$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6ceaeeb-3859-3fd2-956a-06d38f52886d.roa File: d6ceaeeb-3859-3fd2-956a-06d38f52886d.roa (raw, json) Hash identifier: hAzqK2051F2O8JCGW0wXPUs1jU0VhJKWxRd9pCpE0UE= Subject key identifier: 45:BD:45:F7:32:E2:4B:AF:09:0A:2E:1C:DA:23:0F:A0:F8:20:B1:18 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848DD3BAFF6AB959EB7B9467580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6ceaeeb-3859-3fd2-956a-06d38f52886d.roa Signing time: Thu 13 Feb 2025 02:00:40 +0000 ROA not before: Thu 13 Feb 2025 02:00:40 +0000 ROA not after: Wed 14 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 72.192.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:3b:af:f6:ab:95:9e:b7:b9:46:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 13 02:00:40 2025 GMT Not After : May 14 01:00:40 2025 GMT Subject: CN=bc80d60c-fd46-4e48-bc0e-cf44d06f1283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:89:a0:98:c3:d3:cf:29:69:0e:28:2b:3c: bf:ba:91:15:d5:fe:15:8c:dd:b6:c2:0b:93:61:3d: b8:b1:92:a6:0f:9a:6e:b3:40:7a:05:e8:ab:78:31: 89:81:ea:ed:ea:1c:cb:12:08:d0:c8:f6:85:86:0d: 55:1c:09:97:f5:2c:58:57:e1:77:4f:e0:16:6c:a5: ba:cd:5e:c4:8d:91:70:1c:ae:a9:d0:d8:ff:35:00: 58:80:fd:b4:b4:9c:5e:73:a0:42:e9:77:13:2e:8d: b7:ea:ac:6a:3f:75:a5:72:4a:c1:9c:58:bb:6b:fb: 41:ad:55:d2:00:17:bf:00:dc:fb:12:94:5e:d9:ca: 67:85:c2:c7:2a:d7:aa:47:47:f1:98:b0:9a:da:82: 20:82:dc:dd:03:62:dd:b8:26:f2:5e:20:18:78:aa: 77:b5:9d:7c:82:ee:f6:f0:3a:6c:b4:83:79:26:db: be:6e:22:cd:ea:c6:b1:b7:c2:3a:3a:96:6a:15:31: a5:05:86:68:29:5a:ca:b1:75:34:90:4d:9f:b2:c6: 31:36:2c:ad:ad:6e:3e:4b:e7:62:7b:3d:e1:f2:8d: 3e:12:f2:ce:96:8c:c4:49:6a:48:b9:26:65:4f:e4: fc:c1:f7:27:38:e9:f7:e5:ff:95:6c:da:08:b9:1f: 1c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BD:45:F7:32:E2:4B:AF:09:0A:2E:1C:DA:23:0F:A0:F8:20:B1:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6ceaeeb-3859-3fd2-956a-06d38f52886d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ad:22:72:53:58:a4:2a:c5:e3:f1:47:1e:49:07:0d:bd:5e: 6a:0e:33:2a:85:f6:a9:6c:32:f0:41:20:cd:fd:d5:16:c6:2d: 9a:f6:6d:b5:a7:26:74:4a:e1:33:19:83:0d:1f:c6:91:2e:93: 61:c3:52:0d:e1:21:91:09:95:c6:b9:35:5a:ca:ef:a1:ae:c7: 17:6e:da:e2:54:8f:cc:3b:37:92:b2:4a:7d:db:96:e8:86:13: 64:0a:3a:0e:1c:e4:cb:b2:80:d1:16:8e:b7:c2:4f:22:1c:90: ab:f3:5c:06:34:15:06:13:51:88:7c:5e:38:6d:40:c6:aa:59: 2d:34:84:6b:55:3c:b2:78:0e:c0:ce:d5:40:75:c3:4d:3d:7b: 60:05:1d:57:ef:0b:4e:ba:a0:0c:d1:56:ba:12:0a:d5:9a:cb: 58:18:17:ba:5e:f2:f7:d9:be:5b:b8:db:94:a3:19:01:12:e6: 94:86:20:85:34:6b:84:a6:97:11:c5:c4:4d:64:c7:4a:aa:0a: 42:c9:94:45:be:bd:e8:a6:3f:d4:0c:0b:a8:51:e6:84:81:eb: fe:b2:e2:c8:60:90:3b:50:f5:e4:75:c4:19:50:56:35:96:60: a1:78:f2:66:63:d4:c1:64:5c:83:e6:99:5f:af:24:a0:c5:b6: 36:66:01:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO6/2q5Wet7lGdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk YmM4MGQ2MGMtZmQ0Ni00ZTQ4LWJjMGUtY2Y0NGQwNmYxMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1qJoJjD088paQ4oKzy/upEV1f4VjN22wguT YT24sZKmD5pus0B6BeireDGJgert6hzLEgjQyPaFhg1VHAmX9SxYV+F3T+AWbKW6 zV7EjZFwHK6p0Nj/NQBYgP20tJxec6BC6XcTLo236qxqP3WlckrBnFi7a/tBrVXS ABe/ANz7EpRe2cpnhcLHKteqR0fxmLCa2oIggtzdA2LduCbyXiAYeKp3tZ18gu72 8DpstIN5Jtu+biLN6saxt8I6OpZqFTGlBYZoKVrKsXU0kE2fssYxNiytrW4+S+di ez3h8o0+EvLOlozESWpIuSZlT+T8wfcnOOn35f+VbNoIuR8cxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEW9Rfcy4kuvCQouHNojD6D4ILEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDZjZWFlZWItMzg1OS0z ZmQyLTk1NmEtMDZkMzhmNTI4ODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOtInJTWKQqxePxRx5JBw29XmoOMyqF9qlsMvBBIM391RbGLZr2bbWn JnRK4TMZgw0fxpEuk2HDUg3hIZEJlca5NVrK76Guxxdu2uJUj8w7N5KySn3bluiG E2QKOg4c5MuygNEWjrfCTyIckKvzXAY0FQYTUYh8XjhtQMaqWS00hGtVPLJ4DsDO 1UB1w009e2AFHVfvC066oAzRVroSCtWay1gYF7pe8vfZvlu425SjGQES5pSGIIU0 a4SmlxHFxE1kx0qqCkLJlEW+veimP9QMC6hR5oSB6/6y4shgkDtQ9eR1xBlQVjWW YKF48mZj1MFkXIPmmV+vJKDFtjZmAVg= -----END CERTIFICATE-----Generated at Fri Mar 14 08:42:44 2025 by rpki-client