$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/69850838-f6f7-39ae-a994-94f64acf9b5b.roa File: 69850838-f6f7-39ae-a994-94f64acf9b5b.roa (raw, json) Hash identifier: eZRYDbRcplYhUWlZDYE44AfUMbygCRnEOJRL3BMzZPo= Subject key identifier: 90:A2:A3:BB:13:3F:13:35:8F:69:8D:DB:04:12:FC:9D:4A:DD:EE:41 Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Certificate serial: 010D0C9F4328584902EC17F107D067EEAA899940 Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/69850838-f6f7-39ae-a994-94f64acf9b5b.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 395425 IP address blocks: 72.42.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:17:f1:07:d0:67:ee:aa:89:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=ac26f99f-1f86-4d9c-a820-ab37a2a6d950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:30:a5:ea:ff:95:e5:52:72:ae:0f:c1:06:80: 87:d7:83:ac:93:72:e3:83:d5:a5:1e:dd:04:67:4f: c8:3e:5d:d3:e2:5e:81:31:78:3b:27:2d:a1:ff:dd: 1d:54:dd:41:a1:e3:9f:d9:01:55:39:7f:be:7d:1d: 6e:a9:e4:3e:3b:97:69:6a:22:a2:e3:64:b6:d4:c1: 26:7f:e8:27:e6:f7:9d:c1:35:02:39:99:b7:9d:c1: b8:a2:67:13:a5:f0:b2:85:3c:46:10:b6:d6:42:34: 61:cf:1d:dc:ff:b6:81:93:6f:46:db:0e:08:c0:de: 24:08:ad:70:97:79:e3:30:9d:d1:e6:61:ae:f8:ad: 93:b9:6c:b7:5a:8f:bd:38:8e:12:df:1e:b9:fc:74: 10:a8:9f:79:b0:ff:bc:6b:03:e6:de:7c:7d:75:4c: 22:c0:3c:e6:5f:14:d7:5f:c7:37:65:7b:28:4e:85: 8f:bf:60:fb:e3:78:e7:05:f1:9c:31:ef:c2:54:09: 74:af:86:f7:73:13:69:98:4e:b8:90:32:42:e1:03: db:b0:89:e3:ce:6c:f4:fd:ce:bd:d8:9c:e4:42:41: 3f:a5:41:c1:fd:03:30:9a:aa:44:80:9f:f7:f3:ab: 7a:af:aa:61:d1:f6:eb:1a:85:38:38:a6:3d:6f:45: 8a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A2:A3:BB:13:3F:13:35:8F:69:8D:DB:04:12:FC:9D:4A:DD:EE:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/69850838-f6f7-39ae-a994-94f64acf9b5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl X509v3 Authority Key Identifier: keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer sbgp-ipAddrBlock: critical IPv4: 72.42.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9a:d0:e4:ba:5e:e8:80:50:e5:c5:5e:e9:3e:8c:83:39:3f: 1a:3d:18:ca:4b:d4:c0:3e:0d:e8:96:e9:80:50:92:3d:5e:e6: 2e:5c:ba:d0:e9:e1:fa:aa:20:14:06:5c:86:28:03:44:0f:95: 98:d3:fc:fc:7a:e0:05:25:b3:eb:d7:d7:52:53:97:da:6a:95: 47:6d:d6:b8:db:27:f0:81:f0:85:af:4c:ac:02:f1:92:74:5e: 9d:ff:4d:15:4f:62:47:38:53:74:bf:37:85:b4:08:9c:1c:0a: fd:0e:b0:cd:1a:60:0d:52:e8:74:d2:67:f0:2a:cb:c6:9b:4d: 5f:67:d5:6a:29:cb:bb:fb:87:9a:7b:52:33:45:3f:13:ad:71: 28:aa:3c:a6:00:52:8c:3e:03:c8:ff:aa:67:e6:18:66:a5:cd: 92:97:9a:d0:ef:10:17:09:5d:78:b1:2c:6c:9f:18:1a:2a:fd: e9:c3:eb:9b:c2:b3:1f:b2:ab:4e:e2:0a:33:1c:c3:0a:af:6b: 15:d8:f7:13:6d:b1:a7:f7:96:db:fa:5a:c4:20:40:99:ba:47: 3d:5b:a1:3e:be:68:ca:28:c9:3e:ea:b7:83:02:18:37:04:ea: a7:34:de:0e:c6:39:d0:db:fd:2f:f5:35:8b:02:91:9a:55:20: 3e:e8:87:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BfxB9Bn7qqJmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJl OTg0MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YWMyNmY5OWYtMWY4Ni00ZDljLWE4MjAtYWIzN2EyYTZkOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTCl6v+V5VJyrg/BBoCH14Osk3Ljg9WlHt0E Z0/IPl3T4l6BMXg7Jy2h/90dVN1BoeOf2QFVOX++fR1uqeQ+O5dpaiKi42S21MEm f+gn5vedwTUCOZm3ncG4omcTpfCyhTxGELbWQjRhzx3c/7aBk29G2w4IwN4kCK1w l3njMJ3R5mGu+K2TuWy3Wo+9OI4S3x65/HQQqJ95sP+8awPm3nx9dUwiwDzmXxTX X8c3ZXsoToWPv2D743jnBfGcMe/CVAl0r4b3cxNpmE64kDJC4QPbsInjzmz0/c69 2JzkQkE/pUHB/QMwmqpEgJ/386t6r6ph0fbrGoU4OKY9b0WKuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCio7sTPxM1j2mN2wQS/J1K3e5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5 N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvNjk4NTA4MzgtZjZmNy0z OWFlLWE5OTQtOTRmNjRhY2Y5YjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWM2OTdjOWQtMzI1YS00NjBmLWFi MmYtOGNmNzFiMWJlOTg0L2VjNjk3YzlkLTMyNWEtNDYwZi1hYjJmLThjZjcxYjFi ZTk4NC5jcmwwHwYDVR0jBBgwFoAUEjvZdTKrj92cHFYpzjLx33slhhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3 MWIxYmU5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+a0OS6XuiAUOXFXuk+jIM5Pxo9GMpL1MA+DeiW6YBQkj1e5i5cutDp 4fqqIBQGXIYoA0QPlZjT/Px64AUls+vX11JTl9pqlUdt1rjbJ/CB8IWvTKwC8ZJ0 Xp3/TRVPYkc4U3S/N4W0CJwcCv0OsM0aYA1S6HTSZ/Aqy8abTV9n1Wopy7v7h5p7 UjNFPxOtcSiqPKYAUow+A8j/qmfmGGalzZKXmtDvEBcJXXixLGyfGBoq/enD65vC sx+yq07iCjMcwwqvaxXY9xNtsaf3ltv6WsQgQJm6Rz1boT6+aMooyT7qt4MCGDcE 6qc03g7GOdDb/S/1NYsCkZpVID7oh7Y= -----END CERTIFICATE-----Generated at Mon Apr 28 14:00:54 2025 by rpki-client