$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da432048-2a89-3464-8b47-56704e5eebd3.roa File: da432048-2a89-3464-8b47-56704e5eebd3.roa (raw, json) Hash identifier: f2zCiYRy17uXqtcuWkdUGDdJQMN7c82zR3aeLS82VuQ= Subject key identifier: 50:03:DD:5F:E6:66:82:31:22:CD:8B:C3:F5:03:AB:86:28:06:2C:46 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5B293F25D52F962E40140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da432048-2a89-3464-8b47-56704e5eebd3.roa Signing time: Thu 01 May 2025 17:10:11 +0000 ROA not before: Thu 01 May 2025 17:10:11 +0000 ROA not after: Wed 30 Jul 2025 17:10:11 +0000 asID: 22773 IP address blocks: 72.221.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:b2:93:f2:5d:52:f9:62:e4:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:11 2025 GMT Not After : Jul 30 17:10:11 2025 GMT Subject: CN=56ee9330-e25d-4d1b-8df7-ff796a29bc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ed:c7:b9:67:be:3c:e6:b9:0d:37:ff:68:b0: dd:75:7d:ab:50:9b:95:58:71:07:10:7e:93:54:c9: 91:e8:dc:e6:ab:d9:0f:5a:64:62:da:9f:f3:d6:d6: e5:7b:3a:2f:9a:23:86:7b:0a:cc:19:ef:00:c5:95: 32:43:52:62:07:45:72:a2:40:fc:6a:8b:a2:94:e3: 43:66:72:fe:23:a2:40:64:57:a3:0c:7f:85:e3:00: 80:a3:14:05:bc:d9:6d:da:34:6d:e2:a9:ab:59:29: a2:56:3c:c0:2e:54:05:3c:70:de:56:68:e1:dd:a7: 4f:11:24:38:b0:b1:a2:34:1c:0d:2a:c6:2a:00:18: cc:0d:a5:cf:b5:31:d6:0d:61:ca:8d:80:01:f3:bd: 03:41:c2:c4:eb:49:58:c9:65:68:49:44:17:4e:80: 38:ee:af:0e:be:42:a2:87:58:69:a0:52:b0:21:c8: 36:f1:4e:6e:c4:b2:7e:f3:6c:e5:41:8e:ee:4e:23: 61:f0:ac:97:e4:de:65:c0:d8:f8:74:94:c3:d1:3c: 92:e9:c7:6a:14:15:57:37:b2:01:07:2a:9f:b6:14: e6:25:c9:1e:61:5d:9c:8e:43:10:26:f9:04:b0:21: cb:98:b3:5c:12:f9:47:05:dc:09:d0:bb:b3:2f:0e: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:03:DD:5F:E6:66:82:31:22:CD:8B:C3:F5:03:AB:86:28:06:2C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da432048-2a89-3464-8b47-56704e5eebd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c9:bf:62:3a:f2:a5:53:d3:f5:37:71:39:1b:b2:84:0b:37: bc:60:5b:ff:2a:0a:22:8a:76:22:26:bf:b6:60:e3:06:69:25: 3a:b2:e3:8e:6e:a5:da:27:d6:d7:e6:85:5b:d9:77:06:74:de: 6b:35:d5:90:45:59:6a:ad:f2:e3:ae:9b:86:52:4a:cc:d0:e6: e3:cd:24:2f:fa:e6:5b:91:b3:52:9b:d0:d0:ab:44:d3:8f:3f: 63:0f:99:93:fd:16:09:dd:be:21:15:c2:8a:6a:98:f9:bb:3f: 71:ba:9a:c0:df:5d:7d:e8:8c:14:6f:80:5d:3e:ad:4e:07:8c: ec:1c:a8:d7:06:7a:71:50:bd:ea:46:21:57:08:09:20:f9:f2: de:3e:cf:15:b9:26:f4:16:6c:0f:66:1f:d5:91:74:6e:80:c6: e7:64:69:0a:80:00:cd:1f:da:5f:34:83:bb:ae:5e:ce:89:0e: e1:c5:d1:f2:32:08:7d:06:f2:8b:0d:65:fd:80:6b:c2:bb:a5: b4:a9:60:6c:53:d5:cd:93:03:96:1f:2e:de:ea:f1:68:2c:d2: 38:f5:21:1a:6e:28:3e:25:8d:2d:2f:0c:13:84:69:31:3b:ac: 3b:c1:f0:d0:0c:87:e8:7b:ba:3f:d2:ec:3f:cb:9f:d6:26:74: 2e:16:12:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19bKT8l1S+WLkAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAxMVoXDTI1MDczMDE3MTAxMVowLzEtMCsGA1UEAxMk NTZlZTkzMzAtZTI1ZC00ZDFiLThkZjctZmY3OTZhMjliYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO3HuWe+POa5DTf/aLDddX2rUJuVWHEHEH6T VMmR6Nzmq9kPWmRi2p/z1tblezovmiOGewrMGe8AxZUyQ1JiB0VyokD8aouilOND ZnL+I6JAZFejDH+F4wCAoxQFvNlt2jRt4qmrWSmiVjzALlQFPHDeVmjh3adPESQ4 sLGiNBwNKsYqABjMDaXPtTHWDWHKjYAB870DQcLE60lYyWVoSUQXToA47q8OvkKi h1hpoFKwIcg28U5uxLJ+82zlQY7uTiNh8KyX5N5lwNj4dJTD0TyS6cdqFBVXN7IB ByqfthTmJckeYV2cjkMQJvkEsCHLmLNcEvlHBdwJ0LuzLw4mnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAD3V/mZoIxIs2Lw/UDq4YoBixGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGE0MzIwNDgtMmE4OS0z NDY0LThiNDctNTY3MDRlNWVlYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3Jv2I68qVT0/U3cTkbsoQLN7xgW/8qCiKKdiImv7Zg4wZpJTqy445u pdon1tfmhVvZdwZ03ms11ZBFWWqt8uOum4ZSSszQ5uPNJC/65luRs1Kb0NCrRNOP P2MPmZP9FgndviEVwopqmPm7P3G6msDfXX3ojBRvgF0+rU4HjOwcqNcGenFQvepG IVcICSD58t4+zxW5JvQWbA9mH9WRdG6AxudkaQqAAM0f2l80g7uuXs6JDuHF0fIy CH0G8osNZf2Aa8K7pbSpYGxT1c2TA5YfLt7q8Wgs0jj1IRpuKD4ljS0vDBOEaTE7 rDvB8NAMh+h7uj/S7D/Ln9YmdC4WEik= -----END CERTIFICATE-----Generated at Mon May 12 21:39:45 2025 by rpki-client