$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa File: dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (raw, json) Hash identifier: jyOv96KgRgcgyxD4MDthVwOTl55369wI4QGbKZ1xkZI= Subject key identifier: E7:EA:9E:C4:FD:23:66:EE:0D:81:D5:5F:7A:5A:74:13:5D:D8:F5:63 Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F4328584953C41A7688AE8B3F8F8E6080 Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 11550 IP address blocks: 72.42.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1a:76:88:ae:8b:3f:8f:8e:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=cf1cb5c8-d41f-4b72-a038-048fe33ff5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:34:05:ef:e2:d3:1c:14:e7:98:8c:77:22:28: f0:ba:40:84:7b:f5:90:c0:11:2e:68:ee:83:e8:d9: 09:98:90:31:55:34:f7:79:f0:24:c4:e9:62:01:2b: 0e:af:df:11:fe:5b:be:60:0d:c4:fa:76:e3:59:2e: 03:85:6e:d4:ac:ff:56:38:1d:e3:95:40:84:13:24: cf:56:ea:9a:1e:ee:15:9d:ab:77:cb:51:ca:78:28: 69:ae:7f:cb:ad:f5:73:2b:17:bd:cc:93:9c:10:b3: 2e:6c:a7:8d:95:4b:03:2f:00:81:62:46:d9:b4:d4: a3:4b:23:2b:16:ba:ed:0b:44:18:79:99:46:06:ea: da:16:9a:f4:23:7e:bb:c6:2a:0d:34:44:63:b3:6d: 12:ac:51:ad:fb:24:1f:d8:c2:1d:d5:13:50:58:5f: 24:ca:fc:16:ec:e5:97:0b:c6:e3:d9:e1:3b:a8:8d: 1d:5f:e3:d7:59:60:35:96:0c:63:73:c6:b5:0b:0c: e4:18:4f:44:6c:67:22:cc:9e:11:7a:6d:e8:72:e4: 51:d3:eb:db:b8:fa:2e:dc:5b:52:6a:f4:5e:6b:a6: e9:c9:b9:fc:1a:07:ab:a9:f8:d9:07:d2:5d:0c:89: 97:c6:35:50:bf:85:ab:b7:ef:65:cc:ba:ba:ee:ce: a1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EA:9E:C4:FD:23:66:EE:0D:81:D5:5F:7A:5A:74:13:5D:D8:F5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: 72.42.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:5b:1d:3a:91:13:ba:7a:b2:df:ed:4f:c2:f0:c9:cf:34:07: 5e:34:0c:d9:f7:60:15:25:7e:cf:72:f4:e7:1f:92:58:f1:8a: 67:eb:67:8a:f7:a5:77:09:07:f5:e4:45:d1:01:71:83:ea:73: c6:b0:bb:2f:e0:90:8c:dc:f2:09:ff:76:dc:e7:bb:d0:89:21: 31:f3:7c:1a:f7:92:46:1e:4a:2c:d9:f5:88:89:29:00:7d:81: 45:c1:56:9f:4a:68:98:72:00:02:5f:69:8e:65:a7:cb:c2:37: 0a:94:05:9f:7e:53:2a:90:e2:16:d7:10:4d:5b:06:a0:bc:5b: 08:7c:03:7a:56:05:7c:2e:cf:73:72:c7:a2:03:46:76:69:38: cd:2c:04:c9:d9:57:85:d2:a2:bc:5d:52:95:bc:ee:91:8d:76: 02:6f:ed:a8:11:26:d7:6f:27:9a:b7:b8:eb:9b:a0:f0:de:6b: fe:c6:00:c2:84:b1:e7:25:fb:28:d7:a5:26:11:0a:e4:92:26: fb:6e:df:f6:00:f5:18:b6:ae:8a:2b:66:6a:0b:4f:12:ad:eb: 7f:d1:cd:d5:77:d1:74:b6:14:68:56:0f:1a:7f:53:08:18:0e: 0a:5f:24:c7:67:39:85:c3:b0:d7:65:ff:1b:b3:55:05:96:6f: 84:ab:81:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBp2iK6LP4+OYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2YxY2I1YzgtZDQxZi00YjcyLWEwMzgtMDQ4ZmUzM2ZmNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDQF7+LTHBTnmIx3IijwukCEe/WQwBEuaO6D 6NkJmJAxVTT3efAkxOliASsOr98R/lu+YA3E+nbjWS4DhW7UrP9WOB3jlUCEEyTP VuqaHu4Vnat3y1HKeChprn/LrfVzKxe9zJOcELMubKeNlUsDLwCBYkbZtNSjSyMr FrrtC0QYeZlGBuraFpr0I367xioNNERjs20SrFGt+yQf2MId1RNQWF8kyvwW7OWX C8bj2eE7qI0dX+PXWWA1lgxjc8a1CwzkGE9EbGcizJ4Rem3ocuRR0+vbuPou3FtS avRea6bpybn8GgerqfjZB9JdDImXxjVQv4Wrt+9lzLq67s6hRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfqnsT9I2buDYHVX3padBNd2PVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvZGZiODEwMWUtZWMyYS0z NmU1LThjYmUtNTc2YmI4YzEyZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZbHTqRE7p6st/tT8Lwyc80B140DNn3YBUlfs9y9OcfkljximfrZ4r3 pXcJB/XkRdEBcYPqc8awuy/gkIzc8gn/dtznu9CJITHzfBr3kkYeSizZ9YiJKQB9 gUXBVp9KaJhyAAJfaY5lp8vCNwqUBZ9+UyqQ4hbXEE1bBqC8Wwh8A3pWBXwuz3Ny x6IDRnZpOM0sBMnZV4XSorxdUpW87pGNdgJv7agRJtdvJ5q3uOuboPDea/7GAMKE secl+yjXpSYRCuSSJvtu3/YA9Ri2roorZmoLTxKt63/RzdV30XS2FGhWDxp/UwgY DgpfJMdnOYXDsNdl/xuzVQWWb4Srgd8= -----END CERTIFICATE-----Generated at Sun Apr 27 23:04:20 2025 by rpki-client