$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/17c74446-4499-391f-a432-a9ff02dba5ca.roa File: 17c74446-4499-391f-a432-a9ff02dba5ca.roa (raw, json) Hash identifier: 8i7j+N6qk4jg+pXKmM4DduVGGd8Oc/+DquMhHu6d8QU= Subject key identifier: 09:44:F5:33:1B:0C:03:8C:A3:45:CE:6E:91:EE:13:5C:C7:76:FC:8F Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F432858498E64975FF735B0F690D12480 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/17c74446-4499-391f-a432-a9ff02dba5ca.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 396185 IP address blocks: 72.29.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:97:5f:f7:35:b0:f6:90:d1:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=41d88838-d367-4d29-bf05-1518cb999a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2e:67:54:6b:55:b2:d5:10:0c:2a:e2:b0:fe: c2:c8:a1:94:42:31:be:94:fe:d6:8b:28:ed:2b:67: dd:2e:fa:63:fb:95:bf:43:a6:36:9c:99:de:6c:94: 8d:8a:69:d6:2d:1f:8f:f8:df:3b:fb:b0:78:1e:3e: 38:20:7b:90:ed:60:e7:b2:e9:27:98:5c:95:e4:50: 7c:d4:94:91:6c:b7:cd:9a:0e:d4:c5:5e:cc:13:b0: c7:10:8b:41:62:39:77:93:52:bf:0d:7b:22:b5:1c: 57:28:58:12:d3:50:51:4c:b4:a2:bb:ac:91:8c:a8: 48:dc:08:fa:08:2e:5b:db:a0:38:3e:ba:63:fd:1e: 06:b8:ab:f2:f0:7c:05:ae:1d:f2:13:bc:14:b6:5e: ea:be:5a:17:a8:30:ce:0c:6f:d6:3f:ec:3f:6f:84: fd:38:42:f5:05:8a:b7:14:14:12:d3:c9:17:e1:dc: 49:2c:aa:8d:14:98:f4:a2:7e:8b:0c:f8:4a:6f:a5: 26:f7:d4:30:79:d4:42:38:c5:2a:29:20:f8:af:5f: 4c:45:e4:94:bd:e4:ad:ae:9a:3d:45:f2:d8:d0:27: ca:77:14:2c:17:b0:8a:2d:2d:09:f7:ab:70:3c:80: 4b:38:35:bf:18:4b:ed:d0:5b:a2:7c:fa:46:83:4a: 0c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:44:F5:33:1B:0C:03:8C:A3:45:CE:6E:91:EE:13:5C:C7:76:FC:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/17c74446-4499-391f-a432-a9ff02dba5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0e:d9:fc:79:b2:b4:34:ea:57:bf:28:70:bc:3f:4e:54:f7: fa:9e:33:fb:a4:aa:06:b3:f3:da:e8:f5:a4:99:16:ad:95:aa: 4f:45:fb:ff:78:c9:5a:b9:4c:00:36:9e:f2:58:7f:0b:05:49: c8:72:35:ea:f4:c1:03:00:3a:22:aa:8b:c2:52:b7:23:82:25: 74:4c:d6:c0:88:dc:be:31:97:d7:d0:de:df:21:53:7a:35:e7: 24:09:70:4c:f6:05:78:47:a1:3e:82:27:0a:82:aa:88:7c:dd: 2f:cf:dd:82:89:d5:96:b2:54:82:59:e4:6b:df:9a:31:eb:b4: 07:8f:4c:40:9e:85:98:d4:9c:b1:3a:87:f6:1a:82:57:2f:7f: 2b:b4:ed:b4:26:4e:9a:41:a8:5a:66:c9:7c:18:68:d7:83:d9: a9:60:ff:34:a7:1d:44:17:ca:e8:6f:d9:f8:b0:84:c4:d8:f1: b3:c8:d9:34:9c:76:3b:cb:36:62:07:12:72:5a:88:0b:de:ed: fb:be:fc:54:e2:59:11:8b:16:c3:88:08:1e:13:98:5d:18:4a: cd:6c:b7:32:b5:b7:32:64:bf:5e:b3:9e:3a:6b:02:0a:7d:4d: 4c:03:c6:00:92:a7:51:ed:4d:fd:f9:c8:3c:bd:e7:54:f4:c8: 0e:74:81:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJdf9zWw9pDRJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NDFkODg4MzgtZDM2Ny00ZDI5LWJmMDUtMTUxOGNiOTk5YTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS5nVGtVstUQDCrisP7CyKGUQjG+lP7Wiyjt K2fdLvpj+5W/Q6Y2nJnebJSNimnWLR+P+N87+7B4Hj44IHuQ7WDnsuknmFyV5FB8 1JSRbLfNmg7UxV7ME7DHEItBYjl3k1K/DXsitRxXKFgS01BRTLSiu6yRjKhI3Aj6 CC5b26A4Prpj/R4GuKvy8HwFrh3yE7wUtl7qvloXqDDODG/WP+w/b4T9OEL1BYq3 FBQS08kX4dxJLKqNFJj0on6LDPhKb6Um99QwedRCOMUqKSD4r19MReSUveStrpo9 RfLY0CfKdxQsF7CKLS0J96twPIBLODW/GEvt0FuifPpGg0oM8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlE9TMbDAOMo0XObpHuE1zHdvyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMTdjNzQ0NDYtNDQ5OS0z OTFmLWE0MzItYTlmZjAyZGJhNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB0+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcO2fx5srQ06le/KHC8P05U9/qeM/ukqgaz89ro9aSZFq2Vqk9F+/94 yVq5TAA2nvJYfwsFSchyNer0wQMAOiKqi8JStyOCJXRM1sCI3L4xl9fQ3t8hU3o1 5yQJcEz2BXhHoT6CJwqCqoh83S/P3YKJ1ZayVIJZ5GvfmjHrtAePTECehZjUnLE6 h/Yaglcvfyu07bQmTppBqFpmyXwYaNeD2alg/zSnHUQXyuhv2fiwhMTY8bPI2TSc djvLNmIHEnJaiAve7fu+/FTiWRGLFsOICB4TmF0YSs1stzK1tzJkv16znjprAgp9 TUwDxgCSp1HtTf35yDy951T0yA50gbM= -----END CERTIFICATE-----Generated at Mon Apr 28 02:12:12 2025 by rpki-client