$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e64249fd-37f4-3de2-8b58-36162d02b56f.roa File: e64249fd-37f4-3de2-8b58-36162d02b56f.roa (raw, json) Hash identifier: bn9vhvVrWqqIv8n9cqbPf2/TKrPz6HlLw7Jr/LbpkRo= Subject key identifier: 9C:B2:22:61:F7:7C:86:38:DC:09:B9:CD:D0:18:60:AE:46:BD:00:37 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB178E33C3E8042929CC140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e64249fd-37f4-3de2-8b58-36162d02b56f.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 72.219.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:78:e3:3c:3e:80:42:92:9c:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=e4f44b4e-0118-4f98-bd04-751bd68f0d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:37:1b:75:02:85:b1:b1:15:35:9f:e8:fe:1d: b0:d2:6a:e2:22:0f:b0:64:24:93:fd:43:36:95:1a: ac:40:55:d5:ba:0d:91:09:c7:a8:f0:30:17:10:aa: 87:b0:62:d9:f7:0b:46:ea:1b:31:26:c7:ed:0d:b9: 19:51:ec:9a:63:30:73:e6:2b:0e:4d:05:10:d2:ee: 83:3b:16:81:60:40:73:3b:7d:ad:5a:e6:38:8e:48: 8b:bb:88:e9:77:f5:76:a4:2c:55:c0:f3:91:eb:24: 5e:60:32:dd:8b:3c:a0:72:10:5f:49:59:55:5f:39: d1:32:a3:8d:27:2a:4b:6b:82:eb:67:a8:b0:0d:08: ee:69:15:fb:4a:be:d5:78:0e:be:e9:23:66:0b:fc: 3e:3d:89:af:57:d8:a2:a2:7c:cf:07:ad:77:e2:c2: 07:c0:be:31:2d:b8:da:eb:69:a6:6d:b7:96:ff:f3: 0b:5f:82:1b:69:ce:8e:df:ed:7b:87:66:98:93:76: 4f:ce:f6:25:1a:94:35:49:e6:e9:2a:b2:71:12:5f: 77:e6:12:c3:97:e2:82:13:e5:bd:a2:51:d9:9b:53: 72:d1:69:cc:b9:29:a6:c1:df:3a:9d:18:15:58:9c: ad:f9:f6:90:25:74:c5:82:3a:8a:a6:0a:be:64:20: 44:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B2:22:61:F7:7C:86:38:DC:09:B9:CD:D0:18:60:AE:46:BD:00:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e64249fd-37f4-3de2-8b58-36162d02b56f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:df:e6:30:88:bb:f9:0d:2d:bb:ab:12:dc:e7:33:33:1a:59: 31:9a:c6:b8:7b:b7:c4:17:61:56:8d:2c:3e:b3:56:30:9f:4e: fc:9e:0e:46:7a:15:b8:f7:db:46:51:2f:5e:3c:e9:b0:ef:65: 6c:cc:37:1d:c0:10:0a:26:5b:38:60:21:71:d0:d9:94:4b:dd: fd:4f:1f:1c:94:8d:ae:b1:29:c2:39:06:3f:c2:d7:fb:29:45: 74:6f:fb:3a:45:a3:22:dc:99:1d:44:fb:89:76:ab:7f:60:75: 38:45:02:e9:ea:d9:b2:75:dd:c6:8f:e7:02:43:b8:76:51:c4: 5c:68:7d:2c:cc:5c:44:dc:42:70:73:db:17:dd:59:c0:b6:1e: 50:e7:f3:f8:fe:da:4f:f6:f6:f9:9a:07:6a:c3:88:b2:1c:96: eb:c5:42:61:7a:06:64:34:51:32:2e:ed:8f:15:66:bc:7b:96: db:14:1c:99:93:eb:c4:a9:78:45:f5:be:29:1d:30:38:27:db: 18:e7:51:f7:46:04:3c:62:fd:0a:26:4d:ab:23:a0:b3:b6:19: 93:0b:52:90:f5:67:63:fa:5b:de:32:ec:be:4c:67:1f:e4:b1: 0b:7b:b8:31:ab:2c:4d:64:6c:e2:3a:ef:67:c0:89:56:6c:ac: c1:a4:f6:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXjjPD6AQpKcwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZTRmNDRiNGUtMDExOC00Zjk4LWJkMDQtNzUxYmQ2OGYwZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTcbdQKFsbEVNZ/o/h2w0mriIg+wZCST/UM2 lRqsQFXVug2RCceo8DAXEKqHsGLZ9wtG6hsxJsftDbkZUeyaYzBz5isOTQUQ0u6D OxaBYEBzO32tWuY4jkiLu4jpd/V2pCxVwPOR6yReYDLdizygchBfSVlVXznRMqON JypLa4LrZ6iwDQjuaRX7Sr7VeA6+6SNmC/w+PYmvV9iionzPB6134sIHwL4xLbja 62mmbbeW//MLX4Ibac6O3+17h2aYk3ZPzvYlGpQ1SebpKrJxEl935hLDl+KCE+W9 olHZm1Ny0WnMuSmmwd86nRgVWJyt+faQJXTFgjqKpgq+ZCBEkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyyImH3fIY43Am5zdAYYK5GvQA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTY0MjQ5ZmQtMzdmNC0z ZGUyLThiNTgtMzYxNjJkMDJiNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXf5jCIu/kNLburEtznMzMaWTGaxrh7t8QXYVaNLD6zVjCfTvyeDkZ6 Fbj320ZRL1486bDvZWzMNx3AEAomWzhgIXHQ2ZRL3f1PHxyUja6xKcI5Bj/C1/sp RXRv+zpFoyLcmR1E+4l2q39gdThFAunq2bJ13caP5wJDuHZRxFxofSzMXETcQnBz 2xfdWcC2HlDn8/j+2k/29vmaB2rDiLIcluvFQmF6BmQ0UTIu7Y8VZrx7ltsUHJmT 68SpeEX1vikdMDgn2xjnUfdGBDxi/QomTasjoLO2GZMLUpD1Z2P6W94y7L5MZx/k sQt7uDGrLE1kbOI672fAiVZsrMGk9gk= -----END CERTIFICATE-----Generated at Sun Apr 6 15:58:37 2025 by rpki-client