$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddd514e1-93dc-31ed-9fdd-ce348472e4a8.roa File: ddd514e1-93dc-31ed-9fdd-ce348472e4a8.roa (raw, json) Hash identifier: 7ZLD/n7kJWNKJ37KoHAuazMkgAEf3Yb1kAM0ODAFzAo= Subject key identifier: 8A:3A:CF:9F:28:70:7C:1F:FF:F6:74:52:FF:95:E7:BE:01:8E:25:C1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD74F7B15DD8AEAF5FD980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddd514e1-93dc-31ed-9fdd-ce348472e4a8.roa Signing time: Thu 01 May 2025 17:25:49 +0000 ROA not before: Thu 01 May 2025 17:25:49 +0000 ROA not after: Wed 30 Jul 2025 17:25:49 +0000 asID: 22773 IP address blocks: 72.197.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:74:f7:b1:5d:d8:ae:af:5f:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:49 2025 GMT Not After : Jul 30 17:25:49 2025 GMT Subject: CN=4fb61f25-45e3-4370-9442-20c4ca08e763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e9:92:e5:ee:03:7e:62:6e:fb:91:7a:ec:ce: a4:23:a7:32:b1:3f:49:72:09:07:31:d8:29:63:7f: 7b:25:58:c7:c8:cd:07:96:04:a1:a9:38:ea:b4:ec: ea:48:c5:0d:7f:54:e6:26:5d:1f:da:c9:05:fc:48: 87:d7:93:e1:eb:a9:20:b6:25:44:1f:ae:0c:d4:c2: 52:cb:0a:6b:65:15:5a:be:3c:c2:9f:f3:ef:0d:ad: ec:ef:25:a7:c9:25:c4:46:a5:4e:e2:8c:c2:7a:b9: 1f:99:c1:20:d4:10:83:4a:1d:fb:36:76:4f:1d:4b: 24:b9:24:ab:0a:0d:c7:45:f2:e2:d3:bc:44:fb:d1: 58:ef:7b:55:18:4f:4c:73:97:b2:3a:9e:16:30:21: 53:3a:d5:31:e3:36:21:31:0e:0c:83:d5:08:ba:a1: 9c:72:b4:85:79:d7:4e:ba:3d:ae:bb:05:11:0e:fb: 17:4e:4a:5d:04:5a:00:61:45:fb:08:01:2e:aa:f5: 88:ea:59:9b:73:40:ca:08:2b:a4:01:43:b5:6a:b3: 0b:c4:d5:8a:84:95:75:8a:32:7b:82:61:ee:ba:b5: 66:19:55:6b:28:20:cc:ed:62:30:c1:b4:fe:eb:26: 83:03:c5:59:55:77:6d:b2:f7:54:85:e3:f5:75:2d: c6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3A:CF:9F:28:70:7C:1F:FF:F6:74:52:FF:95:E7:BE:01:8E:25:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddd514e1-93dc-31ed-9fdd-ce348472e4a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8d:9f:60:9a:b8:2a:de:61:ff:ce:34:7c:a4:bb:28:9d:48: 75:44:f3:80:4b:40:03:d7:74:65:2b:74:b8:b5:04:8f:8f:ae: 2d:3b:d4:6c:eb:73:51:32:13:e3:e1:a8:15:96:a4:29:2b:55: 88:6d:50:67:b1:b6:3a:99:a5:af:f4:31:21:ca:f2:fb:54:ac: 98:07:03:9f:13:17:ea:7d:50:98:c7:02:73:d8:55:4e:3a:55: ee:c3:d5:82:75:0a:fd:3d:c3:26:5e:75:e2:71:11:61:4d:74: 46:08:79:94:15:87:d0:82:02:b2:d2:14:a7:f2:11:3c:eb:a0: 9a:bb:43:60:92:e6:f2:77:32:56:f2:dd:0e:ad:d2:ca:13:28: 43:21:01:ed:23:18:c9:d3:d7:be:9e:1d:8c:b9:a1:34:a3:ce: 1d:18:ba:37:17:94:fa:22:d9:c5:76:fa:ac:8e:27:92:f2:76: b6:b6:97:8e:71:ac:b6:c6:e0:c3:88:6c:b5:94:56:22:b5:17: b8:f4:20:cd:95:19:20:f7:53:2f:0b:4a:79:8b:17:df:89:8e: 1d:70:16:e7:5d:e4:13:e1:c8:31:c9:b9:cd:8b:19:1b:3e:a5: 36:e4:94:56:7c:81:2a:49:d0:92:41:5d:b9:fc:39:fd:46:68: ca:db:54:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/XT3sV3Yrq9f2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjU0OVoXDTI1MDczMDE3MjU0OVowLzEtMCsGA1UEAxMk NGZiNjFmMjUtNDVlMy00MzcwLTk0NDItMjBjNGNhMDhlNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhemS5e4DfmJu+5F67M6kI6cysT9JcgkHMdgp Y397JVjHyM0HlgShqTjqtOzqSMUNf1TmJl0f2skF/EiH15Ph66kgtiVEH64M1MJS ywprZRVavjzCn/PvDa3s7yWnySXERqVO4ozCerkfmcEg1BCDSh37NnZPHUskuSSr Cg3HRfLi07xE+9FY73tVGE9Mc5eyOp4WMCFTOtUx4zYhMQ4Mg9UIuqGccrSFeddO uj2uuwURDvsXTkpdBFoAYUX7CAEuqvWI6lmbc0DKCCukAUO1arMLxNWKhJV1ijJ7 gmHuurVmGVVrKCDM7WIwwbT+6yaDA8VZVXdtsvdUheP1dS3GoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo6z58ocHwf//Z0Uv+V574BjiXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRkNTE0ZTEtOTNkYy0z MWVkLTlmZGQtY2UzNDg0NzJlNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6Nn2CauCreYf/ONHykuyidSHVE84BLQAPXdGUrdLi1BI+Pri071Gzr c1EyE+PhqBWWpCkrVYhtUGextjqZpa/0MSHK8vtUrJgHA58TF+p9UJjHAnPYVU46 Ve7D1YJ1Cv09wyZedeJxEWFNdEYIeZQVh9CCArLSFKfyETzroJq7Q2CS5vJ3Mlby 3Q6t0soTKEMhAe0jGMnT176eHYy5oTSjzh0YujcXlPoi2cV2+qyOJ5Lydra2l45x rLbG4MOIbLWUViK1F7j0IM2VGSD3Uy8LSnmLF9+Jjh1wFudd5BPhyDHJuc2LGRs+ pTbklFZ8gSpJ0JJBXbn8Of1GaMrbVJo= -----END CERTIFICATE-----Generated at Mon May 12 15:58:35 2025 by rpki-client