$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa File: 1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa (raw, json) Hash identifier: eIg016Q9kRsl+T/rxC8pvYw/mwbsOfffluVjmYMQ/+c= Subject key identifier: 72:1B:50:69:3E:31:48:D3:DA:D6:D8:69:2E:C9:DA:75:A4:07:C7:7B Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584A189545BEFF6538E7A3989C00 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 72.18.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:45:be:ff:65:38:e7:a3:98:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=2d501756-5a47-4ff2-ad6c-b2a31de24ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:a6:94:a8:d5:a4:6b:78:d5:34:91:fb:d3: 06:aa:cf:35:5b:12:68:b6:ff:3a:c6:7e:6d:f8:a4: 94:70:e5:1f:67:1d:63:39:4e:20:ab:2c:c5:fc:ae: e1:09:6d:bd:4c:c3:c7:17:35:22:86:19:87:a0:2d: 96:5a:a9:5b:e0:71:27:b2:fe:cc:42:20:ce:0b:35: ae:9c:f7:fc:e2:f3:3b:5b:91:e8:4c:a4:e0:c2:56: 64:9a:99:5c:b0:e0:bf:d6:e4:28:d4:35:5f:16:b7: d0:a7:cc:dc:d0:09:a3:92:42:75:e6:55:9b:aa:d0: 4a:83:16:c5:16:00:ca:6c:43:9f:64:dd:7d:9b:45: e9:e2:a4:07:4e:e6:88:1e:66:78:ab:76:a6:92:66: 8f:d8:70:71:b3:41:e0:db:1a:ab:c9:80:12:bd:c9: 6d:96:38:61:d3:23:0a:c1:2c:ed:9a:0f:82:d9:8e: 47:cc:ac:ee:14:cb:ef:f0:52:46:19:33:16:b7:97: 2d:f3:fa:ef:c4:11:6a:69:ff:56:54:0c:09:b9:b9: f7:6f:1b:64:2f:cf:67:ea:e3:6b:0e:86:63:e7:ec: 5a:b3:67:ac:89:c1:c9:ce:2a:1c:b5:bf:41:dd:b7: d6:e2:9f:d0:24:82:8b:13:1f:94:44:c3:58:bb:cd: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1B:50:69:3E:31:48:D3:DA:D6:D8:69:2E:C9:DA:75:A4:07:C7:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 72.18.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:0f:05:37:23:18:04:c8:01:84:8d:9d:8e:69:67:15:7e:dc: 1f:ef:58:0f:14:47:24:7c:69:13:bc:89:db:8c:cb:1f:10:42: d1:ca:89:5e:d4:18:25:7e:ef:5e:78:d6:2f:7a:c1:5d:89:35: c9:73:11:96:49:81:16:44:2e:a5:e9:e9:1e:a2:c5:25:97:46: 69:01:8a:c1:83:61:6d:99:82:7f:c8:09:a7:52:b5:c8:b2:b7: 2a:f7:95:f2:5d:bd:3f:09:07:d2:84:32:5a:d3:c0:b4:8b:58: 1a:ba:3b:f2:91:dc:df:bf:c1:6a:1c:8e:f3:87:ea:3e:b5:a2: 7a:29:12:b3:9f:98:5c:cb:19:0c:d9:b5:0e:36:d0:bb:f7:38: 7a:db:42:fe:7f:39:d4:00:31:13:f0:27:f6:7f:b2:80:9e:e4: 7a:98:8c:59:14:88:2c:c0:c1:54:ce:d6:47:ad:3d:b8:79:b9: cd:09:a9:7d:30:11:1e:03:04:62:f7:91:09:27:08:0a:c0:cf: 05:ab:1b:92:4f:71:f9:f3:fc:dd:43:b7:38:c9:d5:95:31:15: 27:5a:54:c6:dc:56:1e:17:ee:9c:e5:76:ae:95:75:1f:1a:7b: bc:fb:92:d3:60:53:54:81:5e:5a:f3:4d:f7:4e:a4:c3:40:60: e4:f6:02:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlUW+/2U456OYnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk MmQ1MDE3NTYtNWE0Ny00ZmYyLWFkNmMtYjJhMzFkZTI0ZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEumlKjVpGt41TSR+9MGqs81WxJotv86xn5t +KSUcOUfZx1jOU4gqyzF/K7hCW29TMPHFzUihhmHoC2WWqlb4HEnsv7MQiDOCzWu nPf84vM7W5HoTKTgwlZkmplcsOC/1uQo1DVfFrfQp8zc0AmjkkJ15lWbqtBKgxbF FgDKbEOfZN19m0Xp4qQHTuaIHmZ4q3amkmaP2HBxs0Hg2xqryYASvcltljhh0yMK wSztmg+C2Y5HzKzuFMvv8FJGGTMWt5ct8/rvxBFqaf9WVAwJubn3bxtkL89n6uNr DoZj5+xas2esicHJzioctb9B3bfW4p/QJIKLEx+URMNYu80VuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIbUGk+MUjT2tbYaS7J2nWkB8d7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvMWIxY2U5YjEtYTBmYy0z YWE3LWFhNzctNzQ5ODY3NDUyNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBLeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0PBTcjGATIAYSNnY5pZxV+3B/vWA8URyR8aRO8iduMyx8QQtHKiV7U GCV+71541i96wV2JNclzEZZJgRZELqXp6R6ixSWXRmkBisGDYW2Zgn/ICadStciy tyr3lfJdvT8JB9KEMlrTwLSLWBq6O/KR3N+/wWocjvOH6j61onopErOfmFzLGQzZ tQ420Lv3OHrbQv5/OdQAMRPwJ/Z/soCe5HqYjFkUiCzAwVTO1ketPbh5uc0JqX0w ER4DBGL3kQknCArAzwWrG5JPcfnz/N1DtzjJ1ZUxFSdaVMbcVh4X7pzldq6VdR8a e7z7ktNgU1SBXlrzTfdOpMNAYOT2Agk= -----END CERTIFICATE-----Generated at Sat Jun 14 06:40:28 2025 by rpki-client