$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/592d2a01-0620-3188-876b-e59fd6252a80.roa File: 592d2a01-0620-3188-876b-e59fd6252a80.roa (raw, json) Hash identifier: RUCpy+Ebx6mkZCQvVK4I0NvlFnueCr+U1767tPz1TBI= Subject key identifier: 9C:FC:3E:6D:91:05:16:AA:7B:45:CE:53:F0:BD:E2:B6:C4:27:1C:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDA2152FB4BBB7741CA480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/592d2a01-0620-3188-876b-e59fd6252a80.roa Signing time: Thu 01 May 2025 17:26:11 +0000 ROA not before: Thu 01 May 2025 17:26:11 +0000 ROA not after: Wed 30 Jul 2025 17:26:11 +0000 asID: 22773 IP address blocks: 72.220.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:a2:15:2f:b4:bb:b7:74:1c:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:11 2025 GMT Not After : Jul 30 17:26:11 2025 GMT Subject: CN=6b81adac-7487-45bd-bd54-d1b0065e8a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:01:c3:a0:ec:de:10:5c:1e:ac:7a:9e:a8: 6f:65:52:fe:71:a1:6a:8b:57:f9:28:c4:84:d8:2b: 51:cb:c3:c7:8f:a9:67:11:42:76:58:12:dd:a3:16: 68:0f:3f:f1:e3:a4:cc:d9:f6:0e:59:14:48:da:0b: 57:ff:0c:9c:3f:d2:60:d7:f8:1b:da:98:53:1e:f8: ab:e9:3e:4e:a3:ef:e9:5e:ae:d7:19:ee:73:ad:c5: 93:03:81:63:9f:94:ea:a4:24:2a:ef:f2:03:58:15: ad:77:c4:ee:80:d1:a7:b6:0a:84:10:b5:c7:08:a6: 0b:d9:3a:0a:73:8e:4f:e2:e1:c4:b1:09:c1:ea:b8: 34:c2:3e:b3:9e:03:aa:84:c6:43:ad:54:16:d1:43: 12:97:83:a2:ab:81:35:96:1a:23:e7:2a:fe:1e:c1: 1d:26:56:ed:28:37:ba:17:93:65:ec:74:9c:02:e0: eb:53:8b:aa:f8:fa:ea:38:bd:cb:ec:73:b1:64:0d: 00:d6:90:6e:ee:84:59:01:91:85:22:c9:d0:7e:c8: da:ef:bc:f9:19:40:08:64:bf:7c:df:0b:2f:e1:f4: 73:c1:ba:46:c9:fb:da:06:70:f0:62:11:f8:60:ff: 5e:a0:6e:46:f8:a4:92:09:59:25:1f:6d:05:4a:13: 86:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FC:3E:6D:91:05:16:AA:7B:45:CE:53:F0:BD:E2:B6:C4:27:1C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/592d2a01-0620-3188-876b-e59fd6252a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a7:30:cf:92:52:7f:cf:68:09:92:bd:63:bd:9a:4c:43:ea: 15:16:b3:b5:8d:ed:51:c3:39:0d:bd:49:d7:f4:39:2b:0c:6e: ce:96:45:ee:ba:d0:da:79:28:6a:1f:69:db:ac:a8:7f:4f:25: 19:e7:d1:58:48:66:21:f6:74:18:3e:83:4b:81:e2:8c:f3:8a: 5d:5b:9f:0c:25:c2:ea:93:f5:3f:f1:d9:29:cf:63:26:af:44: 51:3f:ff:48:29:f8:7a:a0:5b:66:dc:2b:b0:73:bd:78:94:f7: 05:f6:7b:80:3f:4d:6d:01:50:c8:0b:bd:12:83:a2:7d:1f:5e: 54:c4:9b:49:bb:aa:1c:4b:01:cc:78:9e:75:e2:d9:92:13:71: 63:27:af:5c:13:4d:30:f0:61:fc:2f:97:b6:df:81:31:c3:54: 72:e6:f9:a0:c5:55:2d:f1:34:82:7b:78:04:9b:49:55:91:2a: f8:b4:61:a3:04:47:bb:c9:cb:4c:f8:0a:6e:12:98:51:23:ea: 24:c2:9d:67:e0:5a:de:5f:f8:c1:02:13:81:08:6e:e0:02:64: da:e2:bd:75:a6:85:66:9e:fb:81:42:09:ee:f4:00:4d:ad:05: 99:04:0f:cd:15:fc:6e:61:d5:f5:e3:3e:f4:24:10:d7:3d:ec: 54:f0:f7:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/aIVL7S7t3QcpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYxMVoXDTI1MDczMDE3MjYxMVowLzEtMCsGA1UEAxMk NmI4MWFkYWMtNzQ4Ny00NWJkLWJkNTQtZDFiMDA2NWU4YTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NoBw6Ds3hBcHqx6nqhvZVL+caFqi1f5KMSE 2CtRy8PHj6lnEUJ2WBLdoxZoDz/x46TM2fYOWRRI2gtX/wycP9Jg1/gb2phTHvir 6T5Oo+/pXq7XGe5zrcWTA4Fjn5TqpCQq7/IDWBWtd8TugNGntgqEELXHCKYL2ToK c45P4uHEsQnB6rg0wj6zngOqhMZDrVQW0UMSl4Oiq4E1lhoj5yr+HsEdJlbtKDe6 F5Nl7HScAuDrU4uq+PrqOL3L7HOxZA0A1pBu7oRZAZGFIsnQfsja77z5GUAIZL98 3wsv4fRzwbpGyfvaBnDwYhH4YP9eoG5G+KSSCVklH20FShOG4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz8Pm2RBRaqe0XOU/C94rbEJxx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTkyZDJhMDEtMDYyMC0z MTg4LTg3NmItZTU5ZmQ2MjUyYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJenMM+SUn/PaAmSvWO9mkxD6hUWs7WN7VHDOQ29Sdf0OSsMbs6WRe66 0Np5KGofadusqH9PJRnn0VhIZiH2dBg+g0uB4ozzil1bnwwlwuqT9T/x2SnPYyav RFE//0gp+HqgW2bcK7BzvXiU9wX2e4A/TW0BUMgLvRKDon0fXlTEm0m7qhxLAcx4 nnXi2ZITcWMnr1wTTTDwYfwvl7bfgTHDVHLm+aDFVS3xNIJ7eASbSVWRKvi0YaME R7vJy0z4Cm4SmFEj6iTCnWfgWt5f+MECE4EIbuACZNrivXWmhWae+4FCCe70AE2t BZkED80V/G5h1fXjPvQkENc97FTw98E= -----END CERTIFICATE-----Generated at Mon Jun 16 09:58:45 2025 by rpki-client