$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff39ed9d-502e-39ba-b503-9e320418042d.roa File: ff39ed9d-502e-39ba-b503-9e320418042d.roa (raw, json) Hash identifier: Hvg+6Qi09PzVLLJGtqs5u3pgG8LNPghjO6abL1WQBnA= Subject key identifier: 13:D9:16:52:74:C9:D3:D2:A2:79:37:93:DB:56:E2:1E:77:12:FB:78 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD77A4E6915DC5AA715440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff39ed9d-502e-39ba-b503-9e320418042d.roa Signing time: Thu 01 May 2025 17:25:50 +0000 ROA not before: Thu 01 May 2025 17:25:50 +0000 ROA not after: Wed 30 Jul 2025 17:25:50 +0000 asID: 22773 IP address blocks: 72.197.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:77:a4:e6:91:5d:c5:aa:71:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:50 2025 GMT Not After : Jul 30 17:25:50 2025 GMT Subject: CN=08526605-1bc6-4141-b90e-b61fd72c2a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:63:56:a9:9d:02:cb:b6:0c:da:db:54:24:f8: 62:41:38:59:c4:63:2c:29:8c:f7:73:64:2a:cf:36: 73:1c:b1:06:f8:67:c7:69:4a:49:7e:22:ab:17:70: 39:d5:c2:ff:3c:7b:53:96:0c:23:18:f8:c4:7f:bd: b2:15:55:6f:8c:df:89:83:98:c2:f7:b4:d1:91:6f: dc:b8:ab:d7:27:a0:65:80:6f:de:62:b2:1d:b1:f8: f5:08:56:e8:40:94:47:17:15:60:fa:9e:22:0d:9d: 99:43:47:cd:70:c5:6f:0f:05:21:2d:f9:bb:5d:16: ca:f1:5c:84:9d:0b:a0:0a:67:d6:de:55:2e:5e:0b: 64:ed:57:ca:16:06:eb:18:1a:9b:49:6e:74:a8:3d: ec:0c:13:bc:f5:83:fb:93:60:7d:59:7a:c2:66:1a: a7:5a:0e:b8:11:a2:c0:dd:31:84:35:52:aa:a6:33: 6f:99:5b:74:bf:85:21:79:27:c5:99:91:43:7b:b7: be:42:f9:c2:1d:87:af:61:74:4d:c9:5b:50:1a:7c: 2e:8b:df:bd:22:53:50:11:a9:bc:75:c1:e1:16:1d: a9:7f:bf:0e:50:9a:f9:36:56:8e:b4:04:8a:2c:c2: 81:0e:d4:7e:da:7b:6c:e7:68:eb:82:c2:09:ed:c0: 46:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D9:16:52:74:C9:D3:D2:A2:79:37:93:DB:56:E2:1E:77:12:FB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff39ed9d-502e-39ba-b503-9e320418042d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:45:3d:06:42:7c:e9:f6:2f:8f:36:63:d7:75:b3:e2:d0:01: 4d:44:9d:e7:07:10:9e:66:4c:6d:1c:d9:ef:72:cd:50:66:28: f6:c8:c0:92:9b:28:9c:61:8e:42:48:38:8d:5b:b8:f2:07:78: 99:79:23:f2:4d:3f:98:a4:9b:8d:c9:83:02:7d:c0:97:c3:25: ce:9e:75:5c:46:c2:ee:1a:f9:ab:5a:b2:b1:9f:33:c1:35:26: bf:09:08:38:6f:07:70:33:ff:fa:0d:28:00:5f:05:d2:cf:9d: cb:a3:0a:a6:78:9c:de:03:10:74:f3:31:fa:cf:43:71:d6:07: d3:14:0f:4e:34:28:b9:f4:9c:0c:80:16:7c:48:6a:70:5e:f0: 77:64:62:a6:22:7b:bb:a0:9f:e9:b1:eb:69:de:af:53:30:27: 3e:18:b2:c2:74:2d:d8:85:4a:bc:65:3b:77:27:d9:14:07:ef: b5:ba:4b:38:47:2d:40:f3:ac:15:d3:c4:07:2f:aa:79:a9:74: 3a:6f:52:9e:0a:3f:28:c0:d4:c8:a6:9f:ec:99:98:13:96:7b: 37:b5:78:c8:50:ed:d4:5e:2a:64:bb:52:90:0d:79:62:73:ac: b7:c9:25:af:af:87:4e:b4:11:7e:a4:27:f7:c9:17:a0:15:1c: 20:8b:3c:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Xek5pFdxapxVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjU1MFoXDTI1MDczMDE3MjU1MFowLzEtMCsGA1UEAxMk MDg1MjY2MDUtMWJjNi00MTQxLWI5MGUtYjYxZmQ3MmMyYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWNWqZ0Cy7YM2ttUJPhiQThZxGMsKYz3c2Qq zzZzHLEG+GfHaUpJfiKrF3A51cL/PHtTlgwjGPjEf72yFVVvjN+Jg5jC97TRkW/c uKvXJ6BlgG/eYrIdsfj1CFboQJRHFxVg+p4iDZ2ZQ0fNcMVvDwUhLfm7XRbK8VyE nQugCmfW3lUuXgtk7VfKFgbrGBqbSW50qD3sDBO89YP7k2B9WXrCZhqnWg64EaLA 3TGENVKqpjNvmVt0v4UheSfFmZFDe7e+QvnCHYevYXRNyVtQGnwui9+9IlNQEam8 dcHhFh2pf78OUJr5NlaOtASKLMKBDtR+2nts52jrgsIJ7cBG0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPZFlJ0ydPSonk3k9tW4h53Evt4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmYzOWVkOWQtNTAyZS0z OWJhLWI1MDMtOWUzMjA0MTgwNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdFPQZCfOn2L482Y9d1s+LQAU1EnecHEJ5mTG0c2e9yzVBmKPbIwJKb KJxhjkJIOI1buPIHeJl5I/JNP5ikm43JgwJ9wJfDJc6edVxGwu4a+atasrGfM8E1 Jr8JCDhvB3Az//oNKABfBdLPncujCqZ4nN4DEHTzMfrPQ3HWB9MUD040KLn0nAyA FnxIanBe8HdkYqYie7ugn+mx62ner1MwJz4YssJ0LdiFSrxlO3cn2RQH77W6SzhH LUDzrBXTxAcvqnmpdDpvUp4KPyjA1Mimn+yZmBOWeze1eMhQ7dReKmS7UpANeWJz rLfJJa+vh060EX6kJ/fJF6AVHCCLPDY= -----END CERTIFICATE-----Generated at Sun May 11 10:44:22 2025 by rpki-client