$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa File: 452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa (raw, json) Hash identifier: JUbe+Vs+xAdlD9Qrv13Zw9swKOAUqCbRyC8QoY+1PoI= Subject key identifier: 41:6A:8B:CA:57:77:10:4A:9F:69:42:55:8D:F0:1C:A6:AC:85:84:D2 Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Certificate serial: 010D0C9F43285849A1EF6A681BA8158B8E75A310 Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 395494 IP address blocks: 72.19.28.0/24 maxlen: 24 72.19.29.0/24 maxlen: 24 72.19.30.0/24 maxlen: 24 72.19.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6a:68:1b:a8:15:8b:8e:75:a3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=10690d2c-fd49-4d28-9950-1d22a12d2369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1b:8d:79:0f:c3:42:13:30:37:a5:45:01:a6: 41:66:99:11:87:1b:9c:b1:88:06:06:04:17:39:16: 7f:2d:35:ab:dc:2c:b6:68:b5:94:70:b0:62:dd:d3: d2:e0:41:eb:42:53:12:bb:7a:7e:f5:d5:da:48:38: c0:9b:c6:64:12:dc:d2:22:1c:6b:0a:1f:dd:9a:ad: 4c:48:7b:6c:68:67:7b:eb:c0:a2:6d:a6:c5:9c:ec: 32:00:07:21:5a:f4:21:b7:52:fd:11:e8:92:b6:b9: 42:e6:33:f2:c1:56:4b:90:4c:94:9a:f7:28:dc:f3: 7b:36:3d:b9:79:9f:a4:c2:52:63:90:8d:92:d3:39: 46:2b:5b:56:83:ae:04:7f:d2:de:97:df:e1:d0:85: 90:53:24:0a:82:22:a3:ec:66:5c:59:bf:59:a7:14: a2:62:7b:1c:cb:6a:47:3d:8e:98:d6:ef:93:fa:1e: bf:12:70:47:96:2a:ff:df:bd:af:26:05:87:92:d9: 99:0a:bd:bf:4a:e6:f4:5b:2e:bb:58:bd:62:72:d4: 46:4e:bc:da:fc:b8:17:6a:7a:82:71:4d:fa:17:9f: 9b:88:3f:08:6d:30:62:8a:6b:e3:93:c5:e8:af:61: 58:61:1c:f0:0c:d2:2b:00:5e:69:06:8e:e9:51:bb: 00:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6A:8B:CA:57:77:10:4A:9F:69:42:55:8D:F0:1C:A6:AC:85:84:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl X509v3 Authority Key Identifier: keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer sbgp-ipAddrBlock: critical IPv4: 72.19.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:36:c2:5b:d7:37:85:56:d5:4d:d9:af:6d:fa:d4:79:06:f4: c7:33:9f:84:5c:de:b9:04:ee:8d:e5:db:b9:a9:3d:77:e4:10: 98:53:59:a2:c5:8c:77:6b:5b:b7:8e:8a:c7:c1:51:53:a6:e3: 25:ee:90:97:71:74:c3:19:a7:b8:4e:90:1c:ef:84:dd:36:4e: 4e:08:a4:97:07:68:bf:67:c2:6f:58:ff:b3:52:84:d7:cd:ec: 89:88:b7:cf:7f:9f:9c:11:6e:b6:5f:2e:17:98:6c:af:01:51: a4:88:fe:d4:5a:34:fd:5c:37:a5:03:29:18:dc:3d:a5:8f:cb: ba:c6:1f:f2:c6:ef:93:b0:0a:e0:1c:47:24:51:ab:0b:ad:e9: 7a:1c:48:11:bb:ca:e7:01:ea:ae:e3:66:40:0b:e2:1e:8c:3e: 74:28:12:e9:e4:77:6c:b5:14:3c:37:6b:d8:a9:f1:60:99:8b: 99:37:14:58:60:e4:77:9c:ee:9f:f1:a7:95:51:5c:7c:24:78: 39:a1:a5:4f:03:80:71:3b:2d:47:62:69:d7:c4:17:41:f5:64: 9c:ef:a3:6c:d2:4f:4c:c4:9d:3c:f0:19:99:75:09:cf:95:9e: f2:a3:d5:c6:37:64:e2:20:be:f8:c0:f9:5f:0d:66:d2:d7:d6: 26:43:27:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh72poG6gVi451oxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZDhlODMtOGVhYS00ZTI1LThkYTgtMmYzOTc4YWRh NmQxMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MTA2OTBkMmMtZmQ0OS00ZDI4LTk5NTAtMWQyMmExMmQyMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhuNeQ/DQhMwN6VFAaZBZpkRhxucsYgGBgQX ORZ/LTWr3Cy2aLWUcLBi3dPS4EHrQlMSu3p+9dXaSDjAm8ZkEtzSIhxrCh/dmq1M SHtsaGd768CibabFnOwyAAchWvQht1L9EeiStrlC5jPywVZLkEyUmvco3PN7Nj25 eZ+kwlJjkI2S0zlGK1tWg64Ef9Lel9/h0IWQUyQKgiKj7GZcWb9ZpxSiYnscy2pH PY6Y1u+T+h6/EnBHlir/372vJgWHktmZCr2/Sub0Wy67WL1ictRGTrza/LgXanqC cU36F5+biD8IbTBiimvjk8Xor2FYYRzwDNIrAF5pBo7pUbsAxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFqi8pXdxBKn2lCVY3wHKashYTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdk OGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5NzhhZGE2ZDEvNDUyZjhkZDktNDg2Ny0z ZWU1LWIzYjAtZDQzOTMwZjE1ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTk3ZDhlODMtOGVhYS00ZTI1LThk YTgtMmYzOTc4YWRhNmQxLzk5N2Q4ZTgzLThlYWEtNGUyNS04ZGE4LTJmMzk3OGFk YTZkMS5jcmwwHwYDVR0jBBgwFoAU1oD4g2BkUBMlwk/VOz/xnZ0Jwt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdkOGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5 NzhhZGE2ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo2wlvXN4VW1U3Zr2361HkG9Mczn4Rc3rkE7o3l27mpPXfkEJhTWaLF jHdrW7eOisfBUVOm4yXukJdxdMMZp7hOkBzvhN02Tk4IpJcHaL9nwm9Y/7NShNfN 7ImIt89/n5wRbrZfLheYbK8BUaSI/tRaNP1cN6UDKRjcPaWPy7rGH/LG75OwCuAc RyRRqwut6XocSBG7yucB6q7jZkAL4h6MPnQoEunkd2y1FDw3a9ip8WCZi5k3FFhg 5Hec7p/xp5VRXHwkeDmhpU8DgHE7LUdiadfEF0H1ZJzvo2zST0zEnTzwGZl1Cc+V nvKj1cY3ZOIgvvjA+V8NZtLX1iZDJ1Q= -----END CERTIFICATE-----Generated at Mon Apr 28 23:37:46 2025 by rpki-client