$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa File: 8954704f-b2e8-300f-ab85-adc7a08bd067.roa (raw, json) Hash identifier: 1/Z3tPtBcDPzvOwj/pwS8yrNi/HgDatYJJ5Iwlj+oHo= Subject key identifier: 46:FB:02:20:EF:5D:D4:D7:3F:64:CC:4F:81:2E:70:84:2C:47:50:F3 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F432858498E649751553665A3ADE4CF00 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 396185 IP address blocks: 72.29.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:97:51:55:36:65:a3:ad:e4:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=ea2b04ad-b271-4fae-bc71-312cba582a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:34:03:34:7e:2e:c6:5f:97:a7:6d:dd:40: f2:fc:82:35:98:ff:81:93:7f:43:69:cb:00:8b:2c: 24:d0:59:11:17:0e:28:fe:34:07:61:79:b8:2e:12: 51:05:e8:3a:88:51:5e:b5:0a:ce:25:d9:e8:e5:0f: 5b:54:71:e8:f6:9d:2c:e2:e5:e4:32:cd:c8:99:5e: 0d:df:56:21:1b:16:c4:3a:47:56:62:a1:f3:21:43: b2:96:e4:42:26:95:6c:00:eb:69:73:8b:ef:dc:bb: 15:b4:11:f5:f5:13:34:68:96:a9:58:ad:bd:ba:c5: 21:9c:f4:23:02:c0:0a:f5:90:5c:20:b4:4b:47:de: 35:c3:59:fa:c3:f0:1c:cc:6b:92:8d:82:84:28:ff: d4:dc:2e:bf:6c:41:a5:ed:62:a9:3c:f7:e6:cc:9e: 22:5a:41:90:eb:3b:47:2b:7d:c9:3d:99:5b:de:7f: 98:32:75:de:52:a5:a1:c2:dc:a8:3c:9d:d8:12:4a: 1f:62:2e:06:a6:2d:70:c1:2b:54:58:0a:37:fa:19: 6d:4f:f9:f8:20:56:00:af:ab:8d:c0:d8:32:e3:78: 2e:4e:c2:91:23:60:d5:00:61:e7:fc:ac:01:cd:b2: 65:a7:3d:4f:01:2d:84:2c:43:ba:e4:92:3b:6a:a5: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FB:02:20:EF:5D:D4:D7:3F:64:CC:4F:81:2E:70:84:2C:47:50:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:cf:87:2b:70:2f:59:98:72:6a:f9:c9:ea:11:d3:98:4c:c1: 16:63:ed:e2:5e:fd:8c:fe:af:91:61:79:87:bc:cd:23:f1:d3: 88:a6:fc:40:61:dd:8d:f6:fb:a6:cc:95:02:ee:c5:78:3e:54: 2b:f3:51:a7:aa:ad:a4:77:c4:a9:67:3c:0c:08:f8:2e:e1:27: 35:6e:1a:29:a4:c0:c1:c0:d8:f4:cc:4e:e7:d6:5f:04:8d:35: 4d:89:d1:2c:ec:54:11:a1:43:6b:a5:9c:c4:d4:f7:75:68:b0: 64:c2:4e:f4:28:82:4b:86:bb:a8:4b:1d:8c:b6:16:44:ef:5a: 63:28:6c:f7:de:d3:d3:ad:45:58:9e:60:e9:04:a4:65:aa:88: d7:73:14:f3:3b:51:b8:13:98:50:c5:fe:0e:ab:73:f9:04:8a: 34:ed:17:27:86:72:08:e1:1b:fe:19:b1:2b:91:42:64:17:2e: 85:f1:64:55:f5:bc:81:3a:11:44:81:a9:58:00:c3:f1:c9:94: f2:90:91:9a:7f:79:eb:c9:1c:ad:00:9c:9f:ce:60:f4:70:34: 38:30:62:e0:cd:43:6a:4c:16:92:87:20:e4:bd:af:08:e6:6b: 0c:a3:ad:e3:71:7f:f3:78:ae:b0:e9:e4:d2:5e:71:47:a7:26: 10:c3:1a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJdRVTZlo63kzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZWEyYjA0YWQtYjI3MS00ZmFlLWJjNzEtMzEyY2JhNTgyYTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSQ0AzR+LsZfl6dt3UDy/II1mP+Bk39DacsA iywk0FkRFw4o/jQHYXm4LhJRBeg6iFFetQrOJdno5Q9bVHHo9p0s4uXkMs3ImV4N 31YhGxbEOkdWYqHzIUOyluRCJpVsAOtpc4vv3LsVtBH19RM0aJapWK29usUhnPQj AsAK9ZBcILRLR941w1n6w/AczGuSjYKEKP/U3C6/bEGl7WKpPPfmzJ4iWkGQ6ztH K33JPZlb3n+YMnXeUqWhwtyoPJ3YEkofYi4Gpi1wwStUWAo3+hltT/n4IFYAr6uN wNgy43guTsKRI2DVAGHn/KwBzbJlpz1PAS2ELEO65JI7aqXKvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb7AiDvXdTXP2TMT4EucIQsR1DzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvODk1NDcwNGYtYjJlOC0z MDBmLWFiODUtYWRjN2EwOGJkMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjPhytwL1mYcmr5yeoR05hMwRZj7eJe/Yz+r5FheYe8zSPx04im/EBh 3Y32+6bMlQLuxXg+VCvzUaeqraR3xKlnPAwI+C7hJzVuGimkwMHA2PTMTufWXwSN NU2J0SzsVBGhQ2ulnMTU93VosGTCTvQogkuGu6hLHYy2FkTvWmMobPfe09OtRVie YOkEpGWqiNdzFPM7UbgTmFDF/g6rc/kEijTtFyeGcgjhG/4ZsSuRQmQXLoXxZFX1 vIE6EUSBqVgAw/HJlPKQkZp/eevJHK0AnJ/OYPRwNDgwYuDNQ2pMFpKHIOS9rwjm awyjreNxf/N4rrDp5NJecUenJhDDGkQ= -----END CERTIFICATE-----Generated at Mon Apr 28 00:41:22 2025 by rpki-client