$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa File: cec281ba-09c0-37f8-92de-50b5e586cb84.roa (raw, json) Hash identifier: 54qZYh5yneTmWhlAO7kU9VCoYW07KM3UwBNRvQrJW4I= Subject key identifier: 4C:B6:7A:9F:05:A1:4F:32:73:E9:51:CA:2A:C8:A6:B4:5C:91:90:D0 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9FB56DC773B86C85EF0C0 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 72.51.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fb:56:dc:77:3b:86:c8:5e:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=badf2a5f-bfd7-47f7-a542-673ee433668c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:88:ed:88:e7:a5:66:79:2a:7e:c0:88:65:39: ec:9f:66:2d:2f:06:95:32:fa:28:74:42:f8:f5:3c: f9:53:ee:6c:8d:d3:8c:e4:19:86:0f:c1:c9:13:17: d5:cd:4f:5a:b1:c4:24:ca:59:78:14:d1:f2:47:5b: f7:da:87:37:24:7b:3c:a2:07:e2:5f:d5:e1:ec:53: d0:f3:44:da:36:be:37:39:1a:6b:e3:2c:3a:97:47: 17:06:96:b2:f6:66:87:8b:50:62:39:2d:11:bf:92: 32:8a:9d:ab:fb:d6:dd:06:ed:2e:d5:e9:a2:b7:e6: ea:f1:e2:7b:97:81:01:15:4b:03:29:d0:7e:51:15: 2a:1f:91:bc:1a:9d:d4:32:37:f5:33:ba:0c:01:cb: 13:6d:64:67:49:2b:3d:ee:6d:d0:3d:aa:ff:a7:e3: 19:60:24:7a:45:30:dd:ff:d9:41:68:86:ef:8b:8e: bd:8d:e7:68:58:cd:19:7d:fd:36:36:62:50:b0:5e: 15:bc:eb:27:ad:c1:34:b6:08:44:2c:39:47:93:3a: d5:8a:c9:a3:f0:c5:d8:04:64:01:17:8f:b9:dd:83: f4:68:ea:05:91:9d:fe:b2:53:b8:a6:00:1f:59:ff: b5:ae:46:69:64:d2:34:be:d4:7a:68:9b:7b:a0:0e: 6f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B6:7A:9F:05:A1:4F:32:73:E9:51:CA:2A:C8:A6:B4:5C:91:90:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.51.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:21:50:e0:d2:43:76:98:a6:8a:ef:1d:d8:36:44:fe:60:76: 9e:17:68:a5:f2:95:96:ec:f6:ea:2d:e0:6e:8e:9e:f6:73:5c: dd:e4:0d:61:45:66:16:60:16:c5:a8:99:88:2a:3c:b5:84:c1: c7:12:1a:69:9a:a2:a4:aa:9b:a6:bd:81:17:0e:c7:ed:df:1a: f3:37:1a:61:43:32:ec:91:37:ee:cf:60:95:17:31:ae:b4:0e: a1:c8:3f:cb:d8:84:77:61:3f:81:db:a7:26:10:ac:36:0b:0d: a9:93:e4:96:ea:f3:b3:12:d2:34:5d:d6:d4:7e:4c:fe:6d:cf: 3c:2a:09:d8:68:06:14:86:81:1d:f7:8e:76:d5:ab:a3:be:ad: d5:02:40:9d:80:94:0c:b1:ba:c8:77:96:c6:23:b8:b4:d6:f5: 48:03:df:ca:2b:fa:d0:c7:d6:30:a5:c1:86:9b:81:e7:08:7e: 2a:62:bd:68:d9:7a:1e:3b:04:09:9d:7f:77:30:5d:96:6b:ee: a9:8c:73:58:8f:08:80:1c:66:94:e2:61:96:12:7a:e8:74:84: 7e:71:cc:ec:1a:e8:fa:69:ea:5b:95:86:d7:b6:b3:c9:96:6e: 76:9a:5c:18:6b:bd:f9:60:45:0f:fc:d2:27:5e:1a:22:82:a5: db:31:8c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuftW3Hc7hshe8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmFkZjJhNWYtYmZkNy00N2Y3LWE1NDItNjczZWU0MzM2NjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYjtiOelZnkqfsCIZTnsn2YtLwaVMvoodEL4 9Tz5U+5sjdOM5BmGD8HJExfVzU9ascQkyll4FNHyR1v32oc3JHs8ogfiX9Xh7FPQ 80TaNr43ORpr4yw6l0cXBpay9maHi1BiOS0Rv5Iyip2r+9bdBu0u1emit+bq8eJ7 l4EBFUsDKdB+URUqH5G8Gp3UMjf1M7oMAcsTbWRnSSs97m3QPar/p+MZYCR6RTDd /9lBaIbvi469jedoWM0Zff02NmJQsF4VvOsnrcE0tghELDlHkzrVismj8MXYBGQB F4+53YP0aOoFkZ3+slO4pgAfWf+1rkZpZNI0vtR6aJt7oA5vDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEy2ep8FoU8yc+lRyirIprRckZDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvY2VjMjgxYmEtMDljMC0z N2Y4LTkyZGUtNTBiNWU1ODZjYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDNiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAhUODSQ3aYporvHdg2RP5gdp4XaKXylZbs9uot4G6OnvZzXN3kDWFF ZhZgFsWomYgqPLWEwccSGmmaoqSqm6a9gRcOx+3fGvM3GmFDMuyRN+7PYJUXMa60 DqHIP8vYhHdhP4HbpyYQrDYLDamT5Jbq87MS0jRd1tR+TP5tzzwqCdhoBhSGgR33 jnbVq6O+rdUCQJ2AlAyxush3lsYjuLTW9UgD38or+tDH1jClwYabgecIfipivWjZ eh47BAmdf3cwXZZr7qmMc1iPCIAcZpTiYZYSeuh0hH5xzOwa6Ppp6luVhte2s8mW bnaaXBhrvflgRQ/80ideGiKCpdsxjDg= -----END CERTIFICATE-----Generated at Mon Apr 28 09:29:22 2025 by rpki-client