$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f374c233-21de-3594-845c-ebf70790fef5.roa File: f374c233-21de-3594-845c-ebf70790fef5.roa (raw, json) Hash identifier: 2i5fPSIH8lfbRb9BZBPunbXQdWJqmvhtEvUhG1aXj+o= Subject key identifier: A8:04:FC:4D:9B:8E:94:B0:8C:67:58:B1:1A:40:52:7B:6E:AA:70:5D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD9DC9CE760AB9A06AA880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f374c233-21de-3594-845c-ebf70790fef5.roa Signing time: Thu 01 May 2025 17:26:08 +0000 ROA not before: Thu 01 May 2025 17:26:08 +0000 ROA not after: Wed 30 Jul 2025 17:26:08 +0000 asID: 22773 IP address blocks: 72.220.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:9d:c9:ce:76:0a:b9:a0:6a:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:08 2025 GMT Not After : Jul 30 17:26:08 2025 GMT Subject: CN=5c1c066e-8d54-4f25-9184-f34d3ae4ebb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:29:50:11:22:f4:e3:6c:4c:fb:95:f4:13: 1a:3b:cb:46:cb:9c:74:b1:c6:28:57:8b:e1:e2:8f: f7:bc:be:6f:20:83:40:12:0a:ef:50:13:e4:2a:b6: 3c:0c:98:47:72:22:61:41:64:ed:e5:f4:70:6e:de: 0c:92:a3:88:b0:91:d5:5f:e8:28:0b:34:a0:9d:15: 3d:b8:ce:1f:82:ee:5a:79:8e:53:e1:8a:af:1a:8d: ba:de:5e:5a:5f:7e:f4:cd:15:b4:c4:55:f1:48:4e: 53:65:0b:0c:20:a5:82:54:f3:29:a6:19:12:62:eb: f3:b8:2f:b0:0d:e4:7d:f6:1c:da:c7:f9:5e:0f:c2: 06:33:5e:41:85:3a:15:08:0d:6a:1d:7f:63:a0:38: ed:d5:05:a9:44:2d:4d:5b:5e:b7:b1:c6:69:37:a4: f3:5e:20:37:6d:a4:d8:a1:7b:dd:03:03:91:84:c9: eb:bd:a8:50:c7:5d:e1:4b:e9:54:22:4a:84:40:da: ee:f5:09:0d:51:b7:9b:28:8b:5f:d8:4a:a3:c8:44: 73:a0:76:94:31:26:37:f1:bf:42:0e:6a:16:36:f6: bf:ad:19:09:e9:fc:b4:e9:48:47:09:cf:44:69:31: 04:3e:9b:57:c6:80:40:72:0f:3a:a3:e4:79:3a:05: 64:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:04:FC:4D:9B:8E:94:B0:8C:67:58:B1:1A:40:52:7B:6E:AA:70:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f374c233-21de-3594-845c-ebf70790fef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:5e:93:07:c1:ac:4c:3c:ad:c3:81:0a:fe:02:5b:58:02:0e: f6:a3:e4:45:a2:1b:a2:ca:35:73:47:d9:05:f2:d3:42:52:65: 0e:99:c2:b5:fe:10:ce:22:07:ba:95:f6:21:bd:8f:d5:44:cd: 3f:8e:60:ae:bf:d2:e5:02:49:85:1a:c2:ec:01:d9:76:2a:6e: a9:9a:7f:89:f1:0a:53:df:55:0a:3f:d8:6f:7e:73:ad:68:ec: e9:6b:6b:fb:08:01:40:6b:fa:45:00:c0:f1:4d:0d:49:85:b3: 1c:c3:22:97:a1:a1:9a:a7:c8:c7:31:f6:ee:7e:22:ed:cb:84: b1:58:6e:61:e2:d7:f9:23:44:5c:32:4f:6f:db:06:c9:08:84: 4f:3b:cb:39:be:69:b5:f6:bf:b4:15:f0:8e:95:7f:cd:10:2f: 29:bc:ad:7e:82:2d:a7:fa:0c:48:00:0d:1a:26:90:4a:e0:76: 07:ed:8f:cd:b9:36:8e:13:e1:37:75:b0:31:aa:c3:1d:d4:3c: 26:c5:d7:5a:ec:c2:c5:d9:fa:3d:85:b1:d2:bb:22:1a:35:35: 55:0c:4c:1f:7b:b9:88:2c:54:3f:70:90:7c:08:33:8d:b0:b8: 71:84:34:1a:54:98:9b:74:14:76:8f:bb:d8:ef:fe:52:eb:2a: a0:e9:8e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Z3JznYKuaBqqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYwOFoXDTI1MDczMDE3MjYwOFowLzEtMCsGA1UEAxMk NWMxYzA2NmUtOGQ1NC00ZjI1LTkxODQtZjM0ZDNhZTRlYmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDQpUBEi9ONsTPuV9BMaO8tGy5x0scYoV4vh 4o/3vL5vIINAEgrvUBPkKrY8DJhHciJhQWTt5fRwbt4MkqOIsJHVX+goCzSgnRU9 uM4fgu5aeY5T4YqvGo263l5aX370zRW0xFXxSE5TZQsMIKWCVPMpphkSYuvzuC+w DeR99hzax/leD8IGM15BhToVCA1qHX9joDjt1QWpRC1NW163scZpN6TzXiA3baTY oXvdAwORhMnrvahQx13hS+lUIkqEQNru9QkNUbebKItf2EqjyERzoHaUMSY38b9C DmoWNva/rRkJ6fy06UhHCc9EaTEEPptXxoBAcg86o+R5OgVkfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgE/E2bjpSwjGdYsRpAUntuqnBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjM3NGMyMzMtMjFkZS0z NTk0LTg0NWMtZWJmNzA3OTBmZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdekwfBrEw8rcOBCv4CW1gCDvaj5EWiG6LKNXNH2QXy00JSZQ6ZwrX+ EM4iB7qV9iG9j9VEzT+OYK6/0uUCSYUawuwB2XYqbqmaf4nxClPfVQo/2G9+c61o 7Olra/sIAUBr+kUAwPFNDUmFsxzDIpehoZqnyMcx9u5+Iu3LhLFYbmHi1/kjRFwy T2/bBskIhE87yzm+abX2v7QV8I6Vf80QLym8rX6CLaf6DEgADRomkErgdgftj825 No4T4Td1sDGqwx3UPCbF11rswsXZ+j2FsdK7Iho1NVUMTB97uYgsVD9wkHwIM42w uHGENBpUmJt0FHaPu9jv/lLrKqDpjow= -----END CERTIFICATE-----Generated at Mon May 12 04:41:38 2025 by rpki-client