$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bebe683-c200-3054-8a1b-d8d4e9d3481c.roa File: 4bebe683-c200-3054-8a1b-d8d4e9d3481c.roa (raw, json) Hash identifier: zipONb+x/j00MqZuPm7YjqJPbTW9A/YI3fFXNsjozdg= Subject key identifier: E6:27:8F:FF:6A:DE:8F:84:09:25:89:3C:00:85:A0:D9:2F:DD:66:BE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858498E64B5865D68BB72CA2BE800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bebe683-c200-3054-8a1b-d8d4e9d3481c.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 22773 IP address blocks: 72.192.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:b5:86:5d:68:bb:72:ca:2b:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=e16218aa-c7ea-4519-bbff-470b4e782a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:f3:06:52:03:2d:e2:96:1e:2c:a7:38:fc: a1:dd:00:4f:42:86:6e:24:89:b1:c1:49:92:06:bd: 88:1a:6f:10:a6:12:b9:f6:40:83:df:e9:8d:44:d6: fe:3c:2f:1a:62:21:c0:7c:11:43:77:0e:e0:48:82: 6b:b0:d0:f2:4f:bb:88:7a:ed:94:71:50:02:63:36: aa:02:45:a5:58:06:1a:68:e8:ce:6c:1b:00:87:45: 52:11:84:55:e7:7b:a6:6c:b1:69:59:36:ef:a6:0d: b1:bf:c7:ad:5e:2b:96:d5:d8:f2:54:ae:1b:90:10: 4a:5a:cb:c3:9d:bc:49:78:6c:46:c0:1f:1e:37:06: 1a:06:cc:55:b6:29:22:54:1a:1a:1b:73:68:03:ce: aa:b6:78:ab:92:f0:40:7b:ee:86:62:4b:30:3a:71: ba:d5:95:c5:a8:f8:2a:81:11:26:c1:ad:59:5b:33: 17:cd:33:f6:39:58:07:6e:b1:28:33:82:8d:6a:53: f7:ab:81:4d:26:32:62:39:88:e3:a7:d7:bd:70:f4: ad:e0:60:a9:35:ef:74:61:8b:eb:51:6c:7e:1d:2c: 3e:c8:dc:48:6e:48:9d:75:5e:6d:87:6a:fb:c0:b8: c7:d3:2b:5a:69:ee:ca:30:55:25:dc:fa:0b:33:e1: 03:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:27:8F:FF:6A:DE:8F:84:09:25:89:3C:00:85:A0:D9:2F:DD:66:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bebe683-c200-3054-8a1b-d8d4e9d3481c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5c:45:b8:ca:16:c2:6b:30:5b:63:af:58:3b:8e:d3:d5:86: 24:23:67:e3:b7:a6:45:bf:2b:e1:98:c8:5c:91:27:0c:bd:25: 4a:f5:c7:d6:38:ac:cd:ac:08:cf:dd:48:21:12:cd:83:fe:03: e7:2f:b9:e7:77:cf:39:cd:6b:41:6a:73:b4:25:ba:5c:32:cd: 2b:17:8a:ec:10:f1:f7:96:2a:33:13:28:7b:cb:3c:ac:47:63: b6:b1:d8:c8:c0:2c:98:e5:c0:db:0b:97:00:19:32:35:08:da: 20:3c:fc:ce:21:46:b9:00:3e:87:98:80:f8:ea:b0:67:2f:c1: ab:e5:ed:dd:e8:06:99:ec:14:4f:b4:a8:0f:1d:e0:a1:67:be: 58:21:a2:30:a9:db:36:aa:59:0e:8e:e4:e8:06:b3:c8:a4:cf: 99:d1:df:e2:3a:dd:e0:1c:f1:93:c6:cb:e9:98:36:ef:ad:87: 0f:5e:39:40:9f:9a:ed:e3:f8:1c:a1:7a:69:e8:2c:72:ed:64: c3:66:76:85:04:f4:9d:ed:01:30:c2:44:d2:9b:2c:ed:d2:8a: 26:92:fd:26:51:dd:11:84:95:c8:5d:8c:05:71:18:d7:8c:47: e4:24:26:dd:e5:5e:c0:9e:ef:33:70:2b:4e:6f:93:91:c6:58: 9d:6b:e6:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZLWGXWi7csor6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTE2MjE4YWEtYzdlYS00NTE5LWJiZmYtNDcwYjRlNzgyYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6XzBlIDLeKWHiynOPyh3QBPQoZuJImxwUmS Br2IGm8QphK59kCD3+mNRNb+PC8aYiHAfBFDdw7gSIJrsNDyT7uIeu2UcVACYzaq AkWlWAYaaOjObBsAh0VSEYRV53umbLFpWTbvpg2xv8etXiuW1djyVK4bkBBKWsvD nbxJeGxGwB8eNwYaBsxVtikiVBoaG3NoA86qtnirkvBAe+6GYkswOnG61ZXFqPgq gREmwa1ZWzMXzTP2OVgHbrEoM4KNalP3q4FNJjJiOYjjp9e9cPSt4GCpNe90YYvr UWx+HSw+yNxIbkiddV5th2r7wLjH0ytaae7KMFUl3PoLM+EDKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYnj/9q3o+ECSWJPACFoNkv3Wa+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGJlYmU2ODMtYzIwMC0z MDU0LThhMWItZDhkNGU5ZDM0ODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESMDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxcRbjKFsJrMFtjr1g7jtPVhiQjZ+O3pkW/K+GYyFyRJwy9JUr1x9Y4 rM2sCM/dSCESzYP+A+cvued3zznNa0Fqc7QlulwyzSsXiuwQ8feWKjMTKHvLPKxH Y7ax2MjALJjlwNsLlwAZMjUI2iA8/M4hRrkAPoeYgPjqsGcvwavl7d3oBpnsFE+0 qA8d4KFnvlghojCp2zaqWQ6O5OgGs8ikz5nR3+I63eAc8ZPGy+mYNu+thw9eOUCf mu3j+ByhemnoLHLtZMNmdoUE9J3tATDCRNKbLO3SiiaS/SZR3RGElchdjAVxGNeM R+QkJt3lXsCe7zNwK05vk5HGWJ1r5gI= -----END CERTIFICATE-----Generated at Sun Apr 27 03:59:48 2025 by rpki-client