$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b95c0a0-e9c6-369e-a5a0-471a1c0f6e43.roa File: 6b95c0a0-e9c6-369e-a5a0-471a1c0f6e43.roa (raw, json) Hash identifier: 5yZ3+iy6qdtGVaHerJMS/vrdgRkEz6mH3uEm3duxgMw= Subject key identifier: 09:59:8A:2A:90:7A:16:0A:98:3D:6B:BD:F1:C7:08:5A:DA:5C:E0:05 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848FD018C55FD486080110C4D80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b95c0a0-e9c6-369e-a5a0-471a1c0f6e43.roa Signing time: Mon 24 Feb 2025 11:09:31 +0000 ROA not before: Mon 24 Feb 2025 11:09:31 +0000 ROA not after: Sun 25 May 2025 10:09:31 +0000 asID: 30036 IP address blocks: 72.255.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:01:8c:55:fd:48:60:80:11:0c:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 24 11:09:31 2025 GMT Not After : May 25 10:09:31 2025 GMT Subject: CN=87c66037-f407-45f7-aca6-d475c1612650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6b:b6:84:69:41:de:6b:29:86:1b:dd:8c:e7: 30:bc:bc:35:75:3c:56:5c:71:f1:cf:f9:f6:75:3c: 62:0f:2b:17:5f:35:a5:d1:74:ae:b3:93:f3:b6:bf: c1:f3:02:2a:6b:da:5e:f1:7c:46:81:77:fb:b2:eb: 93:6b:9e:50:80:8d:ce:b7:7e:a8:4b:9a:de:77:41: d8:fc:2a:cc:9a:47:b7:46:ce:b4:ef:2f:00:08:7b: 05:09:95:c9:cd:48:a0:24:de:60:e5:a1:ee:72:ca: 72:f2:a3:75:ec:86:5e:82:0b:a6:15:a0:9b:c2:3a: ba:78:0a:37:4e:2e:fb:4d:ec:98:b4:7a:6b:95:82: 84:90:b1:3e:eb:b8:c2:b2:f3:3f:7d:a2:64:f2:1e: d2:c8:ae:b9:86:a6:f3:2a:4e:5a:25:ff:b6:7d:4c: 88:25:6f:e2:50:21:3f:9e:07:d6:75:d5:79:f1:f8: 0c:85:18:fc:cc:9e:ad:e8:6a:6e:53:4f:b2:d2:5b: 41:fb:80:93:b6:cd:b5:ba:00:d9:82:8b:ed:f4:9c: d4:c3:fb:0d:15:e9:8d:42:33:4a:ba:0a:65:78:57: 42:0d:f3:c3:22:b4:63:48:3f:fb:2c:66:8f:21:42: 1b:62:56:19:e2:05:73:f1:ff:f2:76:3c:c1:66:e0: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:59:8A:2A:90:7A:16:0A:98:3D:6B:BD:F1:C7:08:5A:DA:5C:E0:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b95c0a0-e9c6-369e-a5a0-471a1c0f6e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:52:af:2e:98:68:6b:7b:55:a0:b2:77:90:9a:fa:c8:58:79: d7:5d:10:1f:9d:f5:90:5f:ce:b7:0c:fa:7a:17:f7:7f:11:12: b4:0c:d0:2d:7e:fa:d4:39:52:26:af:6c:ea:b9:a0:6c:1d:da: 79:46:44:26:41:a3:38:bc:77:7a:83:fd:8b:9d:c6:20:51:da: a6:12:27:ba:c7:1d:a8:53:64:fb:88:02:df:be:4e:88:3b:7a: ee:be:0a:1c:b9:7d:39:43:7e:93:3d:c4:12:fb:16:51:bb:84: 69:ac:6f:ec:80:57:e2:69:91:ef:ec:b3:10:bb:58:6f:76:14: a3:cc:dc:06:3b:2b:77:ae:9f:19:1d:33:84:2b:d7:63:64:1e: 48:73:1f:77:ce:27:f3:53:17:79:a7:3c:fd:3f:68:1e:52:91: be:33:71:61:02:e4:6a:c5:b4:23:98:a9:f8:9c:58:0e:b5:c9: 60:d7:aa:30:d0:d1:e0:96:4c:65:1d:fe:41:8a:4a:66:56:37: 8e:09:a5:49:de:f4:b1:f0:35:81:f9:d6:ac:95:f1:63:19:2c: aa:a5:37:23:84:fd:52:6b:ef:c9:cc:e3:1b:8b:ea:48:42:e9: ce:85:a1:41:58:2f:66:d5:db:22:78:a9:2d:9d:68:fa:ba:b9: 12:78:0e:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9AYxV/UhggBEMTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNDExMDkzMVoXDTI1MDUyNTEwMDkzMVowLzEtMCsGA1UEAxMk ODdjNjYwMzctZjQwNy00NWY3LWFjYTYtZDQ3NWMxNjEyNjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWu2hGlB3msphhvdjOcwvLw1dTxWXHHxz/n2 dTxiDysXXzWl0XSus5Pztr/B8wIqa9pe8XxGgXf7suuTa55QgI3Ot36oS5red0HY /CrMmke3Rs607y8ACHsFCZXJzUigJN5g5aHucspy8qN17IZeggumFaCbwjq6eAo3 Ti77TeyYtHprlYKEkLE+67jCsvM/faJk8h7SyK65hqbzKk5aJf+2fUyIJW/iUCE/ ngfWddV58fgMhRj8zJ6t6GpuU0+y0ltB+4CTts21ugDZgovt9JzUw/sNFemNQjNK ugpleFdCDfPDIrRjSD/7LGaPIUIbYlYZ4gVz8f/ydjzBZuCVbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlZiiqQehYKmD1rvfHHCFraXOAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmI5NWMwYTAtZTljNi0z NjllLWE1YTAtNDcxYTFjMGY2ZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5Sry6YaGt7VaCyd5Ca+shYedddEB+d9ZBfzrcM+noX938RErQM0C1+ +tQ5UiavbOq5oGwd2nlGRCZBozi8d3qD/YudxiBR2qYSJ7rHHahTZPuIAt++Tog7 eu6+Chy5fTlDfpM9xBL7FlG7hGmsb+yAV+Jpke/ssxC7WG92FKPM3AY7K3eunxkd M4Qr12NkHkhzH3fOJ/NTF3mnPP0/aB5Skb4zcWEC5GrFtCOYqficWA61yWDXqjDQ 0eCWTGUd/kGKSmZWN44JpUne9LHwNYH51qyV8WMZLKqlNyOE/VJr78nM4xuL6khC 6c6FoUFYL2bV2yJ4qS2daPq6uRJ4Dk4= -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:56 2025 by rpki-client