$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4073fa8-2034-3197-bd92-48c040f85315.roa File: a4073fa8-2034-3197-bd92-48c040f85315.roa (raw, json) Hash identifier: KGt+j4EX+mS2px2dLe9Eds6bxj0Em5mP1ui572dCJCA= Subject key identifier: 79:29:30:DA:B1:44:0E:25:F5:3F:7B:84:58:B2:AB:64:62:BD:94:A4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A14657FF54770421A1F919E40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4073fa8-2034-3197-bd92-48c040f85315.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 0 IP address blocks: 72.13.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7f:f5:47:70:42:1a:1f:91:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=7afc1db8-bcd6-44bc-bdd7-8e5dc58a5d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:83:27:c3:78:d5:47:1c:0a:40:67:39:47: 08:c5:c3:3b:6b:5f:12:a4:22:06:ca:8c:6f:cc:3a: a5:00:6e:ee:b6:fa:6d:b5:9c:4b:b4:5b:28:d2:1b: af:93:f6:e6:f6:ef:03:df:cf:5e:8e:83:7b:fd:94: 72:56:77:a5:b7:dc:b3:f0:0f:b3:84:29:ca:30:d5: 14:9d:9b:d3:68:ef:3f:e1:91:7b:93:20:64:aa:67: 77:c0:8e:8c:bc:01:58:76:43:fa:7d:aa:02:4d:45: c2:dd:4d:08:8b:af:f2:97:93:45:43:bd:48:d0:b6: 09:6a:5d:11:0f:26:cd:7e:87:c1:6c:e7:1a:c9:c7: 84:5b:32:bc:e6:21:bf:dc:e7:60:d2:db:43:2d:93: 51:09:e9:4b:95:6e:7d:d0:eb:62:33:f0:0c:60:da: bd:75:db:cf:00:58:6b:50:d7:b2:cd:8e:06:df:7d: db:83:e4:46:4d:b0:50:8c:7d:8b:7f:2e:07:df:28: 29:8d:79:25:8d:95:70:86:0e:08:3a:77:8e:b6:b5: c7:b0:6a:07:b4:44:14:0f:8b:e5:fb:f0:d9:6f:40: 31:fb:2b:dd:e0:ad:25:10:66:c4:38:c3:fd:1d:08: a3:c8:57:a2:19:a0:78:c2:f9:54:85:c4:11:22:a2: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:29:30:DA:B1:44:0E:25:F5:3F:7B:84:58:B2:AB:64:62:BD:94:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4073fa8-2034-3197-bd92-48c040f85315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:4b:a6:1f:a7:d9:c3:c9:f3:49:74:98:17:d9:2e:f0:dd:9f: cb:db:57:0e:dc:9c:4f:68:5e:6d:a7:14:a0:78:f0:a8:47:44: 71:fa:d3:f9:52:7c:86:25:ad:5f:aa:fc:f8:3d:8c:f4:df:f3: 94:07:a9:c3:e2:c3:0b:5b:d8:d1:43:a1:84:90:a7:e4:99:c8: f6:8a:ff:c4:ce:8e:95:01:1f:64:9f:6b:93:3b:ef:83:e3:bb: 3e:fe:34:b5:ce:74:7e:14:f5:b6:dd:a5:f1:a7:69:b7:9b:d5: 92:8d:e4:dd:f7:84:f7:9b:ce:4b:3b:c0:66:a6:6d:36:3f:87: 49:01:95:1e:35:a8:62:87:8b:ec:ef:a5:3d:0b:66:d8:24:a2: 04:fc:49:5a:7b:1d:93:6e:0d:81:3a:35:3c:bc:70:39:53:af: 82:05:36:0b:a3:e0:d1:6c:0f:d0:a7:09:60:f6:3d:0a:cf:0f: 50:a0:c2:ec:0a:44:91:20:fa:7b:80:9b:1c:1c:01:d0:11:e5: 20:18:3f:49:67:ae:ff:59:13:a3:5e:9f:71:65:e5:19:b2:6f: c6:b7:90:a0:9f:eb:87:a7:ed:c7:59:dd:d0:73:21:74:86:74: 19:a8:5d:89:fb:e8:4a:69:11:8a:e1:d5:b7:f5:2c:94:f4:08: b6:76:f1:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZX/1R3BCGh+RnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk N2FmYzFkYjgtYmNkNi00NGJjLWJkZDctOGU1ZGM1OGE1ZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zeDJ8N41UccCkBnOUcIxcM7a18SpCIGyoxv zDqlAG7utvpttZxLtFso0huvk/bm9u8D389ejoN7/ZRyVnelt9yz8A+zhCnKMNUU nZvTaO8/4ZF7kyBkqmd3wI6MvAFYdkP6faoCTUXC3U0Ii6/yl5NFQ71I0LYJal0R DybNfofBbOcayceEWzK85iG/3Odg0ttDLZNRCelLlW590OtiM/AMYNq9ddvPAFhr UNeyzY4G333bg+RGTbBQjH2Lfy4H3ygpjXkljZVwhg4IOneOtrXHsGoHtEQUD4vl +/DZb0Ax+yvd4K0lEGbEOMP9HQijyFeiGaB4wvlUhcQRIqKkGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkpMNqxRA4l9T97hFiyq2RivZSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQwNzNmYTgtMjAzNC0z MTk3LWJkOTItNDhjMDQwZjg1MzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRLph+n2cPJ80l0mBfZLvDdn8vbVw7cnE9oXm2nFKB48KhHRHH60/lS fIYlrV+q/Pg9jPTf85QHqcPiwwtb2NFDoYSQp+SZyPaK/8TOjpUBH2Sfa5M774Pj uz7+NLXOdH4U9bbdpfGnabeb1ZKN5N33hPebzks7wGambTY/h0kBlR41qGKHi+zv pT0LZtgkogT8SVp7HZNuDYE6NTy8cDlTr4IFNguj4NFsD9CnCWD2PQrPD1CgwuwK RJEg+nuAmxwcAdAR5SAYP0lnrv9ZE6Nen3Fl5Rmyb8a3kKCf64en7cdZ3dBzIXSG dBmoXYn76EppEYrh1bf1LJT0CLZ28Q8= -----END CERTIFICATE-----Generated at Sun Jun 15 20:01:15 2025 by rpki-client