$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/8675f39c-f0b4-325e-bb35-10be8d68c537.roa File: 8675f39c-f0b4-325e-bb35-10be8d68c537.roa (raw, json) Hash identifier: UCRCHj4ZEQO0WBZ54nC5ebcnFdIetCnyiO+Sg9iyoaQ= Subject key identifier: 1A:7D:A1:30:D1:30:5C:0A:42:73:C4:AF:35:9C:CA:65:BF:2F:96:67 Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F4328584996C4B09C494238A64DBB9A6C Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/8675f39c-f0b4-325e-bb35-10be8d68c537.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30600 IP address blocks: 72.42.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b0:9c:49:42:38:a6:4d:bb:9a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=36a97d8b-a84a-44e8-bd6d-5b817648d0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:15:04:9d:81:40:cb:04:24:d6:46:82:38: 0a:09:e9:7f:26:4b:ea:15:ba:b5:d9:98:10:a1:d4: fc:5d:7a:46:a3:0e:83:5f:83:dc:fe:f9:ce:c0:78: d0:0e:b9:58:78:f4:a4:36:9e:52:10:91:8f:3f:1f: f2:5f:d8:44:34:f5:df:ec:73:39:4e:1a:fb:39:b9: 85:59:f9:a5:5c:da:df:e8:4f:58:4d:4a:6d:24:1d: ce:41:ef:28:d3:88:a3:66:28:5e:23:37:5a:8e:ab: 94:0d:fe:c5:7a:d7:d4:42:0b:f2:bb:6b:79:03:c8: d3:ca:7c:a5:88:68:3c:74:28:a9:6c:5e:aa:54:af: 0a:ec:a1:46:8b:11:ed:c1:08:19:d4:a5:2b:97:0c: fd:dd:fa:1f:e7:5e:3c:5c:a1:9e:d6:0d:c4:96:19: 15:44:86:7f:4f:52:da:2c:af:cf:5c:4a:1e:30:e5: 85:cc:3e:bd:24:25:32:90:92:eb:54:3a:29:62:b4: 49:ed:38:ca:83:68:51:7c:88:41:09:9f:af:be:b0: 8b:38:21:8a:4d:4c:52:8e:23:ad:12:1c:48:97:bf: 96:7e:09:46:17:b0:d3:51:8b:5f:18:9b:be:24:71: ea:92:27:73:43:5c:13:0f:d7:e4:a2:8f:83:9c:67: d9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7D:A1:30:D1:30:5C:0A:42:73:C4:AF:35:9C:CA:65:BF:2F:96:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/8675f39c-f0b4-325e-bb35-10be8d68c537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: 72.42.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:68:ba:fc:cf:80:61:34:6d:6b:33:8d:ed:7d:51:9f:19:13: e2:e2:2a:9a:08:06:5a:ad:c8:f1:aa:a0:30:27:d7:4e:02:7f: 1c:e6:b6:7c:d6:bd:50:07:63:4c:a1:fb:d4:41:34:60:9f:74: a1:62:0b:da:4c:7b:8b:84:e2:d7:24:6d:da:0f:c9:10:1f:3e: aa:c7:eb:2e:24:ec:35:88:27:ad:70:93:ae:3c:3d:48:d7:4f: 43:be:f7:bf:92:4a:4b:33:32:00:8d:3d:de:59:9a:15:4a:85: c7:c4:4e:07:61:23:99:f1:08:1a:ca:b2:3a:8a:52:a1:35:54: 92:99:59:46:ef:4e:5d:bb:2c:b0:52:91:b5:8c:d6:63:5a:dc: 12:b6:8c:8e:00:ae:e1:28:73:52:1f:c4:f2:30:ee:ef:f2:c7: d3:44:18:56:8b:a3:f9:cf:24:1c:0a:93:e9:03:bd:d3:77:6e: a4:85:b9:46:fc:4a:3a:b7:62:d2:2b:62:b3:d0:fe:d9:d6:4c: 33:16:c9:1f:8d:93:c3:25:1f:16:fd:53:97:dd:9d:f4:83:a8: de:63:bf:b1:ae:62:b0:63:a0:dc:e3:70:bb:f0:83:8d:2c:57: 8b:5d:93:f8:f7:cf:34:3f:1e:49:18:fb:c6:ef:8e:2a:b7:70: 0c:48:da:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLCcSUI4pk27mmwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MzZhOTdkOGItYTg0YS00NGU4LWJkNmQtNWI4MTc2NDhkMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKEVBJ2BQMsEJNZGgjgKCel/JkvqFbq12ZgQ odT8XXpGow6DX4Pc/vnOwHjQDrlYePSkNp5SEJGPPx/yX9hENPXf7HM5Thr7ObmF WfmlXNrf6E9YTUptJB3OQe8o04ijZiheIzdajquUDf7FetfUQgvyu2t5A8jTynyl iGg8dCipbF6qVK8K7KFGixHtwQgZ1KUrlwz93fof5148XKGe1g3ElhkVRIZ/T1La LK/PXEoeMOWFzD69JCUykJLrVDopYrRJ7TjKg2hRfIhBCZ+vvrCLOCGKTUxSjiOt EhxIl7+WfglGF7DTUYtfGJu+JHHqkidzQ1wTD9fkoo+DnGfZyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp9oTDRMFwKQnPErzWcymW/L5ZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvODY3NWYzOWMtZjBiNC0z MjVlLWJiMzUtMTBiZThkNjhjNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBouvzPgGE0bWszje19UZ8ZE+LiKpoIBlqtyPGqoDAn104CfxzmtnzW vVAHY0yh+9RBNGCfdKFiC9pMe4uE4tckbdoPyRAfPqrH6y4k7DWIJ61wk648PUjX T0O+97+SSkszMgCNPd5ZmhVKhcfETgdhI5nxCBrKsjqKUqE1VJKZWUbvTl27LLBS kbWM1mNa3BK2jI4AruEoc1IfxPIw7u/yx9NEGFaLo/nPJBwKk+kDvdN3bqSFuUb8 Sjq3YtIrYrPQ/tnWTDMWyR+Nk8MlHxb9U5fdnfSDqN5jv7GuYrBjoNzjcLvwg40s V4tdk/j3zzQ/HkkY+8bvjiq3cAxI2vw= -----END CERTIFICATE-----Generated at Tue Apr 29 02:28:41 2025 by rpki-client