$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c38d88ed-ad32-3c66-93d3-7f9c32d57172.roa File: c38d88ed-ad32-3c66-93d3-7f9c32d57172.roa (raw, json) Hash identifier: CZXXZkP5p6uhgHhHinfMq/pGuH2w2CavSAsN8b+UpFw= Subject key identifier: 6A:83:D7:84:D5:86:74:08:C9:68:C9:59:3F:B9:07:D5:D1:4E:F7:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB179489E1CEF5C1DE82600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c38d88ed-ad32-3c66-93d3-7f9c32d57172.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 72.219.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:79:48:9e:1c:ef:5c:1d:e8:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=7d3c7376-6783-4f2e-b294-d02c7ff65404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:62:54:f5:42:33:35:b8:a6:b8:1c:83:a3: 0d:da:92:6a:16:95:a3:70:05:6f:3b:0e:fe:f3:75: 4d:f2:23:e3:5a:d4:d9:63:32:b0:58:82:37:1c:06: 41:49:75:aa:b5:32:e4:20:72:bf:6d:76:48:a6:c2: 54:cd:81:df:28:94:28:1a:82:22:96:87:2a:1a:ca: 53:84:08:0e:b5:df:12:68:b5:7a:8e:10:09:8b:74: 84:77:8c:35:31:82:be:c6:47:0e:74:67:da:5d:d3: 10:e9:8c:5b:dd:87:77:7d:95:e8:d8:84:19:64:bf: 3b:c1:c7:fc:3d:c7:f4:b4:6a:be:20:99:06:c4:15: ee:4f:51:56:90:b3:e5:a2:33:16:a9:e8:27:ed:5c: 77:08:77:06:40:d8:57:ad:56:a6:14:cf:e2:63:58: 3e:96:a4:83:84:25:4f:b0:ef:7d:36:f0:a8:b3:14: 37:14:3d:60:c4:c6:34:bd:cd:01:1d:1f:d2:a4:44: cb:30:8d:fa:51:75:a2:4b:ae:74:b5:b6:8a:59:27: 5e:d8:f3:b5:ce:27:09:19:6b:f6:8b:56:8c:22:80: 15:ff:6e:cd:7d:31:3a:28:e5:2c:7c:d5:18:98:e7: 67:8a:1d:0a:fa:49:6a:69:65:f2:49:90:04:8e:30: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:83:D7:84:D5:86:74:08:C9:68:C9:59:3F:B9:07:D5:D1:4E:F7:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c38d88ed-ad32-3c66-93d3-7f9c32d57172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5a:ea:3a:a6:09:2a:d7:ad:9b:59:48:fd:de:6f:3f:ad:87: cb:03:71:85:62:49:b0:08:65:3b:d4:b0:de:3b:ac:52:e1:9c: e0:b1:e1:ce:53:67:c2:78:a7:a3:60:ac:db:e3:a8:be:64:0b: c1:e3:1c:17:e6:c6:c0:05:e8:dc:a7:68:48:82:66:f6:b6:1c: 23:2c:8d:3c:1e:39:33:a7:7c:eb:ac:da:cd:8c:3e:18:c1:f8: 84:0d:13:83:62:69:59:5c:cc:ac:68:b2:d6:da:8b:5c:40:af: 60:77:d0:d2:f1:66:51:34:bb:55:90:2e:9e:4b:3a:aa:29:f3: fe:81:63:b2:46:99:c3:78:08:24:68:cf:c6:dd:2c:de:44:42: cb:6f:82:f3:c8:a8:c6:a4:6b:ae:08:56:4d:6f:89:68:52:eb: ed:0f:df:41:5f:e6:14:9c:fe:39:87:cd:8c:88:8d:4d:90:27: fe:e9:60:15:bf:f1:1c:3a:65:e1:e6:52:1f:61:00:28:f2:6d: 67:22:84:b1:00:05:e7:79:a1:99:79:69:85:ab:39:00:7f:c8: 29:a0:56:8e:3d:01:08:09:8f:88:ad:9a:d2:e3:9d:c2:13:3b: 53:41:21:5c:9b:f6:15:de:32:75:ee:50:43:98:e0:6d:d5:61: f3:a3:7d:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXlInhzvXB3oJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk N2QzYzczNzYtNjc4My00ZjJlLWIyOTQtZDAyYzdmZjY1NDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJhiVPVCMzW4prgcg6MN2pJqFpWjcAVvOw7+ 83VN8iPjWtTZYzKwWII3HAZBSXWqtTLkIHK/bXZIpsJUzYHfKJQoGoIilocqGspT hAgOtd8SaLV6jhAJi3SEd4w1MYK+xkcOdGfaXdMQ6Yxb3Yd3fZXo2IQZZL87wcf8 Pcf0tGq+IJkGxBXuT1FWkLPlojMWqegn7Vx3CHcGQNhXrVamFM/iY1g+lqSDhCVP sO99NvCosxQ3FD1gxMY0vc0BHR/SpETLMI36UXWiS650tbaKWSde2PO1zicJGWv2 i1aMIoAV/27NfTE6KOUsfNUYmOdnih0K+klqaWXySZAEjjCaFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqD14TVhnQIyWjJWT+5B9XRTvf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzM4ZDg4ZWQtYWQzMi0z YzY2LTkzZDMtN2Y5YzMyZDU3MTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1a6jqmCSrXrZtZSP3ebz+th8sDcYViSbAIZTvUsN47rFLhnOCx4c5T Z8J4p6NgrNvjqL5kC8HjHBfmxsAF6NynaEiCZva2HCMsjTweOTOnfOus2s2MPhjB +IQNE4NiaVlczKxostbai1xAr2B30NLxZlE0u1WQLp5LOqop8/6BY7JGmcN4CCRo z8bdLN5EQstvgvPIqMaka64IVk1viWhS6+0P30Ff5hSc/jmHzYyIjU2QJ/7pYBW/ 8Rw6ZeHmUh9hACjybWcihLEABed5oZl5aYWrOQB/yCmgVo49AQgJj4itmtLjncIT O1NBIVyb9hXeMnXuUEOY4G3VYfOjfTs= -----END CERTIFICATE-----Generated at Sun Apr 6 15:57:55 2025 by rpki-client