$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f71caaac-6055-307c-9e45-42135f0345aa.roa File: f71caaac-6055-307c-9e45-42135f0345aa.roa (raw, json) Hash identifier: Z7FH/Mw6GlHd8xvM3tNToTrfUg/nKFAt/1ibw27e0/M= Subject key identifier: 86:9C:77:4C:A8:F6:47:1C:94:9D:B5:8E:0D:6A:2F:64:97:76:B2:99 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F59D561BA6485C05A40100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f71caaac-6055-307c-9e45-42135f0345aa.roa Signing time: Thu 01 May 2025 17:10:01 +0000 ROA not before: Thu 01 May 2025 17:10:01 +0000 ROA not after: Wed 30 Jul 2025 17:10:01 +0000 asID: 22773 IP address blocks: 72.200.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:9d:56:1b:a6:48:5c:05:a4:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:01 2025 GMT Not After : Jul 30 17:10:01 2025 GMT Subject: CN=cdb7556a-3ee4-499d-89a5-e8fa630353c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ac:44:70:9f:1d:ac:01:60:27:cd:e5:a4:17: 37:05:22:f7:ed:1d:ae:98:14:2c:87:11:92:39:7b: 44:a7:45:ec:52:69:93:e8:47:01:a8:27:6f:d2:92: db:b1:73:64:2b:10:d8:1f:b4:be:42:46:ef:1c:40: 79:f3:18:e0:aa:c8:b9:6f:09:14:e4:df:4a:f0:77: 1a:25:63:af:97:54:33:44:92:98:64:11:b2:a3:c0: 43:2c:2e:98:13:a4:73:dc:ec:51:b2:92:e8:8f:36: 84:f5:b4:4f:0e:72:53:30:3d:5f:76:95:65:9c:ed: e4:e8:1d:61:42:05:c7:ca:18:79:0c:ef:65:91:aa: 65:2c:e1:d5:fb:41:cb:38:37:3e:3a:3c:8d:47:b5: 2d:6c:76:cc:f9:3e:fe:48:ec:bf:04:4f:2c:f3:a0: d9:c8:3b:47:7e:59:72:10:f4:f3:fb:59:f2:02:36: 6e:72:80:48:bc:83:f2:fc:b0:a6:20:61:14:c0:ad: eb:21:78:02:b5:fd:20:d9:d7:a9:4f:5b:67:0c:cf: 62:61:1d:0b:5c:87:c4:6a:72:f9:58:17:18:a8:60: 3e:64:a1:fe:ae:e2:8b:85:1a:e9:8c:28:ae:0b:ae: a8:7d:5f:ae:7a:73:a1:a4:77:93:8c:99:55:79:40: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9C:77:4C:A8:F6:47:1C:94:9D:B5:8E:0D:6A:2F:64:97:76:B2:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f71caaac-6055-307c-9e45-42135f0345aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:eb:b5:a8:11:41:8e:1d:d8:d7:e6:a3:46:95:49:00:1a:48: f1:78:5b:68:a0:d5:92:fb:71:61:76:52:70:d5:12:f5:ca:1d: 74:d8:87:63:88:03:61:c1:ef:fe:47:a8:06:59:07:30:cb:25: 52:56:a9:08:53:97:09:7c:24:a5:2b:5a:eb:67:47:87:7a:69: 5f:d7:69:93:d3:7d:fa:28:4e:91:54:41:76:f8:cf:19:89:94: f8:c7:61:aa:70:a9:de:35:ec:cd:57:95:0d:ce:d2:fa:5f:21: c6:c0:30:11:22:01:1b:f3:a2:e4:c6:4e:b9:bf:27:a7:38:c7: a4:ec:72:09:64:02:43:39:e6:3f:42:25:83:b1:da:2c:7d:ad: c0:e0:4e:12:3b:96:c2:2e:47:e4:89:19:88:60:2e:4a:1d:e4: b1:e8:c7:fb:99:fe:f2:5e:01:11:3e:f1:2e:3d:67:34:3c:42: ba:bb:70:99:80:f3:e1:11:ce:a6:7e:14:d8:c0:94:5e:6a:32: 95:b1:c8:16:3d:65:c2:04:e3:ed:76:6b:16:59:e3:03:a4:2f: 6c:26:49:e2:73:ae:8e:94:f8:a5:2e:b6:3a:a3:c1:12:c9:ed: c7:24:00:21:21:f4:08:e9:79:c0:ef:63:94:89:f9:89:30:49: 12:74:c8:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19Z1WG6ZIXAWkAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAwMVoXDTI1MDczMDE3MTAwMVowLzEtMCsGA1UEAxMk Y2RiNzU1NmEtM2VlNC00OTlkLTg5YTUtZThmYTYzMDM1M2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6xEcJ8drAFgJ83lpBc3BSL37R2umBQshxGS OXtEp0XsUmmT6EcBqCdv0pLbsXNkKxDYH7S+QkbvHEB58xjgqsi5bwkU5N9K8Hca JWOvl1QzRJKYZBGyo8BDLC6YE6Rz3OxRspLojzaE9bRPDnJTMD1fdpVlnO3k6B1h QgXHyhh5DO9lkaplLOHV+0HLODc+OjyNR7UtbHbM+T7+SOy/BE8s86DZyDtHflly EPTz+1nyAjZucoBIvIPy/LCmIGEUwK3rIXgCtf0g2depT1tnDM9iYR0LXIfEanL5 WBcYqGA+ZKH+ruKLhRrpjCiuC66ofV+uenOhpHeTjJlVeUDOPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIacd0yo9kcclJ21jg1qL2SXdrKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjcxY2FhYWMtNjA1NS0z MDdjLTllNDUtNDIxMzVmMDM0NWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnrtagRQY4d2Nfmo0aVSQAaSPF4W2ig1ZL7cWF2UnDVEvXKHXTYh2OI A2HB7/5HqAZZBzDLJVJWqQhTlwl8JKUrWutnR4d6aV/XaZPTffooTpFUQXb4zxmJ lPjHYapwqd417M1XlQ3O0vpfIcbAMBEiARvzouTGTrm/J6c4x6TscglkAkM55j9C JYOx2ix9rcDgThI7lsIuR+SJGYhgLkod5LHox/uZ/vJeARE+8S49ZzQ8Qrq7cJmA 8+ERzqZ+FNjAlF5qMpWxyBY9ZcIE4+12axZZ4wOkL2wmSeJzro6U+KUutjqjwRLJ 7cckACEh9AjpecDvY5SJ+YkwSRJ0yAQ= -----END CERTIFICATE-----Generated at Tue May 13 04:10:28 2025 by rpki-client