$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8e9a7b8-29e7-3833-bae5-f3c2597784fa.roa File: e8e9a7b8-29e7-3833-bae5-f3c2597784fa.roa (raw, json) Hash identifier: DsUx5CNnKh/x5pvV3VKH55rV0aJKE17Wth0hOX0uvpU= Subject key identifier: E2:AA:07:3C:76:BB:A5:29:1C:61:56:A0:51:D1:EA:3A:0F:89:EA:CB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDB2553D5EE0E9628A5A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8e9a7b8-29e7-3833-bae5-f3c2597784fa.roa Signing time: Thu 01 May 2025 17:26:18 +0000 ROA not before: Thu 01 May 2025 17:26:18 +0000 ROA not after: Wed 30 Jul 2025 17:26:18 +0000 asID: 22773 IP address blocks: 72.221.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:b2:55:3d:5e:e0:e9:62:8a:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:18 2025 GMT Not After : Jul 30 17:26:18 2025 GMT Subject: CN=44324e1b-d2e3-4cd9-8820-c5ac26ffb13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:8b:c1:7c:55:14:25:c3:59:ff:56:af:30: 95:f0:5b:a2:86:7d:d9:93:7f:d4:8b:71:c7:61:03: 4e:18:47:13:70:88:a4:ec:b3:db:0b:0f:4c:df:24: 21:bd:1b:e8:95:2d:ec:87:0e:74:93:98:a5:2c:44: 3e:1c:e3:fb:b3:67:17:4f:48:1d:47:98:66:bd:e1: f8:8b:59:f7:54:8d:22:d0:01:0d:58:25:60:90:ce: b8:94:d3:04:17:95:0e:89:c3:e2:4f:19:51:4b:40: 07:ae:10:78:a3:3e:08:b2:35:8c:19:c7:3c:e7:83: 4f:14:24:7f:df:32:bd:e6:40:81:7e:51:38:00:b8: b6:17:6c:12:46:23:14:d0:96:9d:0c:d7:51:3c:c1: 14:2f:82:39:f6:90:b5:79:ab:a3:3b:07:73:bf:ce: b9:cb:84:1a:72:91:56:d6:f7:ff:54:3f:40:41:ef: ef:84:fd:13:7c:4e:0b:19:8b:05:72:a6:93:dd:a7: 79:d2:6b:65:be:b5:b1:a4:81:27:f0:90:bf:73:16: 07:fd:56:7c:ab:a0:17:ae:7c:d9:d4:21:9b:d9:a0: 8a:c6:5a:4b:cd:36:d2:5c:d3:bb:73:62:df:12:2b: 70:8d:3e:ee:f7:38:7c:6d:27:80:d6:98:b1:bc:9f: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AA:07:3C:76:BB:A5:29:1C:61:56:A0:51:D1:EA:3A:0F:89:EA:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8e9a7b8-29e7-3833-bae5-f3c2597784fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e7:06:3c:9f:97:68:2c:c9:1b:7d:32:7f:ec:55:94:55:c9: 14:07:4f:fd:c3:80:86:c8:32:af:50:ee:19:6e:1f:6d:88:df: 4a:05:e1:51:81:b3:9b:9d:f8:bd:fa:e5:1e:54:5f:83:d4:f8: ed:0c:fa:7a:18:d2:24:71:1c:05:e2:5e:f9:7b:bf:e4:af:e2: 40:6e:97:15:0f:36:79:bd:12:15:3d:2a:db:6f:a1:0f:2d:78: 6e:5e:32:92:ff:36:a3:ca:cf:20:00:bb:32:f6:70:f6:66:2e: d5:ea:db:3d:4f:cc:10:e9:7c:11:7e:3c:05:ef:4e:8b:f8:33: 09:b7:26:43:67:5b:30:9a:bc:3e:ea:34:0a:3a:a9:3e:7f:68: 04:dc:49:27:84:c5:af:e3:6f:df:97:3e:1f:43:00:f5:4d:48: 65:22:d9:4c:5d:20:d2:cf:24:9e:c0:e9:94:fe:04:db:6d:cb: 55:f8:c3:8b:6d:8e:89:e8:60:10:8f:48:50:3a:fe:a1:40:f7: af:a0:43:73:29:9a:d5:66:a0:9d:ae:87:2b:4c:07:e0:0f:13: 82:be:ee:6a:a9:fd:ed:ae:23:fe:aa:fe:b1:e5:26:81:c6:d8: 58:f4:9e:3e:c3:cd:04:35:29:33:73:9f:d7:fd:49:77:6d:86: 05:51:25:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/bJVPV7g6WKKWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYxOFoXDTI1MDczMDE3MjYxOFowLzEtMCsGA1UEAxMk NDQzMjRlMWItZDJlMy00Y2Q5LTg4MjAtYzVhYzI2ZmZiMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPuLwXxVFCXDWf9WrzCV8Fuihn3Zk3/Ui3HH YQNOGEcTcIik7LPbCw9M3yQhvRvolS3shw50k5ilLEQ+HOP7s2cXT0gdR5hmveH4 i1n3VI0i0AENWCVgkM64lNMEF5UOicPiTxlRS0AHrhB4oz4IsjWMGcc854NPFCR/ 3zK95kCBflE4ALi2F2wSRiMU0JadDNdRPMEUL4I59pC1eaujOwdzv865y4QacpFW 1vf/VD9AQe/vhP0TfE4LGYsFcqaT3ad50mtlvrWxpIEn8JC/cxYH/VZ8q6AXrnzZ 1CGb2aCKxlpLzTbSXNO7c2LfEitwjT7u9zh8bSeA1pixvJ9PnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKqBzx2u6UpHGFWoFHR6joPierLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZThlOWE3YjgtMjllNy0z ODMzLWJhZTUtZjNjMjU5Nzc4NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDnBjyfl2gsyRt9Mn/sVZRVyRQHT/3DgIbIMq9Q7hluH22I30oF4VGB s5ud+L365R5UX4PU+O0M+noY0iRxHAXiXvl7v+Sv4kBulxUPNnm9EhU9KttvoQ8t eG5eMpL/NqPKzyAAuzL2cPZmLtXq2z1PzBDpfBF+PAXvTov4Mwm3JkNnWzCavD7q NAo6qT5/aATcSSeExa/jb9+XPh9DAPVNSGUi2UxdINLPJJ7A6ZT+BNtty1X4w4tt jonoYBCPSFA6/qFA96+gQ3MpmtVmoJ2uhytMB+APE4K+7mqp/e2uI/6q/rHlJoHG 2Fj0nj7DzQQ1KTNzn9f9SXdthgVRJes= -----END CERTIFICATE-----Generated at Mon May 12 12:53:19 2025 by rpki-client