$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d394ea4-8920-3298-b46c-22a9fa92b897.roa File: 2d394ea4-8920-3298-b46c-22a9fa92b897.roa (raw, json) Hash identifier: 8TQp8snhhFETC4szm/JUSa9lXOONwLjENNSXuC1zQUw= Subject key identifier: BA:C3:72:46:FF:B9:7B:8B:75:44:48:34:01:39:CA:05:68:D5:F5:C9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA865A56DC3D785699AFB0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d394ea4-8920-3298-b46c-22a9fa92b897.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 72.219.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:86:5a:56:dc:3d:78:56:99:af:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=52a252ac-8adf-4a0d-b1ec-cbddf99f9eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:81:10:df:75:72:d9:0d:ec:55:91:b8:b7: 54:22:f6:90:04:5b:42:5d:dc:2e:7c:e7:6d:d8:50: 07:4a:12:14:ab:3a:79:70:91:25:a5:d5:db:09:20: de:75:ff:b0:fd:2d:6f:ca:57:64:3c:cd:7a:f6:87: 86:66:10:aa:2b:af:1f:f6:60:a0:e6:f7:29:1a:63: 47:af:c7:e3:e3:85:c9:e8:04:2d:bc:31:4e:ec:66: 7f:55:f4:b0:d3:e3:c5:a6:b5:d1:2b:92:6c:87:ff: 59:6a:7d:8b:39:14:79:f2:e9:14:d8:be:3d:d0:6f: 65:9e:f7:e0:fc:23:cb:27:ad:01:60:be:a2:30:60: 34:d5:7f:c7:19:d5:90:2d:77:29:36:6a:6a:8f:68: 56:eb:71:a1:2c:ad:d2:a0:e9:7e:d8:f4:8e:d7:35: 3c:b5:24:e3:05:34:80:3a:7e:16:a6:54:d2:c4:42: 6a:90:91:8a:b3:b2:a7:1d:77:17:39:68:18:64:e8: dc:d4:45:24:01:4b:a2:64:ce:6a:79:5e:b4:b3:c2: f6:9a:19:7c:ff:e2:a0:25:5d:cb:76:32:4f:be:99: a5:26:a1:cf:04:e8:0c:9b:92:1e:ae:2c:5e:b5:40: c0:d2:84:4c:5c:52:f6:4d:4b:88:62:24:8c:76:f0: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C3:72:46:FF:B9:7B:8B:75:44:48:34:01:39:CA:05:68:D5:F5:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d394ea4-8920-3298-b46c-22a9fa92b897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:11:37:84:8e:97:77:80:3f:ce:b3:50:26:24:95:01:73:f3: 67:56:88:e5:8d:c6:5c:00:65:a4:ce:89:9c:94:eb:ab:53:a2: 0a:43:d8:ca:44:07:67:f0:5c:15:f6:f8:03:99:5a:8b:05:f8: b5:be:26:f3:57:1b:6e:f1:8c:1f:5c:24:8e:2f:98:ce:44:db: 04:72:b6:38:23:8a:e8:d2:1a:65:15:67:f0:44:cf:b6:24:c2: 80:b1:a4:8d:f5:7f:82:1e:ac:5c:0a:c5:3b:f3:99:90:2a:39: 91:02:93:35:80:a6:eb:7c:31:5e:e3:a4:f6:b6:9a:52:55:9c: 19:b0:ff:80:48:54:fd:29:61:15:61:55:81:42:e9:cd:b2:9e: 6f:c6:73:c4:21:4b:e2:02:1e:8f:6a:69:1b:ef:14:d5:6c:56: f4:64:56:ce:e5:51:26:3f:27:1f:2c:12:42:c5:2c:24:fb:5a: 87:93:14:78:5c:7a:20:a6:fb:20:7d:74:82:5d:a6:71:5d:4c: 93:50:3d:67:93:16:fc:25:94:1d:13:00:7e:fe:5b:39:dd:c5: ae:89:db:c6:68:b2:9e:2f:0a:b0:ce:29:bb:36:a5:89:d6:76: e4:39:e2:34:3e:fa:74:02:8f:49:31:d8:83:10:a0:64:69:2e: 11:b3:2f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6oZaVtw9eFaZr7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NTJhMjUyYWMtOGFkZi00YTBkLWIxZWMtY2JkZGY5OWY5ZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSGBEN91ctkN7FWRuLdUIvaQBFtCXdwufOdt 2FAHShIUqzp5cJElpdXbCSDedf+w/S1vyldkPM169oeGZhCqK68f9mCg5vcpGmNH r8fj44XJ6AQtvDFO7GZ/VfSw0+PFprXRK5Jsh/9Zan2LORR58ukU2L490G9lnvfg /CPLJ60BYL6iMGA01X/HGdWQLXcpNmpqj2hW63GhLK3SoOl+2PSO1zU8tSTjBTSA On4WplTSxEJqkJGKs7KnHXcXOWgYZOjc1EUkAUuiZM5qeV60s8L2mhl8/+KgJV3L djJPvpmlJqHPBOgMm5IerixetUDA0oRMXFL2TUuIYiSMdvAAjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrDckb/uXuLdURINAE5ygVo1fXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmQzOTRlYTQtODkyMC0z Mjk4LWI0NmMtMjJhOWZhOTJiODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsRN4SOl3eAP86zUCYklQFz82dWiOWNxlwAZaTOiZyU66tTogpD2MpE B2fwXBX2+AOZWosF+LW+JvNXG27xjB9cJI4vmM5E2wRytjgjiujSGmUVZ/BEz7Yk woCxpI31f4IerFwKxTvzmZAqOZECkzWAput8MV7jpPa2mlJVnBmw/4BIVP0pYRVh VYFC6c2ynm/Gc8QhS+ICHo9qaRvvFNVsVvRkVs7lUSY/Jx8sEkLFLCT7WoeTFHhc eiCm+yB9dIJdpnFdTJNQPWeTFvwllB0TAH7+Wzndxa6J28Zosp4vCrDOKbs2pYnW duQ54jQ++nQCj0kx2IMQoGRpLhGzL9o= -----END CERTIFICATE-----Generated at Mon Jun 16 14:44:27 2025 by rpki-client