$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/446393f4-44f8-3872-a69f-cccd7c2a26f5.roa File: 446393f4-44f8-3872-a69f-cccd7c2a26f5.roa (raw, json) Hash identifier: 4UJB2ABBFhvQ0K1VlN24unIAumCx2HWQmfuftBoZpkU= Subject key identifier: F1:D8:D5:18:A6:4E:C1:D5:50:29:40:F5:30:47:2D:D0:7D:90:05:9F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849625F09BFBEB93B7E47F27300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/446393f4-44f8-3872-a69f-cccd7c2a26f5.roa Signing time: Tue 01 Apr 2025 18:34:32 +0000 ROA not before: Tue 01 Apr 2025 18:34:32 +0000 ROA not after: Mon 30 Jun 2025 18:34:32 +0000 asID: 22773 IP address blocks: 72.192.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:62:5f:09:bf:be:b9:3b:7e:47:f2:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 1 18:34:32 2025 GMT Not After : Jun 30 18:34:32 2025 GMT Subject: CN=5ab2d9e8-9340-4755-97ee-8b2bcd978bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:6c:a6:b3:39:8a:0e:84:c1:62:98:cd:3d: cc:4b:24:ef:63:76:bc:03:c0:d1:27:7d:e7:ca:e7: f3:4f:9d:2a:46:83:da:53:38:48:4a:91:02:c3:b8: 97:32:5c:99:24:ee:cc:a8:7c:ec:c6:6d:ae:b9:62: de:a2:aa:36:08:47:35:a0:8c:39:b4:a3:ae:ea:8d: 52:17:7e:43:f5:a0:46:38:d5:6e:c2:86:cf:90:b3: 6e:c4:a2:b0:f2:a1:14:f2:8e:f2:a2:2b:c5:9f:d1: 54:7c:6a:f4:db:83:86:78:3f:4c:d7:52:83:f5:28: 90:05:52:7e:88:2a:ed:0c:cc:f9:99:f2:49:79:25: d2:64:fb:c4:e7:bf:86:87:7d:e3:4c:fe:38:63:d8: aa:1d:58:e8:6e:60:19:2c:e5:ae:c7:d4:11:be:02: 3a:98:34:77:60:d7:25:25:41:26:62:0d:df:e2:f7: d2:f3:2a:a0:4c:a6:cf:2c:1c:a1:7b:b5:76:9d:36: dd:90:dd:c6:87:24:5f:01:f5:95:09:0c:93:ae:e5: d7:a0:30:3b:ed:fe:53:66:a5:da:a0:7e:a0:f9:94: 43:cf:3d:7b:54:8f:24:3a:60:35:be:10:c2:0d:a5: 70:90:b0:ae:5d:3a:a2:30:8a:4a:f3:87:c2:22:53: 59:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D8:D5:18:A6:4E:C1:D5:50:29:40:F5:30:47:2D:D0:7D:90:05:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/446393f4-44f8-3872-a69f-cccd7c2a26f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ad:78:8f:e2:a8:37:95:c2:8f:09:20:9e:cb:fc:84:23:06: 43:18:4e:b9:f7:1a:b9:81:61:0a:44:cf:b9:93:f0:81:56:6d: cc:26:ff:2d:db:ef:be:c4:23:45:24:e4:ad:59:d0:04:7a:4c: 9e:07:85:d5:bf:c9:7b:68:b2:cd:f0:4f:9c:85:7e:a5:d5:c3: 98:fd:98:95:2f:5e:2a:84:f1:36:6c:26:77:28:d5:6b:a7:65: 20:50:dd:08:1e:90:48:87:f5:55:86:0e:a2:ac:12:f0:6a:97: 1a:21:65:68:36:1c:c3:a5:79:6a:12:26:45:1b:58:da:fb:af: 08:3c:c8:aa:b6:6e:2d:a3:a3:c4:47:62:03:8b:29:35:30:c0: bc:2e:7d:10:52:d6:ab:ae:d1:2e:f1:67:6e:59:6b:95:19:a8: de:13:7d:26:98:f4:35:a2:8a:f7:df:8a:2b:ea:47:92:8a:e2: e8:39:7b:7b:5c:f8:bd:7d:c4:f7:69:88:1b:fb:a4:d6:64:fa: 7d:80:80:4d:32:ab:bb:18:b0:d1:51:10:32:23:3d:a9:ca:69: f1:f2:23:4e:de:b7:75:87:17:30:21:39:5d:7a:04:40:7b:04: 02:61:db:2e:72:57:bc:90:f9:5c:41:71:82:ad:88:41:3e:9b: c4:5d:ce:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEliXwm/vrk7fkfycwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDQwMTE4MzQzMloXDTI1MDYzMDE4MzQzMlowLzEtMCsGA1UEAxMk NWFiMmQ5ZTgtOTM0MC00NzU1LTk3ZWUtOGIyYmNkOTc4YmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9xsprM5ig6EwWKYzT3MSyTvY3a8A8DRJ33n yufzT50qRoPaUzhISpECw7iXMlyZJO7MqHzsxm2uuWLeoqo2CEc1oIw5tKOu6o1S F35D9aBGONVuwobPkLNuxKKw8qEU8o7yoivFn9FUfGr024OGeD9M11KD9SiQBVJ+ iCrtDMz5mfJJeSXSZPvE57+Gh33jTP44Y9iqHVjobmAZLOWux9QRvgI6mDR3YNcl JUEmYg3f4vfS8yqgTKbPLByhe7V2nTbdkN3GhyRfAfWVCQyTruXXoDA77f5TZqXa oH6g+ZRDzz17VI8kOmA1vhDCDaVwkLCuXTqiMIpK84fCIlNZHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHY1RimTsHVUClA9TBHLdB9kAWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDQ2MzkzZjQtNDRmOC0z ODcyLWE2OWYtY2NjZDdjMmEyNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMDJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2teI/iqDeVwo8JIJ7L/IQjBkMYTrn3GrmBYQpEz7mT8IFWbcwm/y3b 777EI0Uk5K1Z0AR6TJ4HhdW/yXtoss3wT5yFfqXVw5j9mJUvXiqE8TZsJnco1Wun ZSBQ3QgekEiH9VWGDqKsEvBqlxohZWg2HMOleWoSJkUbWNr7rwg8yKq2bi2jo8RH YgOLKTUwwLwufRBS1quu0S7xZ25Za5UZqN4TfSaY9DWiivffiivqR5KK4ug5e3tc +L19xPdpiBv7pNZk+n2AgE0yq7sYsNFREDIjPanKafHyI07et3WHFzAhOV16BEB7 BAJh2y5yV7yQ+VxBcYKtiEE+m8RdzkQ= -----END CERTIFICATE-----Generated at Sun Apr 27 00:19:28 2025 by rpki-client