$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7d5bfdf-0910-368a-9666-8def73ec61e2.roa File: a7d5bfdf-0910-368a-9666-8def73ec61e2.roa (raw, json) Hash identifier: fl1aGmawvTFsfP8Iqivaunb/iZ2xL284nNZQMeivmTQ= Subject key identifier: 24:D4:16:48:22:A1:57:06:8F:B2:8D:11:D6:91:A9:5A:78:48:3A:8F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB179303EA065EF90001580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7d5bfdf-0910-368a-9666-8def73ec61e2.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 72.219.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:79:30:3e:a0:65:ef:90:00:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=5c475efa-978c-4308-95f0-2f3ab09025a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:af:1a:26:37:7f:dd:44:81:5d:c7:2a:92:59: dd:2c:24:5e:21:94:49:5b:f3:46:5c:ff:e0:ae:c9: 20:91:2e:9c:11:ea:8a:71:98:38:fc:14:89:83:79: c9:6d:53:bf:19:0d:27:49:2d:7a:21:83:1f:3a:20: dd:40:c7:ff:66:83:4a:e4:db:ad:bb:87:d9:4c:e9: 3f:c9:d3:32:da:41:cf:81:02:86:9f:b6:16:8c:38: 6b:81:3b:22:4a:e8:f0:01:fa:05:48:cb:a3:c5:fe: b4:ef:c4:6f:81:cb:ac:e5:59:5a:a8:a9:72:57:97: 5c:c0:a1:52:9b:35:3c:69:f0:8a:7a:3b:5f:80:e4: 46:69:67:f6:46:a0:e0:6a:89:13:81:52:7f:7c:ca: 7e:ce:e3:20:93:19:9a:d0:95:15:96:5d:a7:a3:de: c3:a6:30:d3:3e:db:8a:e0:c6:57:8b:34:d5:06:ef: 91:35:ea:dc:33:a7:fe:15:d8:91:ef:56:9f:11:be: 4e:1f:65:08:25:07:d0:da:f2:bc:97:c0:e4:0b:f7: ed:3e:56:92:de:82:53:07:27:65:74:f7:47:12:13: 62:3f:00:e8:dd:02:3f:c6:60:b5:e8:3d:ad:88:04: c0:fd:76:08:53:f2:59:1d:94:8b:1a:88:68:eb:b1: 0b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D4:16:48:22:A1:57:06:8F:B2:8D:11:D6:91:A9:5A:78:48:3A:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7d5bfdf-0910-368a-9666-8def73ec61e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d8:dd:d6:25:9f:8f:4d:0e:81:d2:13:e0:b8:fc:b8:6a:fb: d7:95:bf:4c:d1:5a:34:aa:7d:42:be:ec:47:fe:c5:4b:ca:24: 29:b4:c6:55:47:00:75:a2:f3:ae:46:40:26:ad:2c:c2:f7:0d: 72:7d:36:0b:1d:fc:29:c7:2f:64:c2:f5:32:1f:88:cb:78:46: 83:2e:ee:9b:c2:dc:f7:26:6c:e2:c7:fc:5d:2a:cb:6c:88:5c: 29:e4:38:7e:da:e2:52:1a:5f:2e:d2:e2:ba:a0:cb:15:54:89: 60:3f:ce:9a:c3:ea:98:ca:2d:ae:4b:c1:05:38:48:b8:d5:f9: e7:d2:4c:8d:0f:00:fc:b8:df:af:90:fa:08:a8:40:54:97:78: 23:1d:c7:22:80:46:e7:f4:8a:96:05:b6:1d:06:73:31:0b:d2: 6d:ca:49:70:0b:28:92:9c:eb:99:5e:e2:2f:fe:0d:8b:63:12: 56:11:15:2b:10:54:31:43:47:a1:b9:bb:f6:3f:17:a9:ff:85: f3:df:25:20:8d:46:80:6d:3c:e8:50:bf:99:7f:33:e8:b8:3b: 9a:06:e2:17:b2:5a:04:96:8c:94:13:8c:68:7e:10:4a:db:f8: 56:b2:a5:9f:42:ba:ad:af:c6:10:80:55:be:1d:2b:98:79:62: d6:65:17:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXkwPqBl75AAFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk NWM0NzVlZmEtOTc4Yy00MzA4LTk1ZjAtMmYzYWIwOTAyNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK8aJjd/3USBXccqklndLCReIZRJW/NGXP/g rskgkS6cEeqKcZg4/BSJg3nJbVO/GQ0nSS16IYMfOiDdQMf/ZoNK5Nutu4fZTOk/ ydMy2kHPgQKGn7YWjDhrgTsiSujwAfoFSMujxf6078Rvgcus5VlaqKlyV5dcwKFS mzU8afCKejtfgORGaWf2RqDgaokTgVJ/fMp+zuMgkxma0JUVll2no97DpjDTPtuK 4MZXizTVBu+RNercM6f+FdiR71afEb5OH2UIJQfQ2vK8l8DkC/ftPlaS3oJTBydl dPdHEhNiPwDo3QI/xmC16D2tiATA/XYIU/JZHZSLGoho67ELIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTUFkgioVcGj7KNEdaRqVp4SDqPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTdkNWJmZGYtMDkxMC0z NjhhLTk2NjYtOGRlZjczZWM2MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjY3dYln49NDoHSE+C4/Lhq+9eVv0zRWjSqfUK+7Ef+xUvKJCm0xlVH AHWi865GQCatLML3DXJ9Ngsd/CnHL2TC9TIfiMt4RoMu7pvC3PcmbOLH/F0qy2yI XCnkOH7a4lIaXy7S4rqgyxVUiWA/zprD6pjKLa5LwQU4SLjV+efSTI0PAPy436+Q +gioQFSXeCMdxyKARuf0ipYFth0GczEL0m3KSXALKJKc65le4i/+DYtjElYRFSsQ VDFDR6G5u/Y/F6n/hfPfJSCNRoBtPOhQv5l/M+i4O5oG4heyWgSWjJQTjGh+EErb +FaypZ9Cuq2vxhCAVb4dK5h5YtZlFxI= -----END CERTIFICATE-----Generated at Sun Apr 6 16:04:29 2025 by rpki-client