$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5a3099c6-e346-3491-bde9-84061b37cc95.roa File: 5a3099c6-e346-3491-bde9-84061b37cc95.roa (raw, json) Hash identifier: LJ55iXXkTBRYXfrHGlkfxM/zJ3/fX4wM9QowSR5LMTo= Subject key identifier: F0:4F:A1:43:86:BE:69:4A:FD:1C:F7:AD:9C:86:E2:A5:96:21:C6:B5 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F432858498FC9BBDC7D2FC0B9FCF41180 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5a3099c6-e346-3491-bde9-84061b37cc95.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 63062 IP address blocks: 72.170.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:bb:dc:7d:2f:c0:b9:fc:f4:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=61a0623f-926a-499d-b400-df62377b5884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:43:94:87:ae:8f:21:18:fe:d4:fb:35:c4:be: 3b:41:18:a5:eb:c1:16:d4:93:a7:98:50:6f:be:f4: 2b:f3:8a:b0:61:c9:96:9d:45:4e:66:40:82:5c:73: 8d:13:1f:c8:17:94:5f:84:be:fa:a6:19:a9:69:4d: fc:89:b2:66:d1:be:58:88:67:95:73:68:cb:4f:b1: 35:35:29:30:7e:91:81:1f:bc:61:51:c5:98:d2:d1: 51:68:5e:5b:a8:3f:70:c6:4c:51:24:0e:0e:82:79: d6:ea:2c:a4:e1:22:64:97:3e:af:db:4a:b3:08:c3: 05:b4:38:6a:35:86:51:f9:8c:fc:0a:a0:64:f8:76: 02:91:59:8d:08:63:7f:95:b0:15:cc:3f:97:94:cc: 2d:2c:cc:60:b5:67:95:81:8a:6f:0b:0d:24:8d:9f: d4:80:ea:3f:c5:4e:38:76:68:6c:1c:79:4d:03:5b: a9:d4:65:a4:d4:92:81:4f:fb:dc:6d:f0:e3:95:a0: 32:0b:37:8b:89:30:98:a5:f3:49:36:77:ae:04:18: b4:cf:c9:87:db:34:93:e2:37:60:18:f3:b7:eb:0d: 1d:a9:18:6a:e3:e6:54:e0:96:54:69:91:27:0b:54: fa:fb:c8:37:49:3e:91:10:5d:7c:b4:51:31:b5:30: 82:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4F:A1:43:86:BE:69:4A:FD:1C:F7:AD:9C:86:E2:A5:96:21:C6:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5a3099c6-e346-3491-bde9-84061b37cc95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 72.170.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:36:6b:2e:15:27:87:58:60:f9:b6:89:26:3e:a9:b9:56:95: f5:a8:8d:a8:20:55:04:06:17:b2:90:f9:fa:7e:16:e1:bb:51: 20:8b:9f:d8:6f:04:fa:ca:42:e1:bb:49:c7:7c:ae:8d:6d:32: 97:0a:37:7d:a8:59:47:66:53:06:57:a2:af:d7:bf:e6:21:9d: 70:6b:9f:88:88:5c:c1:b9:71:49:07:81:67:c9:4b:1b:07:fc: c5:7c:ee:09:87:77:1a:ec:cc:b1:db:71:50:fa:42:b5:27:ca: 8b:8c:55:7e:20:8d:da:a3:51:3d:7a:d4:82:d4:e6:09:8f:0f: 37:6c:61:ad:08:d6:6d:47:b6:20:a3:12:68:22:1d:f1:a4:e6: 1a:c0:14:f8:3c:5d:20:25:8a:57:68:c0:44:bd:7e:42:ac:cb: 0e:86:45:46:fc:e2:68:2e:58:a9:5e:6b:16:3b:53:3e:87:52: e6:59:4f:ce:30:1f:49:36:cc:db:9a:bc:54:5e:1e:3c:41:4b: d8:f5:8b:b9:ce:94:5a:56:a9:49:47:39:57:bc:94:ac:33:99: 99:ea:a5:8b:16:2f:49:e4:64:90:4a:6f:2d:0f:bf:be:1a:46: f2:ff:a6:58:17:0c:74:c2:28:2e:f6:19:ba:9d:51:59:91:95: 57:87:21:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybvcfS/Aufz0EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk NjFhMDYyM2YtOTI2YS00OTlkLWI0MDAtZGY2MjM3N2I1ODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkOUh66PIRj+1Ps1xL47QRil68EW1JOnmFBv vvQr84qwYcmWnUVOZkCCXHONEx/IF5RfhL76phmpaU38ibJm0b5YiGeVc2jLT7E1 NSkwfpGBH7xhUcWY0tFRaF5bqD9wxkxRJA4OgnnW6iyk4SJklz6v20qzCMMFtDhq NYZR+Yz8CqBk+HYCkVmNCGN/lbAVzD+XlMwtLMxgtWeVgYpvCw0kjZ/UgOo/xU44 dmhsHHlNA1up1GWk1JKBT/vcbfDjlaAyCzeLiTCYpfNJNneuBBi0z8mH2zST4jdg GPO36w0dqRhq4+ZU4JZUaZEnC1T6+8g3ST6REF18tFExtTCCxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBPoUOGvmlK/Rz3rZyG4qWWIca1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvNWEzMDk5YzYtZTM0Ni0z NDkxLWJkZTktODQwNjFiMzdjYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASKrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQ2ay4VJ4dYYPm2iSY+qblWlfWojaggVQQGF7KQ+fp+FuG7USCLn9hv BPrKQuG7Scd8ro1tMpcKN32oWUdmUwZXoq/Xv+YhnXBrn4iIXMG5cUkHgWfJSxsH /MV87gmHdxrszLHbcVD6QrUnyouMVX4gjdqjUT161ILU5gmPDzdsYa0I1m1HtiCj EmgiHfGk5hrAFPg8XSAlildowES9fkKsyw6GRUb84mguWKleaxY7Uz6HUuZZT84w H0k2zNuavFReHjxBS9j1i7nOlFpWqUlHOVe8lKwzmZnqpYsWL0nkZJBKby0Pv74a RvL/plgXDHTCKC72GbqdUVmRlVeHISU= -----END CERTIFICATE-----Generated at Wed Apr 30 13:49:39 2025 by rpki-client