d-bfb7-15709fc4f5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:84:55:bc:00:45:37:f7:6f:f7:57:9e:7a:5e: e8:19:f9:ac:c2:bb:f6:71:b9:d9:08:02:f1:9c:5c: 43:9a:af:06:69:0c:06:e9:c8:ba:b6:d2:48:10:d5: 91:09:17:58:b0:19:3c:03:fb:b1:45:47:18:63:aa: 12:4f:e0:4f:c6:dd:5b:80:a7:9a:eb:f6:66:6d:ba: 7a:4d:c2:1b:25:d7:4d:7e:c8:ff:48:7e:7e:4e:03: 58:b4:13:5d:45:a8:12:83:10:ed:10:54:d2:49:6c: a1:5d:7f:ed:a4:69:35:5a:47:76:43:76:56:b9:cc: ed:bd:4c:e8:46:f7:c7:c4:01:88:8e:6b:63:7a:ae: 0b:67:87:be:1a:95:0f:27:e2:94:27:8a:65:7a:67: ca:35:f1:59:22:3e:06:f4:4b:24:a3:0f:0b:c4:0f: 05:0f:ea:22:c4:88:8d:6a:82:c2:e5:dc:7c:61:1f: 4a:d4:24:40:8d:d1:c5:26:06:f6:b1:51:d5:90:e2: 90:4e:cf:cd:55:f5:cf:4f:74:30:1f:cc:bb:f7:02: 62:c9:4c:75:5c:61:0d:cd:e5:ee:9b:db:f3:d2:c7: 4c:fd:77:a9:fb:ae:24:27:90:50:2d:6d:00:05:00: 18:d6:43:1e:fa:ff:f2:c9:04:e7:78:be:e3:30:e5: 81:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:16:4E:8D:40:BE:1F:65:FB:85:45:84:11:30:53:8D:38:F8:85:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d34f7888-7473-3daf-8c4f-748fd422ad05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:9e:c9:c3:6b:01:7e:7e:f2:f0:7b:8a:9b:9a:21:b9:09:60: b7:7a:5c:89:fd:09:bb:dd:4d:00:c3:b8:06:1d:d4:c2:36:09: b8:dd:47:05:c5:c3:5a:05:3e:cb:2b:ad:d2:44:de:e0:e4:b3: 88:13:82:58:73:89:5e:73:dc:f8:93:15:f1:d4:d1:60:8f:94: ca:d8:e2:33:5a:66:49:19:0c:1b:1f:71:e0:a9:5f:31:10:66: 3d:de:d1:6b:75:99:c2:22:79:83:6e:a9:86:ec:ac:fd:b9:ef: c6:50:58:63:39:e8:94:75:95:3f:4e:4c:81:df:ae:dc:62:f9: 85:08:14:65:44:5c:26:e1:60:c6:67:44:89:ef:a2:da:34:a0: 9d:ab:a2:5a:d1:4c:19:38:17:59:eb:83:09:a9:35:e4:d4:8f: d0:a2:da:59:d8:82:f0:22:a7:a9:8b:1c:9c:e5:11:46:86:b3: bb:fc:1f:57:5d:c6:17:0d:9f:11:cc:2d:d8:62:60:e9:d7:9d: ee:b1:3e:62:b8:b0:37:60:75:2a:20:60:5b:a0:a2:9e:7a:01: a1:5c:cc:9e:9d:d6:35:bb:a9:21:a9:0b:50:64:9f:e3:c2:c6: fe:6a:e2:7c:d6:77:1e:ff:7c:36:ff:70:3e:36:ac:21:90:7c: fe:16:ec:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/bj/REF2xXKn7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYyMVoXDTI1MDczMDE3MjYyMVowLzEtMCsGA1UEAxMk MTYwZDc2YmYtNjQ2Mi00ZjVkLWJmYjctMTU3MDlmYzRmNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYRVvABFN/dv91eeel7oGfmswrv2cbnZCALx nFxDmq8GaQwG6ci6ttJIENWRCRdYsBk8A/uxRUcYY6oST+BPxt1bgKea6/Zmbbp6 TcIbJddNfsj/SH5+TgNYtBNdRagSgxDtEFTSSWyhXX/tpGk1Wkd2Q3ZWucztvUzo RvfHxAGIjmtjeq4LZ4e+GpUPJ+KUJ4plemfKNfFZIj4G9Eskow8LxA8FD+oixIiN aoLC5dx8YR9K1CRAjdHFJgb2sVHVkOKQTs/NVfXPT3QwH8y79wJiyUx1XGENzeXu m9vz0sdM/Xep+64kJ5BQLW0ABQAY1kMe+v/yyQTneL7jMOWBGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYWTo1Avh9l+4VFhBEwU404+IUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDM0Zjc4ODgtNzQ3My0z ZGFmLThjNGYtNzQ4ZmQ0MjJhZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaeycNrAX5+8vB7ipuaIbkJYLd6XIn9CbvdTQDDuAYd1MI2CbjdRwXF w1oFPssrrdJE3uDks4gTglhziV5z3PiTFfHU0WCPlMrY4jNaZkkZDBsfceCpXzEQ Zj3e0Wt1mcIieYNuqYbsrP2578ZQWGM56JR1lT9OTIHfrtxi+YUIFGVEXCbhYMZn RInvoto0oJ2rolrRTBk4F1nrgwmpNeTUj9Ci2lnYgvAip6mLHJzlEUaGs7v8H1dd xhcNnxHMLdhiYOnXne6xPmK4sDdgdSogYFugop56AaFczJ6d1jW7qSGpC1Bkn+PC xv5q4nzWdx7/fDb/cD42rCGQfP4W7J0= -----END CERTIFICATE-----Generated at Mon May 12 19:47:33 2025 by rpki-client