$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9d91d96-48d8-3619-931c-ac6349414520.roa File: c9d91d96-48d8-3619-931c-ac6349414520.roa (raw, json) Hash identifier: aScoPPSop3f3wTYL42vj9RWh1RRqHbgQfIAqVspOizw= Subject key identifier: 55:F4:13:9E:BC:11:72:19:0E:B7:4C:18:FA:BB:1F:50:5C:0F:90:92 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848DA7101F3CB9635AA97AB3000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9d91d96-48d8-3619-931c-ac6349414520.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 22773 IP address blocks: 72.222.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:01:f3:cb:96:35:aa:97:ab:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=fd3bbe09-f4f6-4c46-80db-6ecd9ef0dff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:d9:fa:52:3a:8e:1b:66:5a:dd:f3:a9:78: 6a:5c:45:10:cb:16:dc:7c:4b:4e:ba:96:58:47:17: aa:30:a9:d5:6e:44:5e:99:87:36:f3:a9:0d:41:d1: 60:1f:83:88:63:85:0c:e8:c5:5c:0f:a5:ab:21:23: 19:e9:ae:7f:23:2a:c8:ac:b8:91:2e:46:da:70:75: df:67:98:4f:04:2e:24:7b:62:d5:4e:3a:cc:e9:a6: 60:49:98:b9:1f:d1:13:01:74:be:6e:e7:cf:c7:cf: af:12:8c:69:6f:85:19:30:36:95:39:62:16:2f:a9: 8a:78:8d:21:41:ee:65:1f:cf:42:48:89:02:20:4e: f8:eb:1b:2a:cd:d0:7f:8e:7d:80:28:fa:73:80:12: ac:34:2d:14:8f:e4:3e:4f:4e:c1:c4:6a:fa:fa:17: ec:ba:96:b3:7a:84:4b:b8:c8:50:d3:3d:41:a1:b9: b7:6b:4f:50:67:50:e6:46:82:d7:22:95:80:d1:90: 0c:c7:98:99:2f:7b:b8:21:15:80:f6:8d:92:c1:b1: 9f:73:5d:f9:9a:d7:4f:8a:86:21:4e:98:83:e7:33: 12:d6:4e:6d:48:e2:9a:d1:ee:8a:c4:e3:f5:2e:fc: d6:a8:23:83:91:fc:aa:e8:26:65:36:56:9e:d0:c4: 44:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F4:13:9E:BC:11:72:19:0E:B7:4C:18:FA:BB:1F:50:5C:0F:90:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9d91d96-48d8-3619-931c-ac6349414520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ab:8f:5b:77:d6:23:63:30:32:ff:36:92:af:39:0f:35:50: 18:7b:49:88:84:3e:a6:88:b7:5f:f0:c8:37:c3:df:c4:40:e1: 41:a6:14:1e:8c:65:e7:c1:57:ad:4f:ae:0c:c4:0d:75:12:04: 40:fc:0e:ca:1e:72:c1:f1:02:b6:70:85:d3:53:0d:cc:08:4b: 43:c7:94:c1:41:a7:a8:ef:51:9b:e1:57:10:c8:6a:b7:90:93: cb:cd:78:75:eb:3f:ff:9c:e5:ac:c0:cb:5c:d5:0a:9f:ee:d6: 7a:de:fc:d5:3a:ab:51:de:25:ce:67:73:d8:68:1e:68:7f:71: 71:68:6d:59:c5:99:7e:91:d2:f5:3f:e9:83:b3:de:78:e5:2e: 6b:c0:47:84:44:c8:87:e8:69:e6:94:4e:44:87:c0:f1:f1:90: 1a:d2:17:df:8b:2e:ab:c3:83:34:43:7a:97:b6:72:97:9e:6d: 35:1b:ad:d3:5e:a2:b3:e1:47:d7:51:2c:42:0f:35:9c:13:a2: 94:c3:79:f3:4d:12:35:95:b8:5d:56:a9:d1:32:04:35:71:37: 43:7e:ec:d7:96:4e:cf:95:d0:b0:fc:69:38:a6:8e:8b:04:e2: 13:91:f9:77:ee:f2:60:c7:3c:25:4a:e9:2c:54:b3:49:81:40: c0:c3:85:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQHzy5Y1qperMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZmQzYmJlMDktZjRmNi00YzQ2LTgwZGItNmVjZDllZjBkZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5DZ+lI6jhtmWt3zqXhqXEUQyxbcfEtOupZY RxeqMKnVbkRemYc286kNQdFgH4OIY4UM6MVcD6WrISMZ6a5/IyrIrLiRLkbacHXf Z5hPBC4ke2LVTjrM6aZgSZi5H9ETAXS+bufPx8+vEoxpb4UZMDaVOWIWL6mKeI0h Qe5lH89CSIkCIE746xsqzdB/jn2AKPpzgBKsNC0Uj+Q+T07BxGr6+hfsupazeoRL uMhQ0z1Bobm3a09QZ1DmRoLXIpWA0ZAMx5iZL3u4IRWA9o2SwbGfc135mtdPioYh TpiD5zMS1k5tSOKa0e6KxOP1LvzWqCODkfyq6CZlNlae0MREgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFX0E568EXIZDrdMGPq7H1BcD5CSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzlkOTFkOTYtNDhkOC0z NjE5LTkzMWMtYWM2MzQ5NDE0NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN42MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyrj1t31iNjMDL/NpKvOQ81UBh7SYiEPqaIt1/wyDfD38RA4UGmFB6M ZefBV61PrgzEDXUSBED8DsoecsHxArZwhdNTDcwIS0PHlMFBp6jvUZvhVxDIareQ k8vNeHXrP/+c5azAy1zVCp/u1nre/NU6q1HeJc5nc9hoHmh/cXFobVnFmX6R0vU/ 6YOz3njlLmvAR4REyIfoaeaUTkSHwPHxkBrSF9+LLqvDgzRDepe2cpeebTUbrdNe orPhR9dRLEIPNZwTopTDefNNEjWVuF1WqdEyBDVxN0N+7NeWTs+V0LD8aTimjosE 4hOR+Xfu8mDHPCVK6SxUs0mBQMDDhdU= -----END CERTIFICATE-----Generated at Sun Apr 6 16:01:51 2025 by rpki-client