$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00f2b7c6-5584-3e81-b8d0-cbdd53179d8a.roa File: 00f2b7c6-5584-3e81-b8d0-cbdd53179d8a.roa (raw, json) Hash identifier: vM+L7kDWnwnZBv0B1H6gXQJJQmNrKCRf9mNmYX5F+5U= Subject key identifier: 09:3E:1A:BA:DE:3D:0F:16:B0:A7:AA:D4:22:18:A5:05:FA:11:F7:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB17923C36060C851205780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00f2b7c6-5584-3e81-b8d0-cbdd53179d8a.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 72.219.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:79:23:c3:60:60:c8:51:20:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=ad1a88d1-0a64-40d9-a45b-3a6a6c3b6b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:23:59:cb:cb:12:16:3c:c7:15:52:4d:08:c9: 8c:f3:ac:74:1f:33:d9:91:41:c4:1a:38:65:b7:24: be:9c:05:76:50:5a:0e:f5:f4:a6:be:93:09:55:7e: ff:31:37:0e:27:f8:75:62:64:ab:28:fe:1a:30:11: e3:3e:47:bb:52:12:99:ad:52:c7:64:41:f0:96:25: 00:a2:e7:a8:cb:63:81:77:a7:5a:cd:61:06:f8:2c: a8:5e:c8:a5:80:5e:eb:6b:0c:75:18:14:4d:1d:db: 14:0d:2f:b5:ec:50:b4:a8:1b:29:7a:b8:cc:bb:a4: 4c:97:50:8b:3d:b4:21:79:43:31:d9:ac:73:b5:c0: 7d:bb:b6:85:67:47:1f:b0:e0:ae:6c:56:70:b1:27: 75:cd:99:0c:c2:4e:26:9a:27:7c:99:b7:b0:0c:fe: fa:cd:34:ea:46:48:40:f7:b0:5e:12:ba:b7:b0:96: 2f:87:44:ab:d8:58:fb:06:86:df:da:f3:6f:77:f9: 77:df:dc:a2:02:36:22:6e:11:d9:6d:43:f2:7d:dd: 4e:1c:9a:91:e5:72:53:3f:9f:58:3f:22:1d:e3:94: 7b:8e:92:ec:0a:7a:bf:87:07:82:1d:ae:2b:78:ce: 92:4c:e8:a6:ff:3e:a6:39:3a:9a:00:91:06:82:2c: 67:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3E:1A:BA:DE:3D:0F:16:B0:A7:AA:D4:22:18:A5:05:FA:11:F7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00f2b7c6-5584-3e81-b8d0-cbdd53179d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d6:db:98:4e:c1:7d:fb:78:b5:03:ff:f9:94:83:5c:0b:47: f4:8d:8d:83:f3:fa:17:8c:26:a6:9c:db:0e:13:e4:1e:22:79: 24:e2:50:f6:29:2a:f2:b5:c8:80:72:ff:80:98:cd:d4:d5:5b: 3b:88:3f:76:64:0f:f1:73:a2:c6:0f:7f:94:43:c5:4b:73:12: 6f:df:84:a6:ff:6a:35:9e:47:3c:b5:f3:05:c5:11:a7:ad:a0: f7:22:d0:d6:f6:a8:09:41:51:59:18:e7:87:04:26:fb:01:5e: c9:71:d5:37:f4:a8:70:54:1c:09:47:43:4b:ca:67:8f:ab:84: 67:a7:22:cd:9e:4b:ca:83:e1:43:08:5c:15:3b:e9:b3:cf:17: d6:c2:d7:a7:80:99:76:ec:e9:99:f9:a8:5c:ab:62:6e:15:ec: b8:fc:7f:49:00:73:72:6e:07:7b:45:11:6a:a1:4b:19:52:ac: 13:5f:5a:01:87:6a:5a:ec:f6:aa:fc:a4:0a:d0:5e:ec:47:2e: 19:9a:1c:e6:51:78:3a:1f:0a:17:bc:40:a3:d4:6c:98:d0:47: ee:fa:13:69:a0:de:81:84:6c:8e:ba:8b:d6:32:ab:95:f3:d5: 28:1d:12:d3:20:a3:07:e6:a6:08:17:fa:e3:f2:9e:e8:8f:32: 5c:1e:e4:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXkjw2BgyFEgV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YWQxYTg4ZDEtMGE2NC00MGQ5LWE0NWItM2E2YTZjM2I2Yjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiNZy8sSFjzHFVJNCMmM86x0HzPZkUHEGjhl tyS+nAV2UFoO9fSmvpMJVX7/MTcOJ/h1YmSrKP4aMBHjPke7UhKZrVLHZEHwliUA oueoy2OBd6dazWEG+CyoXsilgF7rawx1GBRNHdsUDS+17FC0qBsperjMu6RMl1CL PbQheUMx2axztcB9u7aFZ0cfsOCubFZwsSd1zZkMwk4mmid8mbewDP76zTTqRkhA 97BeErq3sJYvh0Sr2Fj7Bobf2vNvd/l339yiAjYibhHZbUPyfd1OHJqR5XJTP59Y PyId45R7jpLsCnq/hweCHa4reM6STOim/z6mOTqaAJEGgixnJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk+GrrePQ8WsKeq1CIYpQX6EfesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDBmMmI3YzYtNTU4NC0z ZTgxLWI4ZDAtY2JkZDUzMTc5ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrW25hOwX37eLUD//mUg1wLR/SNjYPz+heMJqac2w4T5B4ieSTiUPYp KvK1yIBy/4CYzdTVWzuIP3ZkD/FzosYPf5RDxUtzEm/fhKb/ajWeRzy18wXFEaet oPci0Nb2qAlBUVkY54cEJvsBXslx1Tf0qHBUHAlHQ0vKZ4+rhGenIs2eS8qD4UMI XBU76bPPF9bC16eAmXbs6Zn5qFyrYm4V7Lj8f0kAc3JuB3tFEWqhSxlSrBNfWgGH alrs9qr8pArQXuxHLhmaHOZReDofChe8QKPUbJjQR+76E2mg3oGEbI66i9Yyq5Xz 1SgdEtMgowfmpggX+uPynuiPMlwe5Lc= -----END CERTIFICATE-----Generated at Sun Apr 6 15:58:25 2025 by rpki-client