$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3d8dc7e-94d4-3e02-addb-0b77b2c6f6b2.roa File: d3d8dc7e-94d4-3e02-addb-0b77b2c6f6b2.roa (raw, json) Hash identifier: Xbrnrg7GrBS4zrrB6pySBeSBf9zVxmlaPa08ijLNF6s= Subject key identifier: A6:9B:C8:8F:8D:E2:E9:6B:98:07:AF:5B:A8:05:31:09:18:C5:2E:19 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F8547CE92458A5CDA0B480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3d8dc7e-94d4-3e02-addb-0b77b2c6f6b2.roa Signing time: Thu 01 May 2025 17:15:29 +0000 ROA not before: Thu 01 May 2025 17:15:29 +0000 ROA not after: Wed 30 Jul 2025 17:15:29 +0000 asID: 22773 IP address blocks: 72.218.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:54:7c:e9:24:58:a5:cd:a0:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:29 2025 GMT Not After : Jul 30 17:15:29 2025 GMT Subject: CN=14279cce-4aa3-430a-bda7-0c4307ee1b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:40:ae:9e:f1:f1:3c:a2:59:fa:be:5a:69: 63:7a:ac:09:3b:b9:88:9d:03:e1:cc:c2:54:42:9e: 69:df:42:c0:1e:07:7c:d5:c3:94:d2:09:23:95:4c: f3:3c:8c:2a:ad:7e:10:a8:4d:1a:b9:b3:85:37:d1: 66:52:e2:47:69:f8:0a:71:96:2d:37:5f:29:01:39: b2:aa:e8:a3:7f:ae:f0:ce:b3:23:20:05:15:a0:fd: 63:7a:ed:c9:c7:dd:cc:8b:31:e3:3f:81:b7:ea:e7: 25:9d:aa:28:6d:d1:ea:7c:8c:58:f1:3d:b9:64:c3: 24:0e:d3:62:c7:6a:3b:05:31:e1:19:6d:40:ba:7e: eb:3f:f7:68:7f:45:0c:bb:f5:54:50:df:dd:b6:ec: c2:a6:08:dc:68:da:ca:28:2b:cc:43:1c:eb:0b:ff: 23:e3:c1:a8:55:b7:a6:7b:1d:fe:bc:f1:72:51:0a: d9:15:f1:38:11:fb:9b:70:e9:ea:7a:81:11:24:0a: 62:25:27:c7:88:09:a0:e8:2d:ff:01:d1:ea:89:57: 1a:2f:a8:77:74:71:36:43:f9:eb:12:80:6b:c9:f2: 0e:ab:a2:cd:7e:0d:a0:26:70:9c:d1:80:13:a4:d1: 0d:6f:36:eb:cf:57:8a:78:54:f9:91:ee:05:fd:59: 2c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9B:C8:8F:8D:E2:E9:6B:98:07:AF:5B:A8:05:31:09:18:C5:2E:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3d8dc7e-94d4-3e02-addb-0b77b2c6f6b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:17:dd:aa:b9:66:ba:cb:f5:cb:e4:3c:95:77:dc:2d:1d:ad: b6:33:b0:48:0f:e7:ed:91:94:ab:1c:eb:74:9c:d1:34:f3:9d: 0a:9d:c7:9c:fe:29:a6:eb:e7:40:66:d3:48:0a:e6:8c:d2:83: 19:73:f0:e0:69:37:c2:d6:17:14:bb:06:cb:f8:84:ce:48:92: 16:0a:27:1f:06:19:7d:68:40:f6:cd:d6:0a:29:c5:c7:a4:ec: 4e:52:86:4b:47:cb:8d:e1:2e:77:3f:db:e2:b1:f9:1a:8b:ae: f5:b3:38:40:18:c1:66:f3:e5:fc:f0:c9:0b:f1:62:56:60:54: 98:2d:1e:0f:98:0e:57:96:0d:f7:ca:c3:41:13:ee:e3:86:fe: 5c:16:be:99:94:c8:7d:26:37:dd:7d:b6:24:3e:ab:2d:92:8f: 69:d2:d9:92:ec:dd:10:ce:ad:23:9e:c3:f0:d1:c0:77:2d:56: 38:37:bc:48:4b:40:3c:de:4f:1e:a7:0a:5a:fa:74:e9:c6:e2: e6:48:62:ba:e4:20:11:2b:c4:25:9b:b3:f9:91:fe:93:bc:4b: 26:fa:c4:c8:9a:75:ba:51:c7:91:91:c4:e1:19:17:37:82:81: 84:ea:37:b9:90:a4:6e:cf:54:72:0f:33:f9:5a:fe:eb:44:d5: 75:cb:bd:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+FR86SRYpc2gtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUyOVoXDTI1MDczMDE3MTUyOVowLzEtMCsGA1UEAxMk MTQyNzljY2UtNGFhMy00MzBhLWJkYTctMGM0MzA3ZWUxYjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5FArp7x8TyiWfq+WmljeqwJO7mInQPhzMJU Qp5p30LAHgd81cOU0gkjlUzzPIwqrX4QqE0aubOFN9FmUuJHafgKcZYtN18pATmy quijf67wzrMjIAUVoP1jeu3Jx93MizHjP4G36uclnaoobdHqfIxY8T25ZMMkDtNi x2o7BTHhGW1Aun7rP/dof0UMu/VUUN/dtuzCpgjcaNrKKCvMQxzrC/8j48GoVbem ex3+vPFyUQrZFfE4EfubcOnqeoERJApiJSfHiAmg6C3/AdHqiVcaL6h3dHE2Q/nr EoBryfIOq6LNfg2gJnCc0YATpNENbzbrz1eKeFT5ke4F/Vks1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKabyI+N4ulrmAevW6gFMQkYxS4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNkOGRjN2UtOTRkNC0z ZTAyLWFkZGItMGI3N2IyYzZmNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNoOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUX3aq5ZrrL9cvkPJV33C0drbYzsEgP5+2RlKsc63Sc0TTznQqdx5z+ Kabr50Bm00gK5ozSgxlz8OBpN8LWFxS7Bsv4hM5IkhYKJx8GGX1oQPbN1gopxcek 7E5ShktHy43hLnc/2+Kx+RqLrvWzOEAYwWbz5fzwyQvxYlZgVJgtHg+YDleWDffK w0ET7uOG/lwWvpmUyH0mN919tiQ+qy2Sj2nS2ZLs3RDOrSOew/DRwHctVjg3vEhL QDzeTx6nClr6dOnG4uZIYrrkIBErxCWbs/mR/pO8Syb6xMiadbpRx5GRxOEZFzeC gYTqN7mQpG7PVHIPM/la/utE1XXLvcA= -----END CERTIFICATE-----Generated at Tue May 6 08:21:59 2025 by rpki-client