$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d860fb2-3bd9-388c-9d11-e0109ebd148b.roa File: 8d860fb2-3bd9-388c-9d11-e0109ebd148b.roa (raw, json) Hash identifier: fV2OVP3GwjarYTNNMVexef9DfSkqhdOApMQdguVbTRY= Subject key identifier: 4D:56:77:F9:47:2C:CD:EB:D2:19:82:14:88:2E:B5:EC:63:B4:6D:82 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848A830B6420732DEB264B482C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d860fb2-3bd9-388c-9d11-e0109ebd148b.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 22773 IP address blocks: 72.214.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b6:42:07:32:de:b2:64:b4:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=a1f55c9a-aa11-4232-a8b3-7681ae466c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:39:48:34:e0:31:35:c3:59:26:6c:76:aa:82: 35:e1:ac:71:71:3e:51:4d:80:9d:6c:66:ad:7c:8e: ed:a1:ac:42:1b:09:21:bc:49:8e:e5:53:e9:a8:67: 20:47:c7:90:8e:1e:9f:62:e2:f6:8c:da:77:30:47: cc:8c:9a:6f:8e:5b:db:83:1f:88:06:b9:b6:58:84: 87:a6:bf:3d:99:d9:b4:24:e5:e6:d5:b0:71:36:82: 08:3b:15:51:72:fb:27:dd:67:6e:0b:1f:38:78:96: 1e:48:18:00:3d:21:d9:65:24:4b:5c:0c:f3:e0:fe: 42:fe:ed:f0:a1:01:df:71:d7:ad:f2:ad:c5:94:a5: 86:bb:50:ef:db:44:12:e8:0c:d2:5a:40:1d:17:b1: 69:d0:d9:28:df:3b:15:bb:d3:64:b0:a6:5a:fd:79: 33:43:b6:69:6e:28:3f:f2:e9:c2:ac:a5:cb:11:a2: c7:5f:e0:8d:85:12:b3:63:98:ac:17:7c:e7:35:2b: 8f:78:2a:de:36:45:6d:74:48:0f:aa:e7:9e:fc:e7: ba:ef:c9:de:a5:35:14:23:5e:b9:67:f6:52:a2:b4: d2:f6:78:d7:c2:79:55:54:ea:97:3e:d1:af:ff:a8: 55:81:e9:bd:fb:4a:7e:a2:e0:d8:1a:4b:0d:e9:7d: 1e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:56:77:F9:47:2C:CD:EB:D2:19:82:14:88:2E:B5:EC:63:B4:6D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d860fb2-3bd9-388c-9d11-e0109ebd148b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.214.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ef:88:64:72:fb:03:a1:06:b2:c7:5b:38:b0:37:81:5c:06: d9:5d:c7:b2:47:92:74:33:17:10:12:02:1a:5f:5a:62:f8:bf: 85:98:1b:90:17:b3:db:7c:b8:95:91:8c:05:13:30:64:f4:72: 7c:28:79:84:f6:cd:d0:39:06:64:02:5a:cd:39:e8:e2:3d:18: 81:bc:a2:78:70:e0:fd:1d:1e:72:6e:e0:83:8d:69:15:22:d5: 7d:5a:b4:f0:1d:96:7d:ba:63:da:fa:58:bf:c3:58:9c:ad:e1: 3c:0d:a2:d9:6d:c7:93:ff:75:da:e4:49:73:bf:8d:31:09:2d: f5:a0:01:3b:2d:05:53:73:0f:9b:64:40:ee:98:f6:32:11:f6: fe:56:9a:3b:70:78:53:6a:91:97:37:1b:3f:70:d8:7f:95:35: c2:6b:80:5f:30:ed:ba:b6:ba:87:46:ab:01:66:58:21:99:c7: 8d:c1:b4:81:17:8a:25:56:92:50:26:bc:4a:bf:12:48:3d:3e: 58:ac:5a:ed:07:9c:b1:4e:84:f9:d3:c0:6b:03:38:1f:8e:86: b2:e1:30:6b:8a:31:9e:3e:2f:67:2f:a7:9c:b6:e9:8d:d0:de: 4c:7e:b8:92:d3:57:b3:7f:5e:8a:87:1f:40:42:02:79:29:06: bc:5b:8d:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLZCBzLesmS0gsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YTFmNTVjOWEtYWExMS00MjMyLWE4YjMtNzY4MWFlNDY2YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzlINOAxNcNZJmx2qoI14axxcT5RTYCdbGat fI7toaxCGwkhvEmO5VPpqGcgR8eQjh6fYuL2jNp3MEfMjJpvjlvbgx+IBrm2WISH pr89mdm0JOXm1bBxNoIIOxVRcvsn3WduCx84eJYeSBgAPSHZZSRLXAzz4P5C/u3w oQHfcdet8q3FlKWGu1Dv20QS6AzSWkAdF7Fp0Nko3zsVu9NksKZa/XkzQ7Zpbig/ 8unCrKXLEaLHX+CNhRKzY5isF3znNSuPeCreNkVtdEgPquee/Oe678nepTUUI165 Z/ZSorTS9njXwnlVVOqXPtGv/6hVgem9+0p+ouDYGksN6X0eXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1Wd/lHLM3r0hmCFIgutexjtG2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGQ4NjBmYjItM2JkOS0z ODhjLTlkMTEtZTAxMDllYmQxNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDviGRy+wOhBrLHWziwN4FcBtldx7JHknQzFxASAhpfWmL4v4WYG5AX s9t8uJWRjAUTMGT0cnwoeYT2zdA5BmQCWs056OI9GIG8onhw4P0dHnJu4IONaRUi 1X1atPAdln26Y9r6WL/DWJyt4TwNotltx5P/ddrkSXO/jTEJLfWgATstBVNzD5tk QO6Y9jIR9v5WmjtweFNqkZc3Gz9w2H+VNcJrgF8w7bq2uodGqwFmWCGZx43BtIEX iiVWklAmvEq/Ekg9PlisWu0HnLFOhPnTwGsDOB+OhrLhMGuKMZ4+L2cvp5y26Y3Q 3kx+uJLTV7N/XoqHH0BCAnkpBrxbjUY= -----END CERTIFICATE-----Generated at Sun Apr 6 15:55:32 2025 by rpki-client