$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e3c6adb-7253-35c4-8c44-e85290880dba.roa File: 5e3c6adb-7253-35c4-8c44-e85290880dba.roa (raw, json) Hash identifier: 63BL7qW/ok3ymDUU3LCFu32lPdq0s4I1Xe3/HIAF114= Subject key identifier: 88:FF:B5:40:27:9A:97:C2:87:42:5D:A2:4B:48:AE:E8:64:BB:FD:7A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848DBD674C2770F4898A19BD380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e3c6adb-7253-35c4-8c44-e85290880dba.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 22773 IP address blocks: 72.192.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:74:c2:77:0f:48:98:a1:9b:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=b79de31e-c9f2-484d-b788-46d94c9d59ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:31:83:be:cc:02:cc:80:93:b0:6c:40:01: 3b:6d:cf:a4:cb:91:86:a0:33:ce:9e:b8:0b:c2:0f: fd:69:28:9d:bc:94:14:8c:71:75:c7:99:38:0d:0a: 67:8c:78:7a:ce:f8:11:bf:55:10:ef:cf:a5:b7:f7: ed:98:b9:9f:00:e8:38:9e:a7:9f:e9:72:62:79:85: de:2c:10:8e:58:00:ff:cf:5c:6e:40:82:fb:72:89: d9:16:a5:4b:2d:c7:57:d6:06:54:a4:a2:06:0a:83: cb:0c:8f:44:bf:3c:b7:4b:c4:a6:a2:4e:f5:b5:bf: 12:cf:5c:ee:88:e4:66:af:49:9d:4a:54:99:fc:52: 9f:f2:b7:e7:bb:ca:33:8b:a9:14:c3:8e:36:ec:8f: b3:14:e9:6d:56:cb:5f:b9:9c:d7:cf:cb:8c:cf:b2: de:00:03:c6:00:2e:a7:9d:d2:b4:c3:c8:a0:38:e4: b4:73:3a:59:5c:9f:ff:5b:b6:33:96:c9:f9:eb:60: 0c:70:1f:aa:c4:2c:6d:45:71:fa:bd:42:ff:40:d4: 85:f8:15:2a:24:8e:cb:08:ff:2f:d5:3a:04:cd:43: 01:e0:cb:82:49:2e:8f:7d:d5:d4:52:50:16:75:8b: 74:c2:2c:cd:ed:39:db:26:3b:8d:c8:4e:7c:42:9d: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FF:B5:40:27:9A:97:C2:87:42:5D:A2:4B:48:AE:E8:64:BB:FD:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e3c6adb-7253-35c4-8c44-e85290880dba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d7:db:33:7a:b5:e8:0f:54:25:55:d5:c6:77:cd:ff:ac:64: f7:1b:69:23:a4:1e:0c:46:33:f7:d1:2b:82:5f:80:47:34:cb: de:9f:43:70:ca:33:00:f6:f1:9d:b2:25:90:bb:81:52:cb:e8: a6:b2:39:55:2b:65:31:b6:c0:cb:17:f4:1f:b8:9d:da:ad:fc: 01:61:5b:49:b6:7f:1c:2a:37:81:90:3e:d0:d1:43:4a:25:db: 0f:69:83:8c:4b:e5:22:8a:87:2e:ee:e1:63:88:ac:c8:f3:71: 2f:25:85:d5:e1:86:4e:42:43:b8:0f:31:41:e3:a7:d1:fe:f3: 20:4b:e6:8c:40:44:82:bb:92:76:ba:04:e6:83:83:ba:70:8d: b8:19:00:5a:98:6a:7a:22:01:02:13:41:09:a5:7b:ef:ad:fd: 2d:8e:91:13:0b:b1:02:73:e2:bf:60:9e:76:59:8c:5d:49:59: 81:6b:25:af:3d:09:47:14:3b:23:52:7f:69:c3:2d:b4:ad:6e: 9b:dd:b1:2a:97:5c:4b:8a:d4:fb:83:7e:16:a2:5e:34:36:3e: f5:4a:b4:1a:95:16:ee:fd:a5:c3:f1:7b:80:f2:cb:40:cd:68: 4d:2c:de:84:3e:37:1f:da:15:ef:33:8f:3c:07:ee:d8:d3:3e: 47:d9:8f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nTCdw9ImKGb04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk Yjc5ZGUzMWUtYzlmMi00ODRkLWI3ODgtNDZkOTRjOWQ1OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Exg77MAsyAk7BsQAE7bc+ky5GGoDPOnrgL wg/9aSidvJQUjHF1x5k4DQpnjHh6zvgRv1UQ78+lt/ftmLmfAOg4nqef6XJieYXe LBCOWAD/z1xuQIL7conZFqVLLcdX1gZUpKIGCoPLDI9Evzy3S8Smok71tb8Sz1zu iORmr0mdSlSZ/FKf8rfnu8ozi6kUw4427I+zFOltVstfuZzXz8uMz7LeAAPGAC6n ndK0w8igOOS0czpZXJ//W7Yzlsn562AMcB+qxCxtRXH6vUL/QNSF+BUqJI7LCP8v 1ToEzUMB4MuCSS6PfdXUUlAWdYt0wizN7TnbJjuNyE58Qp28ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj/tUAnmpfCh0JdoktIruhku/16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWUzYzZhZGItNzI1My0z NWM0LThjNDQtZTg1MjkwODgwZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLX2zN6tegPVCVV1cZ3zf+sZPcbaSOkHgxGM/fRK4JfgEc0y96fQ3DK MwD28Z2yJZC7gVLL6KayOVUrZTG2wMsX9B+4ndqt/AFhW0m2fxwqN4GQPtDRQ0ol 2w9pg4xL5SKKhy7u4WOIrMjzcS8lhdXhhk5CQ7gPMUHjp9H+8yBL5oxARIK7kna6 BOaDg7pwjbgZAFqYanoiAQITQQmle++t/S2OkRMLsQJz4r9gnnZZjF1JWYFrJa89 CUcUOyNSf2nDLbStbpvdsSqXXEuK1PuDfhaiXjQ2PvVKtBqVFu79pcPxe4Dyy0DN aE0s3oQ+Nx/aFe8zjzwH7tjTPkfZj2U= -----END CERTIFICATE-----Generated at Fri Mar 14 09:02:38 2025 by rpki-client