$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa File: 1dcc2252-c71a-345a-ba00-93c43b487133.roa (raw, json) Hash identifier: Bkei1TPfeKRPWQCpzV1cMFv4ZnkZqOik5Ka9+PI6BEY= Subject key identifier: 85:5D:EB:00:2D:ED:37:11:67:44:73:22:F1:B5:CC:6A:83:D8:B8:70 Certificate issuer: /CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Certificate serial: 010D0C9F432858493243D6D9B6441AE6BB563820 Authority key identifier: AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 25715 IP address blocks: 173.225.32.0/20 maxlen: 24 199.36.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:d6:d9:b6:44:1a:e6:bb:56:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=9ce44b27-c6b0-4b07-8252-79850d85fe1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:73:6b:0b:7a:a5:62:97:7c:48:70:5a:68:65: 54:61:71:84:81:b6:fb:5b:70:85:10:d8:23:7a:31: 20:f1:c1:b9:5a:35:c4:f4:ee:68:f7:4b:45:c6:aa: 4f:84:c5:f7:ab:e9:9e:1a:02:7e:d8:29:52:a7:9f: f1:9f:5a:08:f4:90:5e:88:3b:1d:78:85:0e:93:f4: cd:d9:e1:b7:94:62:c8:ff:56:96:5f:1d:85:35:60: 19:46:49:cd:ec:2b:2c:a3:a9:58:d5:43:5e:7d:d6: c6:b7:cc:81:2c:d1:3e:9c:2a:ef:14:d9:d6:db:e7: f7:64:97:28:72:ec:42:2d:d6:de:f7:16:5d:de:0f: dd:06:af:6f:da:08:d0:92:29:ad:1f:14:fd:4b:1b: 9d:68:12:8f:d6:16:e3:79:9c:ba:15:45:87:16:d0: e5:81:37:b9:63:14:7a:a5:c9:ea:b6:60:aa:87:09: 15:52:47:24:28:5c:9f:9d:14:dd:7d:17:b7:d2:91: 5a:ab:21:46:f2:cf:ce:e6:a7:0b:21:c3:fb:58:47: 32:29:c8:e5:8c:84:51:74:b3:a7:cc:36:14:bb:87: 01:f6:96:9a:5f:96:eb:9f:59:81:67:6e:2f:a0:13: ab:8b:bf:24:f9:31:a2:18:21:bf:be:e6:b9:94:a3: b2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5D:EB:00:2D:ED:37:11:67:44:73:22:F1:B5:CC:6A:83:D8:B8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl X509v3 Authority Key Identifier: keyid:AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer sbgp-ipAddrBlock: critical IPv4: 173.225.32.0/20 199.36.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a6:e0:9f:55:c1:9e:2d:b2:a9:b7:75:1d:bb:2a:a0:6d:f4: 12:5c:ac:25:dc:c0:a3:2c:9c:ac:cb:cb:ba:d9:1d:8a:a4:df: ad:a9:2b:02:98:85:77:fc:6b:8c:88:a0:d5:41:14:3b:62:3f: 8d:b4:69:37:31:de:26:6f:bc:2b:aa:80:a8:b0:2f:e6:a2:25: 9d:4e:9f:4b:64:0a:7b:e9:48:1a:08:df:8b:fb:5f:b1:e0:7a: 8d:45:eb:cb:90:5f:b1:58:46:cf:8c:36:48:63:4d:86:d2:ff: 86:78:58:75:df:45:c4:74:98:76:32:e1:35:e6:33:d4:7d:fe: a6:f9:bc:69:45:a1:c2:8f:7c:79:08:05:98:dd:74:cb:ff:d1: c3:e2:88:ca:63:1d:3c:69:12:35:af:6b:3b:2c:e1:1b:ee:9b: 6b:ba:20:4b:5c:17:f7:aa:2e:8a:ab:dc:0f:8a:db:5a:ec:16: 99:9a:45:bc:15:44:fb:21:a5:c2:ad:f4:62:ec:79:53:66:f8: b2:bd:af:aa:5e:f9:59:8b:5b:a0:24:8a:c2:6b:67:ed:a9:d0: f0:7b:34:f0:ef:e2:b6:a9:48:ca:0d:a6:8c:cc:11:c2:6c:df: c7:9b:75:37:f5:2f:3c:82:4b:4a:4a:1e:72:0e:9f:f5:8b:42: 74:ce:e8:ec -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkyQ9bZtkQa5rtWOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhYWNkNWEtNDZhYy00ZTE4LTllZjItNzIyMjgwZGRm YTk0MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk OWNlNDRiMjctYzZiMC00YjA3LTgyNTItNzk4NTBkODVmZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXNrC3qlYpd8SHBaaGVUYXGEgbb7W3CFENgj ejEg8cG5WjXE9O5o90tFxqpPhMX3q+meGgJ+2ClSp5/xn1oI9JBeiDsdeIUOk/TN 2eG3lGLI/1aWXx2FNWAZRknN7Csso6lY1UNefdbGt8yBLNE+nCrvFNnW2+f3ZJco cuxCLdbe9xZd3g/dBq9v2gjQkimtHxT9SxudaBKP1hbjeZy6FUWHFtDlgTe5YxR6 pcnqtmCqhwkVUkckKFyfnRTdfRe30pFaqyFG8s/O5qcLIcP7WEcyKcjljIRRdLOn zDYUu4cB9paaX5brn1mBZ24voBOri78k+TGiGCG/vua5lKOyzQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIVd6wAt7TcRZ0RzIvG1zGqD2LhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGFh Y2Q1YS00NmFjLTRlMTgtOWVmMi03MjIyODBkZGZhOTQvMWRjYzIyNTItYzcxYS0z NDVhLWJhMDAtOTNjNDNiNDg3MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhYWNkNWEtNDZhYy00ZTE4LTll ZjItNzIyMjgwZGRmYTk0LzkwYWFjZDVhLTQ2YWMtNGUxOC05ZWYyLTcyMjI4MGRk ZmE5NC5jcmwwHwYDVR0jBBgwFoAUqoUNnn9DBsgVll3rTBzP5Pt2cAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGFhY2Q1YS00NmFjLTRlMTgtOWVmMi03MjIy ODBkZGZhOTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEreEgAwQD xyTgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACum4J9VwZ4tsqm3dR27KqBt9BJcrCXcwKMsnKzLy7rZHYqk 362pKwKYhXf8a4yIoNVBFDtiP420aTcx3iZvvCuqgKiwL+aiJZ1On0tkCnvpSBoI 34v7X7Hgeo1F68uQX7FYRs+MNkhjTYbS/4Z4WHXfRcR0mHYy4TXmM9R9/qb5vGlF ocKPfHkIBZjddMv/0cPiiMpjHTxpEjWvazss4Rvum2u6IEtcF/eqLoqr3A+K21rs FpmaRbwVRPshpcKt9GLseVNm+LK9r6pe+VmLW6AkisJrZ+2p0PB7NPDv4rapSMoN pozMEcJs38ebdTf1LzyCS0pKHnIOn/WLQnTO6Ow= -----END CERTIFICATE-----Generated at Fri Apr 11 23:32:39 2025 by rpki-client