$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12338849-6c8c-387b-b854-dea1943d2040.roa File: 12338849-6c8c-387b-b854-dea1943d2040.roa (raw, json) Hash identifier: wKCu5MUDd5Ppq3JK+eaBC1HQVlBRq8S3pYrWjyt3VLc= Subject key identifier: 22:C7:0D:FC:0C:A7:0B:EC:FF:59:B9:B1:26:BC:18:BF:FD:AF:AD:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858496054200EF511EDBE2373792C Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12338849-6c8c-387b-b854-dea1943d2040.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 22773 IP address blocks: 72.192.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:20:0e:f5:11:ed:be:23:73:79:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=f3607de5-a91f-4fca-971d-033a366a5500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:3d:3e:de:64:1e:9d:f6:fe:17:53:7d:17: 08:bf:2b:3a:75:08:b6:a2:0d:f3:c6:67:3f:0d:d2: 06:7c:96:36:19:d5:29:b8:02:90:a0:b8:40:cf:40: 4a:4d:6e:5b:75:7d:fd:92:d1:98:12:b0:e4:55:41: b0:f0:1d:f8:d6:23:8c:0f:15:be:4e:39:9f:32:1d: 32:2a:d7:96:0b:9c:22:54:3d:da:10:6e:aa:37:64: b1:18:e1:70:8f:bb:66:b3:12:ed:6d:ac:e1:76:04: 5f:76:10:7a:3c:92:8b:fa:86:95:a3:ac:63:47:42: cb:cc:85:3d:44:8c:eb:22:60:c2:82:ce:f0:73:69: 29:6d:bf:a6:20:25:6e:dc:b9:fc:60:45:3c:16:03: bf:bd:ab:a3:85:c9:6b:90:be:26:27:4d:f9:4a:ef: d9:68:98:9f:da:b3:7e:99:f8:90:ed:b9:c8:02:15: e6:ae:f9:30:57:68:57:7b:86:6c:67:49:4d:9d:d2: 2b:18:be:fc:f7:ac:94:65:db:dc:f5:29:53:d3:10: 76:b5:d5:44:49:e0:46:df:92:39:0b:c4:ac:da:2c: 7a:00:7d:74:7b:34:53:2c:c2:27:72:17:18:d4:93: fb:04:55:c1:e5:99:bc:ea:ae:1b:22:b3:ea:1e:26: ea:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C7:0D:FC:0C:A7:0B:EC:FF:59:B9:B1:26:BC:18:BF:FD:AF:AD:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12338849-6c8c-387b-b854-dea1943d2040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:4d:13:d4:3d:0b:92:5d:39:73:5e:6c:27:b0:fe:3e:5d:d7: 1c:cb:e0:53:06:fd:7e:36:4c:b1:ea:3d:b5:c7:5a:84:35:76: 19:16:96:9d:42:9a:e6:13:5f:d3:35:e8:00:a6:cc:26:04:0c: 5d:b1:94:21:67:7e:b5:a6:d4:32:57:96:1a:f2:fe:24:43:05: f5:53:08:91:f9:3b:5f:46:67:fb:24:1b:28:25:68:a0:b5:12: c6:44:b4:62:9c:c5:fb:2d:cf:95:ae:66:f0:48:68:e9:10:3f: 44:d3:1f:ba:e8:f0:b6:b0:9b:d5:4a:4f:77:53:52:4a:5d:6e: ce:c8:15:74:4f:82:9f:b2:21:53:fe:08:54:bc:06:25:6d:12: 0c:78:06:76:bd:b0:f9:41:fb:ba:77:88:10:93:ba:7c:b4:ee: d2:24:5d:29:50:bc:8a:d9:e8:4e:9f:49:55:13:8e:82:1f:97: eb:a9:b7:0c:44:03:6f:00:22:28:c0:5a:3f:c4:19:12:bf:4a: 9e:05:52:af:9f:08:6c:45:5f:1a:0d:94:fa:ec:fb:3f:4a:33: 43:55:2a:76:8f:ad:14:31:53:9c:d2:36:38:f3:81:aa:e2:0e: 2d:49:12:3f:59:c6:8b:80:be:5a:fd:d5:58:98:2b:e1:6d:47: f7:99:29:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVCAO9RHtviNzeSwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk ZjM2MDdkZTUtYTkxZi00ZmNhLTk3MWQtMDMzYTM2NmE1NTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPM9Pt5kHp32/hdTfRcIvys6dQi2og3zxmc/ DdIGfJY2GdUpuAKQoLhAz0BKTW5bdX39ktGYErDkVUGw8B341iOMDxW+TjmfMh0y KteWC5wiVD3aEG6qN2SxGOFwj7tmsxLtbazhdgRfdhB6PJKL+oaVo6xjR0LLzIU9 RIzrImDCgs7wc2kpbb+mICVu3Ln8YEU8FgO/vaujhclrkL4mJ035Su/ZaJif2rN+ mfiQ7bnIAhXmrvkwV2hXe4ZsZ0lNndIrGL7896yUZdvc9SlT0xB2tdVESeBG35I5 C8Ss2ix6AH10ezRTLMInchcY1JP7BFXB5Zm86q4bIrPqHibqlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLHDfwMpwvs/1m5sSa8GL/9r61pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTIzMzg4NDktNmM4Yy0z ODdiLWI4NTQtZGVhMTk0M2QyMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhNE9Q9C5JdOXNebCew/j5d1xzL4FMG/X42TLHqPbXHWoQ1dhkWlp1C muYTX9M16ACmzCYEDF2xlCFnfrWm1DJXlhry/iRDBfVTCJH5O19GZ/skGyglaKC1 EsZEtGKcxfstz5WuZvBIaOkQP0TTH7ro8Lawm9VKT3dTUkpdbs7IFXRPgp+yIVP+ CFS8BiVtEgx4Bna9sPlB+7p3iBCTuny07tIkXSlQvIrZ6E6fSVUTjoIfl+uptwxE A28AIijAWj/EGRK/Sp4FUq+fCGxFXxoNlPrs+z9KM0NVKnaPrRQxU5zSNjjzgari Di1JEj9ZxouAvlr91ViYK+FtR/eZKYQ= -----END CERTIFICATE-----Generated at Sun Apr 6 15:59:46 2025 by rpki-client