$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/920faa16-167f-3f76-aea3-3d03a027c5c3.roa File: 920faa16-167f-3f76-aea3-3d03a027c5c3.roa (raw, json) Hash identifier: XlpfMnCkz9gG5JKcQ48Pdc8kIUO9Uv+7TXGA4wO+Nhc= Subject key identifier: 18:DC:3A:D8:79:FF:D2:D8:D1:3A:EF:E1:B3:B5:9E:25:CC:E5:7B:BB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848FD0909973E4C9278FC36DC80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/920faa16-167f-3f76-aea3-3d03a027c5c3.roa Signing time: Mon 24 Feb 2025 11:24:37 +0000 ROA not before: Mon 24 Feb 2025 11:24:37 +0000 ROA not after: Sun 25 May 2025 10:24:37 +0000 asID: 30036 IP address blocks: 72.255.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:09:09:97:3e:4c:92:78:fc:36:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 24 11:24:37 2025 GMT Not After : May 25 10:24:37 2025 GMT Subject: CN=c53bd850-636b-4e3a-8905-d1b072f58aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:08:d4:f5:32:6d:02:bd:1b:83:58:88:f7:28: 7f:f8:ff:9a:8e:77:fb:0c:b4:97:2e:46:88:19:2e: ce:05:1e:0f:ca:d7:05:ef:c6:b9:79:31:46:e6:ad: d7:37:c9:e0:a1:8a:39:f7:9f:00:d5:6f:38:72:e1: f7:88:7d:73:99:02:fa:b4:42:53:15:1f:68:2c:7b: b6:9c:cb:c5:fc:8b:28:61:74:fd:05:0b:31:d0:2d: 18:38:3c:56:59:76:7f:48:fe:a5:1b:6b:ea:49:6c: c9:f3:6d:58:54:1c:b9:d8:45:a2:11:f6:77:65:0c: b5:c0:5d:04:6d:fd:4e:3d:ca:df:6a:d6:2e:21:11: 6d:43:3b:b5:03:ca:18:fb:a9:b1:2d:50:69:1a:00: 50:82:8e:f2:a4:2a:14:fd:51:d0:af:2e:26:f1:7b: 05:89:c4:d8:5f:be:50:50:8d:5a:90:fb:ad:f9:cd: eb:75:2a:1b:18:95:00:64:dd:db:72:1f:e4:11:1a: 6a:f3:ae:55:58:e1:ba:45:cd:1e:4a:fa:9b:11:f8: bf:29:06:f7:d8:25:89:75:23:62:fa:a8:97:d4:45: 26:37:5c:9b:99:6c:78:51:90:1e:d9:df:7a:03:53: 47:e9:f6:b0:45:eb:80:ac:dd:6c:75:17:14:f5:16: 8e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DC:3A:D8:79:FF:D2:D8:D1:3A:EF:E1:B3:B5:9E:25:CC:E5:7B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/920faa16-167f-3f76-aea3-3d03a027c5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:02:30:60:4b:85:a3:05:e8:3d:2e:94:dd:0d:d1:83:92:cc: 03:41:48:3b:ba:07:28:ec:0d:0a:e9:49:70:42:5f:07:db:cd: 31:60:9e:0d:1d:47:d8:2d:0c:7e:b5:b0:72:05:8d:48:e2:51: cb:13:51:7c:ea:f3:00:2b:19:71:4e:77:02:ba:dd:68:7b:fc: 92:32:6f:17:ab:7d:73:bf:9e:fc:68:12:2f:d5:83:06:32:17: 7b:92:ce:7e:5e:8a:91:10:22:b3:89:7d:03:9a:45:8e:38:f5: 45:28:4c:18:ff:c9:34:47:96:41:4d:61:e6:82:78:c4:d3:02: fd:df:08:30:eb:60:96:b8:cc:ce:89:51:05:a5:41:d1:6d:a5: ca:5f:20:48:87:aa:31:70:ed:b2:c8:09:eb:ef:41:e8:57:4f: e5:04:6b:bb:40:a1:39:47:b1:94:80:ba:d6:45:7b:24:01:1b: e0:a5:1b:62:7f:de:95:00:43:c2:45:ed:7d:08:95:fd:39:0b: de:28:7f:c6:33:96:f7:9f:5a:86:00:99:30:96:86:4f:f5:dc: 48:76:60:81:61:52:16:d2:b5:15:85:f9:f7:4e:56:59:cc:d0: 83:df:93:f0:1f:5b:87:47:96:6f:47:05:a7:e5:98:28:be:ec: 05:89:fb:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9CQmXPkySePw23IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNDExMjQzN1oXDTI1MDUyNTEwMjQzN1owLzEtMCsGA1UEAxMk YzUzYmQ4NTAtNjM2Yi00ZTNhLTg5MDUtZDFiMDcyZjU4YWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QjU9TJtAr0bg1iI9yh/+P+ajnf7DLSXLkaI GS7OBR4PytcF78a5eTFG5q3XN8ngoYo5958A1W84cuH3iH1zmQL6tEJTFR9oLHu2 nMvF/IsoYXT9BQsx0C0YODxWWXZ/SP6lG2vqSWzJ821YVBy52EWiEfZ3ZQy1wF0E bf1OPcrfatYuIRFtQzu1A8oY+6mxLVBpGgBQgo7ypCoU/VHQry4m8XsFicTYX75Q UI1akPut+c3rdSobGJUAZN3bch/kERpq865VWOG6Rc0eSvqbEfi/KQb32CWJdSNi +qiX1EUmN1ybmWx4UZAe2d96A1NH6fawReuArN1sdRcU9RaO1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjcOth5/9LY0Trv4bO1niXM5Xu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTIwZmFhMTYtMTY3Zi0z Zjc2LWFlYTMtM2QwM2EwMjdjNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGACMGBLhaMF6D0ulN0N0YOSzANBSDu6ByjsDQrpSXBCXwfbzTFgng0d R9gtDH61sHIFjUjiUcsTUXzq8wArGXFOdwK63Wh7/JIybxerfXO/nvxoEi/VgwYy F3uSzn5eipEQIrOJfQOaRY449UUoTBj/yTRHlkFNYeaCeMTTAv3fCDDrYJa4zM6J UQWlQdFtpcpfIEiHqjFw7bLICevvQehXT+UEa7tAoTlHsZSAutZFeyQBG+ClG2J/ 3pUAQ8JF7X0Ilf05C94of8YzlvefWoYAmTCWhk/13Eh2YIFhUhbStRWF+fdOVlnM 0IPfk/AfW4dHlm9HBaflmCi+7AWJ+zI= -----END CERTIFICATE-----Generated at Sun Apr 27 16:55:19 2025 by rpki-client