$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5dbd720-4313-3c6d-b08b-ab83897c7d2f.roa File: a5dbd720-4313-3c6d-b08b-ab83897c7d2f.roa (raw, json) Hash identifier: eWHky+yRWO2/EyP3yV9vtCQqUDpRUz+2sxdAzt9gYDY= Subject key identifier: CB:2F:DA:91:3F:98:FA:F6:98:14:A6:C7:61:EE:C9:DD:EA:34:49:7D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848318AA756A169EEFCD56B6F98 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5dbd720-4313-3c6d-b08b-ab83897c7d2f.roa Signing time: Fri 13 Dec 2024 14:00:50 +0000 ROA not before: Fri 13 Dec 2024 14:00:50 +0000 ROA not after: Thu 13 Mar 2025 13:00:50 +0000 asID: 22773 IP address blocks: 72.192.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:31:8a:a7:56:a1:69:ee:fc:d5:6b:6f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 13 14:00:50 2024 GMT Not After : Mar 13 13:00:50 2025 GMT Subject: CN=c8bf3889-1a55-4f0f-bfd8-7bbbe4170bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:45:cd:8c:77:b2:12:e3:c8:d2:39:ba:88: 4e:f3:43:4b:55:ed:9a:ce:d7:00:bc:cb:29:e6:0a: 26:3c:45:e1:09:aa:b8:b7:35:75:84:2a:fd:be:d3: 88:98:66:98:f9:17:92:03:20:4a:63:46:f4:13:d1: 00:34:df:f2:f3:bd:b1:2b:07:7b:96:59:a9:35:09: 6a:73:9a:2e:18:1d:5d:c3:52:02:e1:7d:e9:54:01: 2b:01:c0:4c:98:ba:64:08:68:97:50:5e:ed:31:57: ea:96:f2:38:1b:06:e4:ef:70:86:e7:1b:c2:af:47: 4f:86:08:48:47:b5:2f:4e:1d:6c:8d:43:ff:48:be: d8:16:85:2b:ff:7b:26:f6:35:dd:26:0e:cf:de:d9: ec:c5:bc:14:8f:5f:c1:ce:d4:d9:7b:f8:0f:88:6e: ee:ad:fc:f2:3e:68:97:7e:da:d8:91:71:54:85:bf: 4c:f1:3f:3b:1c:4e:2b:bc:cb:25:f0:2a:60:bc:f6: af:47:ea:3c:60:82:ae:64:91:a9:4e:fe:cd:da:b9: 3f:72:3a:91:a6:54:d6:49:c0:3f:c8:91:e0:fb:c5: f0:7f:4b:d4:e6:0f:58:6d:c9:97:5f:79:01:5b:32: 0c:ed:1b:7e:d7:c8:98:25:a0:d1:16:23:e0:09:33: 79:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2F:DA:91:3F:98:FA:F6:98:14:A6:C7:61:EE:C9:DD:EA:34:49:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5dbd720-4313-3c6d-b08b-ab83897c7d2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:92:ec:38:8d:bc:a3:87:a5:b3:d7:03:b2:24:28:8d:5d:2e: 56:cb:71:04:be:3d:7c:36:f1:f5:24:5d:02:ae:5e:91:96:95: 1c:8a:6a:1d:ba:39:9e:b0:42:fd:f1:cb:b1:16:b2:c6:db:42: 3a:ec:87:f0:7a:af:06:2c:77:c2:4e:5e:14:84:e4:1a:7c:eb: 7c:0d:da:3f:95:b1:34:0b:0a:bd:49:6f:78:06:56:c7:0c:78: 29:b0:4f:8f:dc:5f:54:02:6c:83:3b:63:87:e5:f6:6a:a7:ad: a3:9e:c0:ce:be:d4:02:bb:32:29:04:38:60:b5:7e:9d:1c:b4: b4:fa:27:f9:84:5e:1a:24:71:48:8a:88:f3:cf:62:2a:49:ee: a1:88:57:af:dd:10:a1:d5:00:65:17:52:cf:88:12:04:59:b6: a4:76:ab:15:fa:14:4e:c1:3a:c6:74:f3:99:03:8c:be:a5:d1: 97:d6:75:69:0b:9e:fb:81:ef:35:01:32:21:bf:31:e9:8c:0f: 19:91:0e:29:cd:43:9f:e1:c5:49:77:1f:8b:13:72:df:fb:31: b1:9d:3a:55:78:20:ed:37:c3:59:36:39:7e:3d:73:8c:d8:66: ac:3b:32:05:f5:e2:a2:c8:be:79:0a:72:cd:ba:03:d1:50:45: 29:c0:ab:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgxiqdWoWnu/NVrb5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTIxMzE0MDA1MFoXDTI1MDMxMzEzMDA1MFowLzEtMCsGA1UEAxMk YzhiZjM4ODktMWE1NS00ZjBmLWJmZDgtN2JiYmU0MTcwYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurBFzYx3shLjyNI5uohO80NLVe2aztcAvMsp 5gomPEXhCaq4tzV1hCr9vtOImGaY+ReSAyBKY0b0E9EANN/y872xKwd7llmpNQlq c5ouGB1dw1IC4X3pVAErAcBMmLpkCGiXUF7tMVfqlvI4Gwbk73CG5xvCr0dPhghI R7UvTh1sjUP/SL7YFoUr/3sm9jXdJg7P3tnsxbwUj1/BztTZe/gPiG7urfzyPmiX ftrYkXFUhb9M8T87HE4rvMsl8CpgvPavR+o8YIKuZJGpTv7N2rk/cjqRplTWScA/ yJHg+8Xwf0vU5g9YbcmXX3kBWzIM7Rt+18iYJaDRFiPgCTN5nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsv2pE/mPr2mBSmx2Huyd3qNEl9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTVkYmQ3MjAtNDMxMy0z YzZkLWIwOGItYWI4Mzg5N2M3ZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeS7DiNvKOHpbPXA7IkKI1dLlbLcQS+PXw28fUkXQKuXpGWlRyKah26 OZ6wQv3xy7EWssbbQjrsh/B6rwYsd8JOXhSE5Bp863wN2j+VsTQLCr1Jb3gGVscM eCmwT4/cX1QCbIM7Y4fl9mqnraOewM6+1AK7MikEOGC1fp0ctLT6J/mEXhokcUiK iPPPYipJ7qGIV6/dEKHVAGUXUs+IEgRZtqR2qxX6FE7BOsZ085kDjL6l0ZfWdWkL nvuB7zUBMiG/MemMDxmRDinNQ5/hxUl3H4sTct/7MbGdOlV4IO03w1k2OX49c4zY Zqw7MgX14qLIvnkKcs26A9FQRSnAq4Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:27 2025 by rpki-client