$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d49c6945-4977-3602-b93e-f66fd163f1d0.roa File: d49c6945-4977-3602-b93e-f66fd163f1d0.roa (raw, json) Hash identifier: JBoG0NgbQdfdp/HaxhduLHkTpcnGbWY99pIVaHdZQpY= Subject key identifier: A8:B4:0A:7C:4E:DF:91:0A:62:CC:F7:FD:1A:4D:DF:6F:C2:E2:14:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5A11EE06A3FFDA268B100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d49c6945-4977-3602-b93e-f66fd163f1d0.roa Signing time: Thu 01 May 2025 17:10:03 +0000 ROA not before: Thu 01 May 2025 17:10:03 +0000 ROA not after: Wed 30 Jul 2025 17:10:03 +0000 asID: 22773 IP address blocks: 72.200.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:a1:1e:e0:6a:3f:fd:a2:68:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:03 2025 GMT Not After : Jul 30 17:10:03 2025 GMT Subject: CN=fc177a10-d13b-4e5e-a1c5-989ecf3410d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:8b:99:76:75:61:f2:75:83:0e:a8:af:5b: dd:91:e5:8f:c2:71:53:ba:23:4f:66:c7:cd:33:22: 0e:64:e3:1f:ec:1e:97:54:04:5c:f1:8c:9c:03:3e: 6f:c8:89:97:59:58:ac:e3:d0:ad:30:d7:84:94:db: 6a:b9:58:52:67:d7:8b:5c:ed:62:0e:4d:64:cf:7a: c6:c2:92:3b:49:01:50:f9:8f:33:39:94:67:0b:bd: 81:29:c2:9d:4d:bb:6f:28:84:10:62:30:51:6c:a0: 2c:c2:ed:57:68:1e:d2:e0:9d:76:3b:c8:ea:8a:fc: 47:b9:b5:79:7f:fc:3a:d3:de:b2:04:cf:cb:90:fc: ea:8b:43:5d:a3:92:1d:43:dc:d6:7f:2c:20:5b:ab: 45:73:bc:85:39:14:c6:5c:4c:ed:8a:1e:60:67:42: 53:a5:1e:ec:3a:8e:8e:2f:8f:d3:25:62:cf:d7:bc: 70:75:6a:37:73:d0:3a:03:c6:83:a2:20:ec:ff:a5: 34:45:b4:ca:7f:38:6f:1b:69:67:87:1d:9f:fb:6f: 7b:d2:3c:94:16:e4:13:2e:f7:01:c9:94:d4:d8:a9: 3f:5d:3e:61:aa:78:df:ca:c5:f4:f6:48:8e:4e:4b: f7:cd:f6:c3:62:20:30:88:f9:ac:13:5c:a8:b7:bf: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B4:0A:7C:4E:DF:91:0A:62:CC:F7:FD:1A:4D:DF:6F:C2:E2:14:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d49c6945-4977-3602-b93e-f66fd163f1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:49:e1:d0:00:24:1a:47:f6:41:75:e4:fc:0e:c6:43:a8:ca: fb:97:62:f6:e7:7c:fc:f2:30:02:24:eb:86:04:9c:3c:c6:fb: b4:1a:30:b1:6e:2b:cb:52:37:ac:57:82:34:8d:7b:b5:5a:18: 81:89:fe:32:90:09:10:72:b2:0f:70:08:5a:95:30:5e:7f:0e: 9e:12:ba:69:3d:91:ff:de:2e:b7:33:df:5b:73:aa:90:44:10: 10:f6:66:ef:41:22:0c:f0:93:40:85:8d:61:d4:81:b6:bd:77: 19:a2:8b:7f:d4:39:8e:66:28:35:3f:09:e1:e5:7e:e2:85:04: d5:92:0f:56:cb:0f:4a:76:32:00:fa:92:b1:40:b6:26:8b:db: 23:4c:ab:92:fd:26:cb:d1:8f:37:ab:50:75:4b:16:c7:20:d4: 86:91:7d:84:40:e4:e2:d7:5c:b1:19:70:09:00:e9:6b:5a:d9: 65:34:09:8d:e0:8e:9f:7e:11:16:c6:16:57:ce:d3:9d:64:7c: 04:ea:4b:a0:39:14:51:3b:0f:ff:38:6b:0d:2b:1b:bc:fb:fc: 72:94:52:34:a4:8f:c9:ec:e4:90:d3:41:81:bc:91:c4:38:64: d9:4d:8e:10:de:73:f6:44:dd:b7:10:1a:51:d7:35:8e:34:4c: 0e:a3:b0:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19aEe4Go//aJosQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAwM1oXDTI1MDczMDE3MTAwM1owLzEtMCsGA1UEAxMk ZmMxNzdhMTAtZDEzYi00ZTVlLWExYzUtOTg5ZWNmMzQxMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCSLmXZ1YfJ1gw6or1vdkeWPwnFTuiNPZsfN MyIOZOMf7B6XVARc8YycAz5vyImXWVis49CtMNeElNtquVhSZ9eLXO1iDk1kz3rG wpI7SQFQ+Y8zOZRnC72BKcKdTbtvKIQQYjBRbKAswu1XaB7S4J12O8jqivxHubV5 f/w6096yBM/LkPzqi0Ndo5IdQ9zWfywgW6tFc7yFORTGXEztih5gZ0JTpR7sOo6O L4/TJWLP17xwdWo3c9A6A8aDoiDs/6U0RbTKfzhvG2lnhx2f+2970jyUFuQTLvcB yZTU2Kk/XT5hqnjfysX09kiOTkv3zfbDYiAwiPmsE1yot7/4/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi0CnxO35EKYsz3/RpN32/C4hS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDQ5YzY5NDUtNDk3Ny0z NjAyLWI5M2UtZjY2ZmQxNjNmMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNJ4dAAJBpH9kF15PwOxkOoyvuXYvbnfPzyMAIk64YEnDzG+7QaMLFu K8tSN6xXgjSNe7VaGIGJ/jKQCRBysg9wCFqVMF5/Dp4Sumk9kf/eLrcz31tzqpBE EBD2Zu9BIgzwk0CFjWHUgba9dxmii3/UOY5mKDU/CeHlfuKFBNWSD1bLD0p2MgD6 krFAtiaL2yNMq5L9JsvRjzerUHVLFscg1IaRfYRA5OLXXLEZcAkA6Wta2WU0CY3g jp9+ERbGFlfO051kfATqS6A5FFE7D/84aw0rG7z7/HKUUjSkj8ns5JDTQYG8kcQ4 ZNlNjhDec/ZE3bcQGlHXNY40TA6jsJ0= -----END CERTIFICATE-----Generated at Sat May 10 22:11:44 2025 by rpki-client