$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d11c870e-af91-324b-b645-a4566a97576d.roa File: d11c870e-af91-324b-b645-a4566a97576d.roa (raw, json) Hash identifier: aFZLZ7i7slg1i6fxCebdXXVV0JaL/KC5UArGwG6TL88= Subject key identifier: A5:2D:8F:A8:D7:2C:8D:83:88:39:4B:9A:DA:3D:58:83:37:81:9F:35 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584993F9E220D9C80171CAB33940 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d11c870e-af91-324b-b645-a4566a97576d.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 4213 IP address blocks: 72.172.85.0/24 maxlen: 24 72.172.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e2:20:d9:c8:01:71:ca:b3:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=2b181f0b-9d82-4b96-805e-29fc677afaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8f:29:e3:71:7d:9c:99:38:74:1b:60:6b:93: 9f:70:01:35:98:ab:c9:1f:f5:96:66:4d:dc:56:1d: ae:ed:57:98:3c:50:8a:d2:a9:b1:a6:75:29:31:00: e2:dd:83:08:98:46:ad:c0:f5:46:b1:a0:22:82:33: fb:5b:f3:80:42:9f:9f:9b:56:6f:d0:30:97:1d:e7: 25:ab:d5:0b:78:71:8a:55:31:c2:11:f6:41:bf:28: a3:6c:bc:45:ae:4c:21:05:a2:f7:23:35:b6:43:6b: 9a:ad:d3:fc:86:38:25:08:0d:30:0b:7b:12:63:79: 8a:74:1c:cb:88:14:2c:06:75:cc:2c:5d:cf:a3:ae: 76:9e:79:b4:e3:43:52:f8:46:46:c9:ee:3f:e1:8e: 29:67:1f:90:6f:6e:af:4d:79:88:a7:cf:b9:a1:cd: e0:ff:8a:89:0d:4e:d5:d1:0d:ec:fa:a7:7a:bc:5f: db:97:78:cb:c6:7e:3b:b5:e3:21:50:9d:87:5a:60: 69:e4:bd:78:73:51:f8:4d:d0:0a:fc:09:e1:55:52: 14:c3:3c:1f:d9:4b:c9:6a:1d:94:a6:26:81:d1:d2: cb:40:76:4d:77:9a:f3:aa:f5:1a:6c:a1:56:d8:01: 3e:1c:fe:b9:0f:3f:20:a9:29:5f:fc:2e:62:54:80: 59:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2D:8F:A8:D7:2C:8D:83:88:39:4B:9A:DA:3D:58:83:37:81:9F:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d11c870e-af91-324b-b645-a4566a97576d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 72.172.85.0/24 72.172.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:19:93:fa:91:2e:36:fa:c7:9d:76:55:c9:00:54:72:f9:84: 27:0b:7f:46:e1:b8:5c:6c:46:5b:85:15:f9:b6:90:ad:bd:64: b0:48:65:db:68:6a:f6:3e:6f:98:7f:51:8a:da:46:e5:62:b9: 20:eb:a6:f7:8e:4b:0d:0b:8b:bd:cb:a9:02:36:25:9f:45:5b: 64:7d:b1:26:a7:2f:0b:38:b7:00:ce:d2:d4:ae:d3:3c:56:8d: 1a:ff:b3:fa:78:d1:6f:78:e4:4b:26:56:53:0d:6d:69:d9:26: 90:e5:07:dd:fa:96:c9:04:75:5b:11:a8:75:2a:f3:e9:2e:93: c1:3e:88:c1:c3:0c:a9:17:4f:d1:df:15:12:86:bf:49:36:99: ed:2d:35:d6:68:7a:ba:2c:7a:8f:bc:67:e9:71:6e:d9:3a:87: 3e:2a:bc:bc:56:90:8a:f9:6b:1c:6e:91:23:96:96:ed:9f:7b: 6b:63:e3:18:62:5e:43:f4:a9:4f:d1:3d:f7:a7:12:65:50:e5: 46:f3:b7:d1:4c:8a:6c:cd:33:4e:9f:ee:57:aa:7b:d5:ee:f0: b8:f6:53:78:b7:19:73:86:7b:26:9a:29:69:ee:7a:82:b6:9b: b2:74:64:25:82:e1:ec:14:1f:71:97:d6:54:61:ac:37:36:b8: e7:7b:3c:06 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmT+eIg2cgBccqzOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MmIxODFmMGItOWQ4Mi00Yjk2LTgwNWUtMjlmYzY3N2FmYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho8p43F9nJk4dBtga5OfcAE1mKvJH/WWZk3c Vh2u7VeYPFCK0qmxpnUpMQDi3YMImEatwPVGsaAigjP7W/OAQp+fm1Zv0DCXHecl q9ULeHGKVTHCEfZBvyijbLxFrkwhBaL3IzW2Q2uardP8hjglCA0wC3sSY3mKdBzL iBQsBnXMLF3Po652nnm040NS+EZGye4/4Y4pZx+Qb26vTXmIp8+5oc3g/4qJDU7V 0Q3s+qd6vF/bl3jLxn47teMhUJ2HWmBp5L14c1H4TdAK/AnhVVIUwzwf2UvJah2U piaB0dLLQHZNd5rzqvUabKFW2AE+HP65Dz8gqSlf/C5iVIBZmQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKUtj6jXLI2DiDlLmto9WIM3gZ81MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZDExYzg3MGUtYWY5MS0z MjRiLWI2NDUtYTQ1NjZhOTc1NzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASKxVAwQA SKxYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEoZk/qRLjb6x512VckAVHL5hCcLf0bhuFxsRluFFfm2kK29 ZLBIZdtoavY+b5h/UYraRuViuSDrpveOSw0Li73LqQI2JZ9FW2R9sSanLws4twDO 0tSu0zxWjRr/s/p40W945EsmVlMNbWnZJpDlB936lskEdVsRqHUq8+kuk8E+iMHD DKkXT9HfFRKGv0k2me0tNdZoeroseo+8Z+lxbtk6hz4qvLxWkIr5axxukSOWlu2f e2tj4xhiXkP0qU/RPfenEmVQ5Ubzt9FMimzNM06f7leqe9Xu8Lj2U3i3GXOGeyaa KWnueoK2m7J0ZCWC4ewUH3GX1lRhrDc2uOd7PAY= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:11 2025 by rpki-client