$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/235ca51c-7bfe-3920-ab62-847b5e6d9bca.roa File: 235ca51c-7bfe-3920-ab62-847b5e6d9bca.roa (raw, json) Hash identifier: y/dE8fCbDlCESBsGu/4C2qGHpbO3sHSGPHjLsDOAOAc= Subject key identifier: A2:D9:43:7A:B6:EC:D0:BD:21:D5:4C:6C:FB:C4:94:19:A7:A2:0A:1D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848D90BB8A7ED3E86A97A9B9B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/235ca51c-7bfe-3920-ab62-847b5e6d9bca.roa Signing time: Tue 11 Feb 2025 14:00:52 +0000 ROA not before: Tue 11 Feb 2025 14:00:52 +0000 ROA not after: Mon 12 May 2025 13:00:52 +0000 asID: 22773 IP address blocks: 72.192.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:0b:b8:a7:ed:3e:86:a9:7a:9b:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 11 14:00:52 2025 GMT Not After : May 12 13:00:52 2025 GMT Subject: CN=b26cb63e-61f8-4909-87e4-11cbd6af136d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8d:b0:14:16:e9:bd:e9:93:41:7d:bf:48:9e: 19:0a:17:d5:ee:5e:ce:f7:0e:59:65:8d:b3:9f:e8: 16:55:08:c3:af:d0:8c:c0:ad:b0:cb:a2:6c:9a:46: 17:dc:50:ed:2d:b1:6e:87:93:11:50:69:5f:72:68: 85:14:6a:fc:52:f8:96:2a:22:a8:ac:0f:f1:59:9e: bf:ad:0e:b2:9a:93:4f:e3:b1:e3:94:a9:ba:9c:50: bd:75:7a:85:ee:5e:79:d9:24:7a:c2:ac:81:4b:fa: 84:0b:cf:d2:7b:cf:02:fb:35:49:0b:74:5e:1a:e2: f6:84:ab:10:40:21:76:42:36:cd:98:a2:2c:a4:dc: 6f:45:07:a4:c2:30:09:e3:84:b9:4d:f1:c3:a3:a5: aa:39:0f:b7:ef:95:c2:6b:cb:3e:ce:d4:42:91:6a: 0a:e4:2c:be:c2:ec:a1:bd:0b:41:eb:54:08:2d:f0: 40:bd:11:3b:7b:28:e4:3e:11:a8:42:f4:83:6f:2a: 7b:cf:96:24:d3:b2:51:c9:8d:69:1b:6f:a9:e8:4f: f1:d1:2d:04:d6:6a:f6:4a:76:9a:d9:de:47:e2:29: a6:4d:a3:b7:8b:65:23:6a:e3:1e:a4:e9:4f:86:e9: 67:fc:54:a8:e9:ff:67:6c:d1:56:b3:07:09:70:fe: 04:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D9:43:7A:B6:EC:D0:BD:21:D5:4C:6C:FB:C4:94:19:A7:A2:0A:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/235ca51c-7bfe-3920-ab62-847b5e6d9bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b5:74:60:3a:65:53:bb:54:82:dc:96:1b:a6:f6:77:69:b7: 1a:58:4c:05:df:53:36:a7:40:37:9a:85:a3:5f:52:70:54:4c: 2b:4d:66:66:a3:10:3f:bc:17:6e:cf:de:9f:1c:b1:e3:ec:0e: 4a:bd:02:f1:7e:c6:45:31:70:2d:94:9b:98:21:72:a9:34:89: 88:1d:57:d8:83:8d:70:99:49:3d:83:3a:c0:6d:d9:1d:56:42: 9e:5a:34:fc:9c:72:9f:03:9a:61:19:08:cf:1e:5f:6e:60:8e: 0c:4a:1b:ab:91:28:7b:a7:b8:a8:db:36:a9:17:83:d7:d4:0d: da:6d:e2:91:3c:c1:32:df:5c:7c:d4:58:ab:b7:dd:8a:3d:52: 06:cb:72:b1:63:2f:13:5b:5e:10:6b:da:b7:f5:3e:80:b7:7d: d0:6d:ea:47:79:24:4d:2e:19:56:ab:22:87:0d:44:e5:0d:69: 41:36:7f:c5:ba:40:0f:38:e9:a8:50:eb:83:8e:d6:4e:d4:2d: 03:f7:25:98:0e:96:2b:51:20:5c:99:ec:65:75:00:be:18:75: 3f:47:56:3b:07:00:7c:a9:36:d8:5c:ef:5f:e1:30:43:1d:d0: 93:f5:c2:dc:9a:31:ec:bf:63:38:a5:7b:5d:02:a8:43:ef:5e: 3f:e5:a3:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZC7in7T6GqXqbm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIxMTE0MDA1MloXDTI1MDUxMjEzMDA1MlowLzEtMCsGA1UEAxMk YjI2Y2I2M2UtNjFmOC00OTA5LTg3ZTQtMTFjYmQ2YWYxMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu42wFBbpvemTQX2/SJ4ZChfV7l7O9w5ZZY2z n+gWVQjDr9CMwK2wy6JsmkYX3FDtLbFuh5MRUGlfcmiFFGr8UviWKiKorA/xWZ6/ rQ6ympNP47HjlKm6nFC9dXqF7l552SR6wqyBS/qEC8/Se88C+zVJC3ReGuL2hKsQ QCF2QjbNmKIspNxvRQekwjAJ44S5TfHDo6WqOQ+375XCa8s+ztRCkWoK5Cy+wuyh vQtB61QILfBAvRE7eyjkPhGoQvSDbyp7z5Yk07JRyY1pG2+p6E/x0S0E1mr2Snaa 2d5H4immTaO3i2UjauMepOlPhuln/FSo6f9nbNFWswcJcP4EWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLZQ3q27NC9IdVMbPvElBmnogodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjM1Y2E1MWMtN2JmZS0z OTIwLWFiNjItODQ3YjVlNmQ5YmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSMDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW1dGA6ZVO7VILclhum9ndptxpYTAXfUzanQDeahaNfUnBUTCtNZmaj ED+8F27P3p8csePsDkq9AvF+xkUxcC2Um5ghcqk0iYgdV9iDjXCZST2DOsBt2R1W Qp5aNPyccp8DmmEZCM8eX25gjgxKG6uRKHunuKjbNqkXg9fUDdpt4pE8wTLfXHzU WKu33Yo9UgbLcrFjLxNbXhBr2rf1PoC3fdBt6kd5JE0uGVarIocNROUNaUE2f8W6 QA846ahQ64OO1k7ULQP3JZgOlitRIFyZ7GV1AL4YdT9HVjsHAHypNthc71/hMEMd 0JP1wtyaMey/Yzile10CqEPvXj/lo7s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:21 2025 by rpki-client