$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9ec68d3-1c25-3752-b016-9390802ab2ed.roa File: d9ec68d3-1c25-3752-b016-9390802ab2ed.roa (raw, json) Hash identifier: NcKgvesA8WwquM33+X95uX+A8SF8YwocuEUGzCiPe7o= Subject key identifier: E9:37:8A:8D:EE:68:61:4C:F1:04:7F:3B:F9:21:18:EF:3D:B1:46:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD93708CE9E451327DEC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9ec68d3-1c25-3752-b016-9390802ab2ed.roa Signing time: Thu 01 May 2025 17:26:04 +0000 ROA not before: Thu 01 May 2025 17:26:04 +0000 ROA not after: Wed 30 Jul 2025 17:26:04 +0000 asID: 22773 IP address blocks: 72.220.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:93:70:8c:e9:e4:51:32:7d:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:04 2025 GMT Not After : Jul 30 17:26:04 2025 GMT Subject: CN=913d3c42-5671-43a1-9004-f82a31fa15b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:62:04:1f:8b:8d:da:d4:3d:81:27:53:09:ce: ff:1a:16:cd:93:c0:d3:ea:38:30:96:d0:63:11:4b: 1e:51:f3:61:a8:89:c4:e8:ef:23:cf:a7:ff:ce:26: 28:06:d8:aa:c4:de:d1:1a:09:1c:6b:b5:95:28:37: d6:44:87:6c:3d:90:06:2c:98:33:fd:27:94:95:28: 7d:b0:18:d8:e5:e0:b7:60:e3:da:f5:89:9b:f8:e0: 50:d7:f0:f1:ec:5a:06:34:33:1c:22:f9:d0:dd:90: aa:96:21:15:b0:e0:1f:b1:b6:d4:49:1d:4f:ea:40: d6:7f:1e:4e:89:39:7f:99:27:64:57:64:87:31:20: 19:04:16:90:02:04:f6:de:46:16:9b:63:b6:57:c4: 1a:de:fa:f0:f8:97:a6:43:b8:a5:b9:20:69:0a:e8: 9b:33:82:66:4e:4d:ae:6d:a8:96:e1:48:53:85:59: c5:e2:3d:9f:e3:fc:d9:a6:8f:5f:e8:ef:25:17:0d: a1:c1:60:49:e3:76:60:1f:f3:41:55:f0:17:bb:db: ed:80:6e:a3:24:69:fa:e5:0a:94:5c:ad:cb:b4:8d: 7f:0e:5d:a8:45:30:9e:82:e1:55:96:4e:23:4c:9e: 51:0b:f8:0b:28:7a:99:31:a2:f0:b2:9c:c9:a3:15: 48:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:37:8A:8D:EE:68:61:4C:F1:04:7F:3B:F9:21:18:EF:3D:B1:46:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9ec68d3-1c25-3752-b016-9390802ab2ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0c:69:1e:19:1f:4f:c0:14:6e:b2:0d:bf:3c:47:3f:96:53: 39:fb:91:79:c1:ce:93:7b:6e:1a:29:5b:cf:76:d2:71:f3:31: 9e:39:8d:ec:60:7d:1f:42:4f:ac:2f:72:2e:8e:c0:c8:43:6c: ef:1c:f7:67:fc:6b:33:3b:36:52:21:9f:54:09:b1:70:c7:7a: cf:f0:da:11:bc:ed:62:c8:9d:52:55:ef:24:b5:c2:0e:62:36: 15:46:88:90:2d:9e:64:8f:48:12:0b:55:1b:b2:e4:04:d5:9a: 3a:85:af:e7:8f:e8:a2:cc:11:47:e5:dd:3e:b3:d7:b8:9b:3f: f6:4a:bc:07:da:06:de:cd:4d:d9:eb:7a:74:dd:ba:c9:08:4d: 13:22:70:75:86:65:54:3c:e5:69:4e:f3:90:e4:f1:2a:01:1e: 47:6f:b0:7a:2c:95:00:4a:1c:c6:89:e2:50:aa:3c:f9:61:a2: 6c:bc:af:fa:cf:f3:a9:da:30:0c:1b:57:34:35:0b:29:8e:ad: f4:2c:e2:b0:2d:38:77:eb:e8:ef:80:67:96:84:38:46:67:35: 21:9d:5a:56:f1:9a:2b:93:fc:e7:c0:0f:0e:10:2e:b6:97:d0: d8:a8:9d:2a:36:a8:0b:ef:ee:40:5c:cf:b0:ec:33:45:ac:85: 6d:b1:f2:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/ZNwjOnkUTJ97IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYwNFoXDTI1MDczMDE3MjYwNFowLzEtMCsGA1UEAxMk OTEzZDNjNDItNTY3MS00M2ExLTkwMDQtZjgyYTMxZmExNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmIEH4uN2tQ9gSdTCc7/GhbNk8DT6jgwltBj EUseUfNhqInE6O8jz6f/ziYoBtiqxN7RGgkca7WVKDfWRIdsPZAGLJgz/SeUlSh9 sBjY5eC3YOPa9Ymb+OBQ1/Dx7FoGNDMcIvnQ3ZCqliEVsOAfsbbUSR1P6kDWfx5O iTl/mSdkV2SHMSAZBBaQAgT23kYWm2O2V8Qa3vrw+JemQ7iluSBpCuibM4JmTk2u baiW4UhThVnF4j2f4/zZpo9f6O8lFw2hwWBJ43ZgH/NBVfAXu9vtgG6jJGn65QqU XK3LtI1/Dl2oRTCeguFVlk4jTJ5RC/gLKHqZMaLwspzJoxVIVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOk3io3uaGFM8QR/O/khGO89sUZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDllYzY4ZDMtMWMyNS0z NzUyLWIwMTYtOTM5MDgwMmFiMmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwMaR4ZH0/AFG6yDb88Rz+WUzn7kXnBzpN7bhopW8920nHzMZ45jexg fR9CT6wvci6OwMhDbO8c92f8azM7NlIhn1QJsXDHes/w2hG87WLInVJV7yS1wg5i NhVGiJAtnmSPSBILVRuy5ATVmjqFr+eP6KLMEUfl3T6z17ibP/ZKvAfaBt7NTdnr enTduskITRMicHWGZVQ85WlO85Dk8SoBHkdvsHoslQBKHMaJ4lCqPPlhomy8r/rP 86naMAwbVzQ1CymOrfQs4rAtOHfr6O+AZ5aEOEZnNSGdWlbxmiuT/OfADw4QLraX 0NionSo2qAvv7kBcz7DsM0WshW2x8nw= -----END CERTIFICATE-----Generated at Mon May 12 23:17:26 2025 by rpki-client