$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0badf70-4d82-368a-ada1-53f529a3b33b.roa File: a0badf70-4d82-368a-ada1-53f529a3b33b.roa (raw, json) Hash identifier: KbxyuTrSmlOiWsoJvu9DVoK904P8DnNYZOPpSWhQiNw= Subject key identifier: 88:6E:BC:70:C5:69:C1:C2:78:D7:D0:6E:65:C4:F3:28:18:91:71:9B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB18060235675F8F4B57D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0badf70-4d82-368a-ada1-53f529a3b33b.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 72.212.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:80:60:23:56:75:f8:f4:b5:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=d939e331-376a-4067-9747-79f7811979c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:a6:a8:87:9c:ca:ba:06:c0:ee:d0:f4:eb: b1:24:6a:93:57:91:c6:fb:9b:47:4a:94:2b:d9:ad: 3b:d6:0b:95:9c:91:e4:23:95:72:f7:d2:11:2e:26: 20:37:6e:43:33:53:80:e7:36:32:5f:f5:53:2f:16: 7f:bd:48:65:0d:c8:cc:6f:e5:ea:f1:a7:5e:c9:5d: 57:10:0d:22:4e:88:7a:88:8c:94:bb:9a:49:cd:5f: e6:19:18:12:ca:96:69:bb:eb:56:fa:a9:e9:3f:4a: b6:ee:9f:17:6b:5f:c8:5f:29:ff:4b:cf:d9:6d:16: 26:35:46:0c:17:0b:05:54:c9:da:ee:6c:c2:2f:f8: 61:13:78:63:a7:6d:b1:4a:cd:1e:89:4e:68:11:81: cc:08:e4:a5:c9:7d:9f:db:09:c4:7a:39:e9:67:9d: 8b:d3:fe:35:e6:2c:b1:24:57:2f:45:e0:b8:d6:0e: f7:be:9c:1e:45:bd:25:dc:83:d7:e4:88:98:f8:e7: 91:3b:92:06:0e:56:0b:50:1a:1d:4a:35:ef:cd:f5: df:c4:7c:0d:1a:af:3d:73:ca:ee:df:78:20:99:de: 35:19:a6:56:ca:76:14:07:be:60:a3:82:14:e6:88: f4:e4:82:85:a0:75:6d:32:43:ee:73:35:ad:fa:2f: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6E:BC:70:C5:69:C1:C2:78:D7:D0:6E:65:C4:F3:28:18:91:71:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0badf70-4d82-368a-ada1-53f529a3b33b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:14:4b:6e:58:4e:28:4f:c5:f0:d6:27:e0:e2:01:83:30:13: 90:ca:38:de:0a:2c:8e:13:7d:b2:29:32:6a:3e:62:e9:52:f6: d5:ed:9a:8d:a0:9f:ee:c5:08:cc:e2:cc:6d:cb:cf:c7:6c:da: 7e:b5:0c:c3:7a:c9:e5:18:9c:6c:b7:a8:96:f6:1c:2d:b2:5e: 73:59:fa:08:19:25:aa:21:19:a9:f3:70:0c:17:0e:f2:43:c0: 61:bf:c8:13:54:c1:83:1d:e8:88:d7:e1:ff:4a:8a:22:e5:de: ef:c7:53:32:70:76:d6:47:c8:4f:c4:94:75:92:d5:08:e0:18: 7a:18:30:81:50:95:ff:69:c8:69:1b:26:92:48:13:03:97:4c: 99:45:55:c9:19:7c:9b:4d:26:5f:b4:5e:dd:c0:1b:20:01:7c: cd:03:b5:54:e9:30:21:f9:c4:d9:67:72:d2:65:d4:c4:c5:f2: 00:ed:ef:2a:94:7d:5d:df:30:e2:d8:6e:ea:5f:e5:b5:81:11: 41:44:7b:62:8d:84:c8:5f:d4:f3:0d:e2:56:30:23:2c:54:a3: a3:52:de:ad:29:be:5a:e7:a5:64:5e:65:80:42:68:a8:91:2e: 52:f0:8d:ba:75:76:16:df:13:cb:29:b7:9d:43:0e:b0:48:fb: aa:4c:aa:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsYBgI1Z1+PS1fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZDkzOWUzMzEtMzc2YS00MDY3LTk3NDctNzlmNzgxMTk3OWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDimqIecyroGwO7Q9OuxJGqTV5HG+5tHSpQr 2a071guVnJHkI5Vy99IRLiYgN25DM1OA5zYyX/VTLxZ/vUhlDcjMb+Xq8adeyV1X EA0iToh6iIyUu5pJzV/mGRgSypZpu+tW+qnpP0q27p8Xa1/IXyn/S8/ZbRYmNUYM FwsFVMna7mzCL/hhE3hjp22xSs0eiU5oEYHMCOSlyX2f2wnEejnpZ52L0/415iyx JFcvReC41g73vpweRb0l3IPX5IiY+OeRO5IGDlYLUBodSjXvzfXfxHwNGq89c8ru 33ggmd41GaZWynYUB75go4IU5oj05IKFoHVtMkPuczWt+i9kowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhuvHDFacHCeNfQbmXE8ygYkXGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTBiYWRmNzAtNGQ4Mi0z NjhhLWFkYTEtNTNmNTI5YTNiMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNS5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcUS25YTihPxfDWJ+DiAYMwE5DKON4KLI4TfbIpMmo+YulS9tXtmo2g n+7FCMzizG3Lz8ds2n61DMN6yeUYnGy3qJb2HC2yXnNZ+ggZJaohGanzcAwXDvJD wGG/yBNUwYMd6IjX4f9KiiLl3u/HUzJwdtZHyE/ElHWS1QjgGHoYMIFQlf9pyGkb JpJIEwOXTJlFVckZfJtNJl+0Xt3AGyABfM0DtVTpMCH5xNlnctJl1MTF8gDt7yqU fV3fMOLYbupf5bWBEUFEe2KNhMhf1PMN4lYwIyxUo6NS3q0pvlrnpWReZYBCaKiR LlLwjbp1dhbfE8spt51DDrBI+6pMquw= -----END CERTIFICATE-----Generated at Sun Apr 6 17:48:09 2025 by rpki-client