$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fde26857-ba1a-309e-a3c6-cdca57a1d23c.roa File: fde26857-ba1a-309e-a3c6-cdca57a1d23c.roa (raw, json) Hash identifier: aZhRFWELo9WLTrnIbdJfVDJeNw6lBYiERu3QVieK1pk= Subject key identifier: F8:CC:64:93:AE:78:14:9E:60:2B:4E:37:A1:8D:87:C5:A5:4F:4C:A1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849C904F755C3EAEDFB6F310D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fde26857-ba1a-309e-a3c6-cdca57a1d23c.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 22773 IP address blocks: 72.194.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f7:55:c3:ea:ed:fb:6f:31:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=5839528f-f02d-43e6-b962-180bab12726c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:52:d3:e8:96:51:8c:39:29:86:e0:01:1d:6b: 25:38:ec:a4:dc:f5:b9:64:c6:84:ee:33:99:0c:c8: d9:0a:9b:d1:3b:ea:b0:07:66:e9:60:3c:b7:12:45: 1a:5d:64:e6:aa:fc:32:d2:be:5f:70:7b:ff:f7:4c: 07:c2:33:e2:fe:b7:29:10:90:b8:d0:86:9c:e5:58: 7e:bf:db:fd:75:87:be:92:aa:98:1b:92:40:65:91: 09:da:81:b8:ea:2c:2d:ed:69:2d:af:9f:b4:64:1c: 04:ea:ba:54:1d:38:75:f3:e3:e7:a9:22:2e:1f:19: 72:7e:77:76:55:d9:99:49:57:e1:e9:b5:d5:68:2b: 10:44:7a:66:09:1b:24:2f:3e:f2:53:26:3a:b6:4d: 3e:07:a6:65:f3:cf:d8:9a:ad:05:f1:7e:98:24:82: 74:53:20:7b:0b:38:7f:67:b3:aa:1a:ba:a6:f6:47: 78:46:f2:5e:c1:cc:8f:7a:a0:cd:8d:0f:26:cf:f5: 91:2c:59:0b:28:40:b2:3f:c6:b3:ea:63:c0:b1:70: 8e:e3:4b:5a:d7:26:bf:57:ec:ae:88:b4:df:d0:df: 28:14:5c:31:04:a3:78:f1:2f:9a:7a:53:e6:0c:60: aa:8a:30:ae:62:03:73:7f:af:33:bf:21:d2:d6:33: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CC:64:93:AE:78:14:9E:60:2B:4E:37:A1:8D:87:C5:A5:4F:4C:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fde26857-ba1a-309e-a3c6-cdca57a1d23c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.194.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1b:14:8e:db:c1:ac:93:2e:f4:4d:cc:da:53:d3:95:fd:3a: 4d:e3:b6:3a:fe:23:25:35:56:41:f0:5e:9d:fc:c0:9d:e2:39: 5b:60:1a:ef:19:09:15:59:94:93:ef:e8:08:31:9a:4c:d0:47: 49:16:01:97:34:38:98:39:70:c2:99:0e:1d:45:3d:26:90:55: b4:fb:9c:52:cf:a0:2d:88:d7:10:5b:2a:4b:cc:3f:13:a5:52: c6:61:ab:93:b6:54:41:a0:48:3c:ee:72:71:21:52:d2:26:eb: 08:d8:d7:7e:6c:7b:3b:9c:0a:4b:c4:45:26:06:e5:6f:23:9a: 7a:43:3b:fd:08:3b:60:2f:6d:22:90:01:4e:78:6b:0e:45:8b: 19:76:7c:5d:39:65:75:54:9e:d8:9c:d9:d7:67:9b:66:45:5d: d7:ba:81:c3:5f:0c:0f:6d:79:22:d1:96:1a:4b:ef:47:de:49: 97:dd:fb:cf:23:30:fd:78:23:5a:7b:5b:6e:50:9d:ff:4e:39: bd:f7:a0:cb:30:c6:6c:ac:6a:eb:8a:84:5e:57:0e:ad:0e:b8: 30:5c:af:a2:ff:3e:db:48:49:89:fc:6e:ea:50:33:8f:16:66: 2b:7f:7b:f3:09:ba:cf:26:bf:94:77:c7:21:60:e3:95:65:b4: ba:58:20:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPdVw+rt+28xDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk NTgzOTUyOGYtZjAyZC00M2U2LWI5NjItMTgwYmFiMTI3MjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1LT6JZRjDkphuABHWslOOyk3PW5ZMaE7jOZ DMjZCpvRO+qwB2bpYDy3EkUaXWTmqvwy0r5fcHv/90wHwjPi/rcpEJC40Iac5Vh+ v9v9dYe+kqqYG5JAZZEJ2oG46iwt7Wktr5+0ZBwE6rpUHTh18+PnqSIuHxlyfnd2 VdmZSVfh6bXVaCsQRHpmCRskLz7yUyY6tk0+B6Zl88/Ymq0F8X6YJIJ0UyB7Czh/ Z7OqGrqm9kd4RvJewcyPeqDNjQ8mz/WRLFkLKECyP8az6mPAsXCO40ta1ya/V+yu iLTf0N8oFFwxBKN48S+aelPmDGCqijCuYgNzf68zvyHS1jPiswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjMZJOueBSeYCtON6GNh8WlT0yhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmRlMjY4NTctYmExYS0z MDllLWEzYzYtY2RjYTU3YTFkMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESMIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQbFI7bwayTLvRNzNpT05X9Ok3jtjr+IyU1VkHwXp38wJ3iOVtgGu8Z CRVZlJPv6AgxmkzQR0kWAZc0OJg5cMKZDh1FPSaQVbT7nFLPoC2I1xBbKkvMPxOl UsZhq5O2VEGgSDzucnEhUtIm6wjY135sezucCkvERSYG5W8jmnpDO/0IO2AvbSKQ AU54aw5Fixl2fF05ZXVUntic2ddnm2ZFXde6gcNfDA9teSLRlhpL70feSZfd+88j MP14I1p7W25Qnf9OOb33oMswxmysauuKhF5XDq0OuDBcr6L/PttISYn8bupQM48W Zit/e/MJus8mv5R3xyFg45VltLpYIIk= -----END CERTIFICATE-----Generated at Sat May 10 07:56:25 2025 by rpki-client