$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e82db977-2c49-3655-8634-e8204eec8c02.roa File: e82db977-2c49-3655-8634-e8204eec8c02.roa (raw, json) Hash identifier: aWI9o6Kw8DOONbNZwAZuHx0LRcgYK5aNgE/iV12aCBQ= Subject key identifier: 0E:A2:00:53:18:D4:69:F3:B8:7C:2C:87:71:7A:6F:33:B5:E6:11:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD5AB7419F2D4386CDEEC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e82db977-2c49-3655-8634-e8204eec8c02.roa Signing time: Thu 01 May 2025 17:25:37 +0000 ROA not before: Thu 01 May 2025 17:25:37 +0000 ROA not after: Wed 30 Jul 2025 17:25:37 +0000 asID: 22773 IP address blocks: 72.192.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:5a:b7:41:9f:2d:43:86:cd:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:37 2025 GMT Not After : Jul 30 17:25:37 2025 GMT Subject: CN=10c3a89e-4e69-4453-a3e1-062547ed3a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:22:a9:55:54:c7:ab:0f:5a:67:fe:ef:81:97: 7e:d5:10:16:e1:f3:e7:e1:c4:2c:5d:06:ca:d8:2f: b9:64:26:4a:45:dd:ab:7d:6d:af:1f:fc:e0:54:06: 47:1b:84:fb:d8:ca:2e:4c:fe:62:3a:23:5c:af:bc: 1b:3d:78:45:10:67:c0:36:af:9a:84:74:f4:61:c1: a4:ff:f4:35:b6:0c:32:4b:c7:1e:2f:1c:25:03:52: ec:51:fb:69:98:74:16:1b:18:0a:9e:dd:01:2e:89: 9b:1d:51:c9:51:66:13:06:41:58:e6:1d:50:73:df: 0d:51:46:4b:59:59:46:fd:f7:a2:02:24:02:e3:79: f0:8a:fe:e8:4d:f0:32:2d:db:5e:f6:c9:94:b8:05: 45:3b:c8:49:77:01:e3:95:87:37:d4:80:2c:f6:b8: a3:c8:b0:82:4a:84:b9:3d:91:4a:9c:e4:42:1d:9b: 52:00:22:9f:eb:b7:3e:73:4a:b3:8c:d6:4a:86:aa: 82:73:0f:63:c2:0c:a6:96:d9:e0:14:85:1b:46:ad: c0:f6:bb:53:9b:52:0e:82:89:66:a1:66:54:2a:ef: a7:db:94:fd:ae:70:45:61:00:8f:e7:b3:cd:51:e2: ba:7d:81:6b:21:e8:50:f4:ab:24:7b:98:0c:65:b6: 4d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A2:00:53:18:D4:69:F3:B8:7C:2C:87:71:7A:6F:33:B5:E6:11:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e82db977-2c49-3655-8634-e8204eec8c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:74:5d:d8:4a:b1:d7:66:a9:9d:0d:8d:a5:fe:c4:15:ef:39: a3:5a:5a:b0:b0:27:0c:cb:c7:26:4a:22:18:a7:1f:2c:37:db: ba:d2:e7:26:66:92:d4:c3:ea:5d:90:1c:28:46:1b:a2:2b:00: 98:8c:7b:bd:76:e9:6c:d9:2a:75:ea:4c:08:d0:6c:4f:55:4b: 10:c1:c5:d6:a7:d8:44:2d:1e:fe:46:f1:7f:80:78:9e:9f:75: f3:83:35:14:f8:0a:2d:89:04:2e:8e:4e:bd:be:83:d9:ae:d6: 50:b4:4c:a0:1a:06:f8:ec:4c:fd:1a:11:0a:80:aa:ea:e6:ed: 02:67:11:82:cc:46:3f:3f:1c:61:83:1a:19:57:15:99:fb:0d: 53:aa:3d:06:d9:34:e8:56:0a:b8:ae:96:7f:ef:51:ff:4d:7f: 3b:22:71:c5:94:10:7e:75:62:a0:ab:18:2a:17:65:ae:e4:25: 51:21:06:fb:bf:9a:6b:51:0e:9c:77:c4:58:a9:ba:e2:3d:72: 6f:72:7d:b9:c1:80:50:4c:c4:c1:6a:a2:24:ab:13:d4:e5:5c: 0b:12:82:19:c9:40:d2:49:f3:1e:bb:54:e9:18:d6:18:5d:8b: 03:89:e8:11:62:c3:23:0c:3a:91:ad:c2:dc:cd:00:ba:d4:8a: d2:70:cb:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Vq3QZ8tQ4bN7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUzN1oXDTI1MDczMDE3MjUzN1owLzEtMCsGA1UEAxMk MTBjM2E4OWUtNGU2OS00NDUzLWEzZTEtMDYyNTQ3ZWQzYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCKpVVTHqw9aZ/7vgZd+1RAW4fPn4cQsXQbK 2C+5ZCZKRd2rfW2vH/zgVAZHG4T72MouTP5iOiNcr7wbPXhFEGfANq+ahHT0YcGk //Q1tgwyS8ceLxwlA1LsUftpmHQWGxgKnt0BLombHVHJUWYTBkFY5h1Qc98NUUZL WVlG/feiAiQC43nwiv7oTfAyLdte9smUuAVFO8hJdwHjlYc31IAs9rijyLCCSoS5 PZFKnORCHZtSACKf67c+c0qzjNZKhqqCcw9jwgymltngFIUbRq3A9rtTm1IOgolm oWZUKu+n25T9rnBFYQCP57PNUeK6fYFrIehQ9Kske5gMZbZNDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6iAFMY1GnzuHwsh3F6bzO15hEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTgyZGI5NzctMmM0OS0z NjU1LTg2MzQtZTgyMDRlZWM4YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt0XdhKsddmqZ0NjaX+xBXvOaNaWrCwJwzLxyZKIhinHyw327rS5yZm ktTD6l2QHChGG6IrAJiMe7126WzZKnXqTAjQbE9VSxDBxdan2EQtHv5G8X+AeJ6f dfODNRT4Ci2JBC6OTr2+g9mu1lC0TKAaBvjsTP0aEQqAqurm7QJnEYLMRj8/HGGD GhlXFZn7DVOqPQbZNOhWCriuln/vUf9NfzsiccWUEH51YqCrGCoXZa7kJVEhBvu/ mmtRDpx3xFipuuI9cm9yfbnBgFBMxMFqoiSrE9TlXAsSghnJQNJJ8x67VOkY1hhd iwOJ6BFiwyMMOpGtwtzNALrUitJwywE= -----END CERTIFICATE-----Generated at Sun May 11 15:40:38 2025 by rpki-client