$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa File: cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa (raw, json) Hash identifier: 8bxtf3R5Ey0Yba8wzOjtWnUNXkFBP248gT44g5ZBV+U= Subject key identifier: 65:14:BF:93:3A:7B:96:A7:20:0E:82:31:C8:0B:28:05:70:38:29:86 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849998F40FBF222078D9785CA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 22773 IP address blocks: 72.194.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:40:fb:f2:22:07:8d:97:85:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=750ee985-915e-41c0-beeb-0555280200a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:2a:bd:81:1e:88:6e:2b:f3:72:fc:4a:64: 02:d5:cf:50:4e:7b:03:26:03:ef:df:ee:97:47:7c: 0f:6d:f8:3f:47:47:d2:b3:97:aa:16:4d:4c:51:23: 5a:2c:cd:2f:c2:d2:82:b3:48:37:6b:f8:ed:a5:a4: e9:73:ad:51:66:b2:52:d6:d8:74:a3:0a:10:03:2d: 52:1a:cd:66:44:62:52:0e:6f:d3:43:07:82:f0:40: 39:6f:c5:af:81:29:50:81:1c:c3:30:93:70:98:b0: 0e:75:b5:1d:d5:ab:41:2c:dc:af:83:63:7d:18:a8: 38:bc:9e:be:46:55:22:ba:23:20:8e:dc:1c:81:51: 22:23:bf:32:cd:54:e0:84:46:cc:c9:87:c8:12:13: df:74:62:c4:51:10:e8:1f:a1:37:f1:57:bf:51:fa: f6:22:54:ad:4d:1e:e5:72:a1:58:12:35:57:de:e2: c0:44:ef:2b:c7:eb:eb:aa:fb:cb:dc:fd:54:bf:c7: 42:24:2b:70:17:da:b4:f4:23:6a:15:85:92:07:b7: 40:98:45:61:1d:45:08:1e:14:d5:a8:cb:20:1e:74: 6e:35:cd:33:fd:e7:9b:e7:4f:00:e4:a8:2e:7a:20: bb:c5:a0:20:57:af:e7:30:ee:e3:d4:6f:4e:39:63: 16:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:14:BF:93:3A:7B:96:A7:20:0E:82:31:C8:0B:28:05:70:38:29:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.194.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:77:f2:93:80:55:8c:c7:ed:34:b1:74:f8:cf:90:ca:87:7e: 4c:bb:c5:ff:4a:c7:67:62:fc:36:a1:27:c9:90:dd:9b:f7:7c: 65:40:c3:51:bd:59:c8:78:b2:e9:2e:31:d3:c1:76:c5:ad:90: e7:09:b8:21:22:9e:78:8a:55:ec:69:54:f3:8c:85:22:80:8b: 5c:bb:93:a6:2b:78:91:45:08:96:7c:5f:3d:c7:66:77:59:d7: e0:f5:50:aa:e4:a7:34:19:d7:b6:bb:89:99:2f:a2:92:1a:b1: a0:59:e9:70:bd:12:7b:58:cd:0e:44:5b:d2:f3:eb:79:de:62: c3:91:38:ea:d3:69:f2:f0:89:87:93:4f:3c:ca:3b:fc:15:f0: 5f:03:bc:46:3a:6d:34:f4:b8:97:5d:d6:0a:05:2b:33:40:76: 00:5b:4a:b7:83:ff:c3:9c:e6:7f:9c:97:6a:c6:69:89:74:52: 6c:75:b8:f2:92:42:ea:05:e5:ea:87:17:bc:2d:19:6f:d5:83: 38:14:76:31:5d:c5:54:8a:49:03:f3:aa:2d:6f:9b:82:6d:87: f2:bc:b3:cb:e6:ae:57:aa:56:53:b2:13:cc:ec:64:85:14:93: 4c:49:a2:28:97:18:cd:df:85:1e:a2:e0:b8:cb:30:37:b6:1d: c6:cf:6c:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZj0D78iIHjZeFygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk NzUwZWU5ODUtOTE1ZS00MWMwLWJlZWItMDU1NTI4MDIwMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCAqvYEeiG4r83L8SmQC1c9QTnsDJgPv3+6X R3wPbfg/R0fSs5eqFk1MUSNaLM0vwtKCs0g3a/jtpaTpc61RZrJS1th0owoQAy1S Gs1mRGJSDm/TQweC8EA5b8WvgSlQgRzDMJNwmLAOdbUd1atBLNyvg2N9GKg4vJ6+ RlUiuiMgjtwcgVEiI78yzVTghEbMyYfIEhPfdGLEURDoH6E38Ve/Ufr2IlStTR7l cqFYEjVX3uLARO8rx+vrqvvL3P1Uv8dCJCtwF9q09CNqFYWSB7dAmEVhHUUIHhTV qMsgHnRuNc0z/eeb508A5KgueiC7xaAgV6/nMO7j1G9OOWMWVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUUv5M6e5anIA6CMcgLKAVwOCmGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2QzNWFhYjgtMzA4Ny0z NmExLWEyNDItYTVlMWFhZGI2ZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESMLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKp38pOAVYzH7TSxdPjPkMqHfky7xf9Kx2di/DahJ8mQ3Zv3fGVAw1G9 Wch4sukuMdPBdsWtkOcJuCEinniKVexpVPOMhSKAi1y7k6YreJFFCJZ8Xz3HZndZ 1+D1UKrkpzQZ17a7iZkvopIasaBZ6XC9EntYzQ5EW9Lz63neYsOROOrTafLwiYeT TzzKO/wV8F8DvEY6bTT0uJdd1goFKzNAdgBbSreD/8Oc5n+cl2rGaYl0Umx1uPKS QuoF5eqHF7wtGW/VgzgUdjFdxVSKSQPzqi1vm4Jth/K8s8vmrleqVlOyE8zsZIUU k0xJoiiXGM3fhR6i4LjLMDe2HcbPbIg= -----END CERTIFICATE-----Generated at Sun Apr 27 02:18:43 2025 by rpki-client