$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a70cc90b-824d-3edf-9d0f-08d86f66f7f7.roa File: a70cc90b-824d-3edf-9d0f-08d86f66f7f7.roa (raw, json) Hash identifier: vOouwAUvOLryDDmxiz8DvGK2Le4OnzGziNrOvFA2RF0= Subject key identifier: 4C:69:89:AA:42:04:B4:B9:C7:3B:85:75:C4:44:DA:51:4C:DD:84:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849DF5A799F91D5F93BADE8B640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a70cc90b-824d-3edf-9d0f-08d86f66f7f7.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 22773 IP address blocks: 72.194.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:79:9f:91:d5:f9:3b:ad:e8:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=eb8d9a57-70a9-4ce2-bf81-c27a25e36576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:32:cd:4c:29:7c:ab:fa:68:66:3a:2e:a7: e2:47:6f:17:0f:ae:f6:38:3f:ce:67:dd:7a:12:d5: be:05:b9:23:70:bc:40:5c:5f:29:39:25:c5:36:76: a0:56:53:97:08:a4:62:8b:1e:62:02:af:95:03:89: 58:bb:d2:a2:d4:40:b5:77:4c:1f:0a:79:d0:d0:a9: 93:01:1a:88:36:9b:58:c8:52:c4:ca:24:ff:6e:c9: ca:eb:99:38:4c:85:ba:3d:e1:86:ff:66:2a:96:bb: cf:4e:29:47:9c:10:a0:30:da:af:c1:a1:5c:d2:83: 16:d2:be:66:a4:10:03:b1:fd:36:24:59:52:ab:8c: fe:f3:16:14:08:d3:a9:22:ac:af:21:05:17:f8:b3: c8:91:ea:7c:a1:87:c4:e8:c3:50:ad:26:97:81:39: 65:09:ce:99:ff:32:f4:7b:83:d8:a2:89:b3:2a:3c: a7:c3:b5:1c:3b:96:88:00:60:46:07:54:06:ff:7f: c5:c3:62:7d:4c:62:c4:01:74:85:a9:54:8e:34:7e: 40:99:4f:7d:e7:17:c4:4d:0c:66:12:97:70:0c:96: 73:65:c6:b1:49:bd:f9:30:f9:9c:f0:54:26:2b:b2: 62:21:42:a8:b1:ef:a3:23:3c:c0:71:9e:9b:80:fc: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:69:89:AA:42:04:B4:B9:C7:3B:85:75:C4:44:DA:51:4C:DD:84:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a70cc90b-824d-3edf-9d0f-08d86f66f7f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.194.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:cb:1c:86:2d:ba:93:1a:4a:d6:af:d2:62:16:bf:c7:e9:9a: 06:29:a1:ef:c5:9d:54:94:02:69:f3:e9:75:a2:6a:31:1b:cc: 6f:09:cc:52:3d:27:c3:44:d5:32:db:69:f6:ef:89:57:28:ee: 8b:6f:af:95:20:90:13:ab:f4:02:5c:ba:46:3a:ff:6b:94:11: 73:11:a8:be:16:8f:cc:1d:73:69:ca:7b:db:65:3e:06:9a:01: 86:02:0e:d1:d0:c5:3f:2a:2b:32:c1:67:e6:bb:d5:a1:c4:43: 4a:80:d8:83:47:10:9e:ff:87:a5:b2:21:28:6e:c3:8a:1f:4a: 86:e0:1e:ea:a5:bb:1f:b9:b6:81:f9:d1:63:6a:3c:1e:31:d5: b8:ba:ca:a7:c8:9c:fd:28:24:a2:78:28:e6:8a:8c:f9:f3:1f: 76:3d:6c:c6:63:d3:8c:ca:b0:1e:f3:59:2f:81:f7:a6:ad:b5: 9a:af:d3:69:6c:69:11:5c:de:25:65:10:19:ad:d3:2b:10:8f: 7c:b9:a9:ca:99:a9:98:69:7d:d2:25:c0:88:b2:ea:5b:a8:74: 8a:b8:c6:5e:4c:a3:6f:d7:6f:ef:8d:31:a1:e4:bc:98:c8:49: 58:86:c9:0a:30:fe:a4:4d:d1:a4:c8:b7:bd:05:7b:3d:5c:05: 14:55:b3:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnmfkdX5O63otkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZWI4ZDlhNTctNzBhOS00Y2UyLWJmODEtYzI3YTI1ZTM2NTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk84yzUwpfKv6aGY6LqfiR28XD672OD/OZ916 EtW+BbkjcLxAXF8pOSXFNnagVlOXCKRiix5iAq+VA4lYu9Ki1EC1d0wfCnnQ0KmT ARqINptYyFLEyiT/bsnK65k4TIW6PeGG/2YqlrvPTilHnBCgMNqvwaFc0oMW0r5m pBADsf02JFlSq4z+8xYUCNOpIqyvIQUX+LPIkep8oYfE6MNQrSaXgTllCc6Z/zL0 e4PYoomzKjynw7UcO5aIAGBGB1QG/3/Fw2J9TGLEAXSFqVSONH5AmU995xfETQxm EpdwDJZzZcaxSb35MPmc8FQmK7JiIUKose+jIzzAcZ6bgPzwIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExpiapCBLS5xzuFdcRE2lFM3YSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTcwY2M5MGItODI0ZC0z ZWRmLTlkMGYtMDhkODZmNjZmN2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESMIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErLHIYtupMaStav0mIWv8fpmgYpoe/FnVSUAmnz6XWiajEbzG8JzFI9 J8NE1TLbafbviVco7otvr5UgkBOr9AJcukY6/2uUEXMRqL4Wj8wdc2nKe9tlPgaa AYYCDtHQxT8qKzLBZ+a71aHEQ0qA2INHEJ7/h6WyIShuw4ofSobgHuqlux+5toH5 0WNqPB4x1bi6yqfInP0oJKJ4KOaKjPnzH3Y9bMZj04zKsB7zWS+B96attZqv02ls aRFc3iVlEBmt0ysQj3y5qcqZqZhpfdIlwIiy6luodIq4xl5Mo2/Xb++NMaHkvJjI SViGyQow/qRN0aTIt70Fez1cBRRVs3Q= -----END CERTIFICATE-----Generated at Mon Jun 16 04:12:54 2025 by rpki-client