$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e6716e9-9e3c-3047-85b4-14a71d60b8e8.roa File: 7e6716e9-9e3c-3047-85b4-14a71d60b8e8.roa (raw, json) Hash identifier: s88m90aB8xWKnADjSsCqTin9tSKGntvSqh2+bDm4SUQ= Subject key identifier: 12:2B:85:49:33:A1:83:19:C7:1E:D1:3F:D6:A8:25:F0:A0:6C:7C:77 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB178BD4C8A6D0359A2D340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e6716e9-9e3c-3047-85b4-14a71d60b8e8.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 72.214.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:78:bd:4c:8a:6d:03:59:a2:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=3ff3d6ca-9a31-4265-8f6d-7953e0b2d3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:96:70:99:5f:ed:4b:95:15:13:74:2a:b4:11: 2f:06:0c:14:94:b4:4b:41:e9:de:b0:64:64:9f:d6: 14:54:c8:2e:76:9d:6d:cf:9d:1d:b3:c6:9d:bf:0f: d8:61:9f:65:74:fb:3f:16:35:e6:dc:0a:88:12:b8: 14:88:05:9f:2d:ed:c4:e0:28:89:62:26:ee:99:3f: 3a:70:59:bf:26:fb:bb:28:71:66:67:c5:5e:ac:54: f1:3e:49:53:58:e4:ea:f3:7a:f7:49:ae:92:ee:a6: c1:75:69:af:2e:4e:55:e3:69:aa:72:b5:d2:5d:4f: 77:c8:be:50:06:fd:e0:b2:9e:3a:31:60:04:ce:cb: 13:60:5d:c0:62:26:b3:ca:b5:ce:58:38:43:71:d0: 9e:7c:da:84:4c:c2:d3:db:66:92:5f:96:ae:3f:23: 9b:2f:3f:38:13:57:4e:35:75:46:a1:8f:fd:70:3a: d2:86:af:82:ea:35:cf:dd:90:41:ea:db:c0:8c:58: aa:2b:21:05:57:26:2b:6c:d8:06:a2:1c:15:da:84: 6d:95:98:b5:4d:d3:b9:26:80:c8:4c:3e:12:15:80: 1b:94:15:a3:7c:58:39:58:a8:5e:cb:6c:16:65:45: 82:3e:e4:85:ec:0d:20:d0:4a:0a:a5:ae:d9:96:a0: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2B:85:49:33:A1:83:19:C7:1E:D1:3F:D6:A8:25:F0:A0:6C:7C:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e6716e9-9e3c-3047-85b4-14a71d60b8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.214.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a6:1d:8d:13:be:62:a7:fc:6f:85:55:c0:06:a2:22:bc:44: 6d:90:fb:9b:0b:0d:9e:03:df:5c:7d:eb:e3:d5:8f:6c:96:56: 65:40:9c:4a:ee:1e:07:56:8a:df:8a:74:5a:d3:30:27:5f:ff: 4f:53:4c:8e:23:10:46:c5:f1:8c:7f:69:33:8b:c9:0f:61:54: b2:22:5d:1d:9d:35:1d:7d:55:a0:0c:ad:0b:ac:c8:50:4c:87: 48:7c:f3:82:2e:95:95:53:4c:e9:43:52:1e:70:5f:d4:eb:09: ee:04:df:f7:bf:6f:76:03:ce:18:32:29:a3:cc:12:4f:75:53: ee:e1:d4:ba:08:a5:52:6d:f1:0c:5f:c1:a7:0a:f2:c7:fe:0e: 11:d5:cc:75:09:e8:ca:80:94:51:c7:8a:81:84:d9:4e:56:2e: ff:05:81:32:37:25:fa:d5:94:f7:84:89:06:62:39:cb:19:29: 5b:cc:01:e7:1c:24:58:bb:db:28:9f:e2:2a:32:9f:af:46:b8: 08:68:3d:ee:ea:0f:69:15:b3:db:f1:a2:26:e7:59:fc:23:47: d6:8c:d5:9b:b6:87:55:b8:34:af:f7:75:88:f0:39:c5:28:1b: 3c:c9:ee:19:6a:d0:1f:73:a2:39:20:58:a6:cb:4e:1e:f0:20: 9e:7f:ec:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXi9TIptA1mi00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk M2ZmM2Q2Y2EtOWEzMS00MjY1LThmNmQtNzk1M2UwYjJkM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpZwmV/tS5UVE3QqtBEvBgwUlLRLQenesGRk n9YUVMgudp1tz50ds8advw/YYZ9ldPs/FjXm3AqIErgUiAWfLe3E4CiJYibumT86 cFm/Jvu7KHFmZ8VerFTxPklTWOTq83r3Sa6S7qbBdWmvLk5V42mqcrXSXU93yL5Q Bv3gsp46MWAEzssTYF3AYiazyrXOWDhDcdCefNqETMLT22aSX5auPyObLz84E1dO NXVGoY/9cDrShq+C6jXP3ZBB6tvAjFiqKyEFVyYrbNgGohwV2oRtlZi1TdO5JoDI TD4SFYAblBWjfFg5WKhey2wWZUWCPuSF7A0g0EoKpa7ZlqB73QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIrhUkzoYMZxx7RP9aoJfCgbHx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2U2NzE2ZTktOWUzYy0z MDQ3LTg1YjQtMTRhNzFkNjBiOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNaJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGemHY0TvmKn/G+FVcAGoiK8RG2Q+5sLDZ4D31x96+PVj2yWVmVAnEru HgdWit+KdFrTMCdf/09TTI4jEEbF8Yx/aTOLyQ9hVLIiXR2dNR19VaAMrQusyFBM h0h884IulZVTTOlDUh5wX9TrCe4E3/e/b3YDzhgyKaPMEk91U+7h1LoIpVJt8Qxf wacK8sf+DhHVzHUJ6MqAlFHHioGE2U5WLv8FgTI3JfrVlPeEiQZiOcsZKVvMAecc JFi72yif4ioyn69GuAhoPe7qD2kVs9vxoibnWfwjR9aM1Zu2h1W4NK/3dYjwOcUo GzzJ7hlq0B9zojkgWKbLTh7wIJ5/7E0= -----END CERTIFICATE-----Generated at Sun Apr 6 17:54:24 2025 by rpki-client