$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa File: 893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa (raw, json) Hash identifier: nAtJOLZVRN8NhHc4KUXmL/ZA/4NOBYuYrrYUbh8SM+s= Subject key identifier: 0A:13:8A:14:FA:09:95:7B:EA:21:D3:85:6C:F9:4B:9B:6E:45:ED:AB Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584A0D6A8272CA7CCFE5201A7F80 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 834 IP address blocks: 72.9.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:82:72:ca:7c:cf:e5:20:1a:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=144f0bf8-e93e-4517-9eab-d6312817f042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e6:14:ce:5a:c8:42:2a:ab:6a:70:23:ae:d9: 7e:b6:ca:ec:a9:7c:55:06:90:7c:fa:0b:e0:84:80: e7:5e:12:c0:27:23:b8:84:69:26:a2:3b:d5:6e:07: 91:ca:18:7a:6f:d6:6e:61:cd:ed:02:87:f2:9e:be: 6a:18:53:11:f8:82:98:c8:b1:38:52:50:72:2b:85: 02:84:b3:02:f0:16:80:9b:8f:3e:bf:89:fd:0d:d2: 88:3b:56:9c:30:68:4f:25:f8:40:79:84:b8:f2:76: 9f:24:8c:c7:ff:c0:1f:41:7f:2d:30:18:e0:fa:ac: 39:08:f4:6f:61:9d:12:79:dc:c4:32:06:69:a4:c2: 01:dd:de:da:6d:6d:48:67:26:2e:18:8b:66:d7:f1: 8d:a6:32:3a:45:17:f1:47:0a:2a:77:6c:90:50:19: 5d:c2:09:d2:b1:60:6f:32:b2:e8:e8:63:10:30:bc: 47:5e:a9:de:52:1a:a4:e4:d8:ec:d4:2b:8f:d2:07: dc:9f:4f:de:08:06:4c:c1:1d:f5:2a:13:6d:e8:25: 5c:1d:84:04:5c:67:24:76:10:2b:5b:1c:8d:67:51: c0:43:dc:11:0a:fc:f6:5b:ea:b6:4e:9d:2c:a8:eb: dd:60:99:35:ae:ca:93:83:15:00:9a:8f:86:95:81: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:13:8A:14:FA:09:95:7B:EA:21:D3:85:6C:F9:4B:9B:6E:45:ED:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:41:76:b5:7d:5d:e7:68:fd:ad:d9:ab:70:4f:b4:45:9c:cd: 20:c4:55:b7:20:cf:6a:6d:5d:11:7f:51:4a:7c:14:01:de:cb: 73:c6:b3:59:78:93:4e:b1:00:2d:1b:b3:04:78:4e:ca:f2:31: 06:2d:cc:9e:a4:56:39:2c:6c:57:5f:30:0b:97:38:c7:6d:fe: 23:ed:76:e6:23:8c:60:0b:db:28:17:1b:8d:25:da:02:79:bf: e5:39:5f:f7:97:40:61:9a:cb:5c:3f:d8:70:d9:64:4f:f1:39: 5e:49:2d:64:85:11:49:46:e4:c5:09:7a:a5:67:d4:b5:e2:b6: 7d:0a:09:ca:52:f1:7c:0c:c4:ac:3f:26:ae:00:40:fd:cb:29: 03:3b:09:78:8c:df:d0:33:e7:ce:02:d1:98:c2:e9:80:df:9e: 10:2b:47:e8:fc:aa:15:49:96:ef:c9:dd:ad:db:c5:01:33:2c: 3a:1f:07:f9:3f:ee:c9:10:dc:18:bd:95:d9:b3:a9:d1:90:de: 13:5d:29:e4:ab:f1:b4:05:4a:fe:ea:7b:7b:36:9a:9b:f2:32: 3a:31:68:16:0b:47:6e:23:ff:71:b7:74:c3:93:d1:2c:5e:bf: 0f:4d:20:19:97:15:91:9b:d4:07:9c:fe:05:48:c4:8d:40:a9: 3e:83:97:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoJyynzP5SAaf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk MTQ0ZjBiZjgtZTkzZS00NTE3LTllYWItZDYzMTI4MTdmMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOYUzlrIQiqranAjrtl+tsrsqXxVBpB8+gvg hIDnXhLAJyO4hGkmojvVbgeRyhh6b9ZuYc3tAofynr5qGFMR+IKYyLE4UlByK4UC hLMC8BaAm48+v4n9DdKIO1acMGhPJfhAeYS48nafJIzH/8AfQX8tMBjg+qw5CPRv YZ0SedzEMgZppMIB3d7abW1IZyYuGItm1/GNpjI6RRfxRwoqd2yQUBldwgnSsWBv MrLo6GMQMLxHXqneUhqk5Njs1CuP0gfcn0/eCAZMwR31KhNt6CVcHYQEXGckdhAr WxyNZ1HAQ9wRCvz2W+q2Tp0sqOvdYJk1rsqTgxUAmo+GlYFzHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoTihT6CZV76iHThWz5S5tuRe2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvODkzYzRhODEtOWY2Ni0z MzljLThjNzMtZmM1ZmU0NGZkZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSAniMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZBdrV9Xedo/a3Zq3BPtEWczSDEVbcgz2ptXRF/UUp8FAHey3PGs1l4 k06xAC0bswR4TsryMQYtzJ6kVjksbFdfMAuXOMdt/iPtduYjjGAL2ygXG40l2gJ5 v+U5X/eXQGGay1w/2HDZZE/xOV5JLWSFEUlG5MUJeqVn1LXitn0KCcpS8XwMxKw/ Jq4AQP3LKQM7CXiM39Az584C0ZjC6YDfnhArR+j8qhVJlu/J3a3bxQEzLDofB/k/ 7skQ3Bi9ldmzqdGQ3hNdKeSr8bQFSv7qe3s2mpvyMjoxaBYLR24j/3G3dMOT0Sxe vw9NIBmXFZGb1Aec/gVIxI1AqT6Dl3w= -----END CERTIFICATE-----Generated at Sun Jun 15 12:04:04 2025 by rpki-client