$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98581b07-31ae-380b-9152-29fa36e9ac7c.roa File: 98581b07-31ae-380b-9152-29fa36e9ac7c.roa (raw, json) Hash identifier: q5rgBVTj3atVp+ybSng2kw2SIN5xIsPIMtIdzVZosFU= Subject key identifier: D1:1C:D3:32:DB:07:51:CE:62:D6:60:6A:DF:DC:D3:9C:7D:8B:DA:56 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB17916BEFF9EABFBEE7F40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98581b07-31ae-380b-9152-29fa36e9ac7c.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 72.219.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:79:16:be:ff:9e:ab:fb:ee:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=6acc3018-e8c2-4084-8966-ccbf824a03e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:66:69:bd:69:e3:34:9f:04:70:a1:f0:86: e4:3e:47:80:46:b5:87:e5:87:d2:57:66:40:c7:91: c4:d7:b3:59:ae:1c:cb:83:97:cb:0d:1a:4e:e1:58: fa:8b:3b:6d:58:54:13:81:b2:3b:ee:29:78:8e:0a: bc:47:3c:ed:de:8e:2c:fd:b9:75:cf:24:61:98:d0: 84:9d:99:f7:fd:ed:b3:d2:c8:0f:8a:4a:17:e3:96: 64:1c:b7:38:49:c9:2b:84:b8:c2:38:30:c1:00:b5: 4d:22:e7:44:cb:71:77:7e:8c:c7:4f:76:71:b7:ed: 6a:87:cf:18:53:46:a1:0d:ae:50:db:c5:b6:bf:94: e9:38:70:77:e8:b8:ad:c4:c8:a5:40:1f:c9:ab:d1: 0b:ab:1e:d6:2b:53:d3:08:93:8b:42:10:77:f5:1b: 06:b8:d5:c6:6c:96:17:e3:4f:3c:f4:d3:ea:a3:5e: 3d:ec:36:1f:20:aa:7a:cb:69:5d:c6:5a:e4:8e:2b: b6:96:de:16:70:07:5f:f2:1e:3a:00:38:e5:89:45: 30:bf:a9:8e:5c:9c:36:b3:3e:b9:f8:f5:0f:f3:e2: 63:d2:cc:ef:11:9c:94:02:77:8b:d1:81:59:a3:ba: 70:65:95:c2:1d:0e:ce:8a:9b:23:54:63:eb:6a:bc: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1C:D3:32:DB:07:51:CE:62:D6:60:6A:DF:DC:D3:9C:7D:8B:DA:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98581b07-31ae-380b-9152-29fa36e9ac7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1e:27:cf:68:94:b0:d1:c7:e8:99:f0:5a:a6:6e:06:28:a8: 9e:23:51:ab:21:6d:38:4a:24:35:40:36:d5:07:66:22:40:3a: 5d:30:85:56:85:8c:8d:44:c7:4b:a4:09:47:d2:09:ff:c1:50: df:f9:e1:50:9a:8a:32:1f:e4:5a:f9:d6:b8:0b:8e:6a:72:b3: 08:14:1d:16:64:de:53:98:0f:05:25:bc:62:bc:24:c9:fd:78: 83:97:82:51:4b:7d:65:d1:c8:98:1b:97:2c:29:10:a7:94:56: 24:8b:e6:92:d4:4d:02:c0:c4:c6:e3:6b:c8:b2:b2:4d:49:22: d7:2c:42:ea:23:c8:d9:b9:01:36:7e:fb:b2:17:88:3d:64:f6: 2a:a7:1b:92:41:e6:5b:1b:7e:79:da:84:2b:fa:c9:a7:17:3f: 4a:19:4f:d0:56:72:03:15:64:74:70:1e:26:73:3f:7e:3d:4f: 57:ae:5b:3c:08:48:e8:9a:38:bb:85:d6:31:f4:df:62:02:33: b6:df:86:79:c5:0b:4a:77:d6:55:7b:07:67:5f:a0:2c:b6:f4: e0:b3:59:69:c2:83:3a:82:b3:ea:d4:7f:2e:2c:37:5a:c5:ea: f3:77:a8:fd:97:93:64:66:f6:03:7a:61:8f:43:33:6c:ba:69: 2c:5f:85:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXkWvv+eq/vuf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk NmFjYzMwMTgtZThjMi00MDg0LTg5NjYtY2NiZjgyNGEwM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+9mab1p4zSfBHCh8IbkPkeARrWH5YfSV2ZA x5HE17NZrhzLg5fLDRpO4Vj6izttWFQTgbI77il4jgq8Rzzt3o4s/bl1zyRhmNCE nZn3/e2z0sgPikoX45ZkHLc4SckrhLjCODDBALVNIudEy3F3fozHT3Zxt+1qh88Y U0ahDa5Q28W2v5TpOHB36LitxMilQB/Jq9ELqx7WK1PTCJOLQhB39RsGuNXGbJYX 40889NPqo1497DYfIKp6y2ldxlrkjiu2lt4WcAdf8h46ADjliUUwv6mOXJw2sz65 +PUP8+Jj0szvEZyUAneL0YFZo7pwZZXCHQ7OipsjVGPrarxunwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEc0zLbB1HOYtZgat/c05x9i9pWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTg1ODFiMDctMzFhZS0z ODBiLTkxNTItMjlmYTM2ZTlhYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEeJ89olLDRx+iZ8FqmbgYoqJ4jUashbThKJDVANtUHZiJAOl0whVaF jI1Ex0ukCUfSCf/BUN/54VCaijIf5Fr51rgLjmpyswgUHRZk3lOYDwUlvGK8JMn9 eIOXglFLfWXRyJgblywpEKeUViSL5pLUTQLAxMbja8iysk1JItcsQuojyNm5ATZ+ +7IXiD1k9iqnG5JB5lsbfnnahCv6yacXP0oZT9BWcgMVZHRwHiZzP349T1euWzwI SOiaOLuF1jH032ICM7bfhnnFC0p31lV7B2dfoCy29OCzWWnCgzqCs+rUfy4sN1rF 6vN3qP2Xk2Rm9gN6YY9DM2y6aSxfhYk= -----END CERTIFICATE-----Generated at Fri Mar 14 13:33:52 2025 by rpki-client