$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/92ac91aa-5a40-302f-b604-4405597dc272.roa File: 92ac91aa-5a40-302f-b604-4405597dc272.roa (raw, json) Hash identifier: snQrtqiWpoAeZ7EDL7+UxvoSoi8bm2am6/Tb6RXlXxM= Subject key identifier: 11:9A:4F:75:75:80:06:9E:7F:1E:97:3B:BE:BC:D9:E0:E3:66:B6:62 Certificate issuer: /CN=117f0c8a-705e-440d-8160-752196eb04a2 Certificate serial: 010D0C9F4328584917DC3880C6E09083005D0580 Authority key identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/92ac91aa-5a40-302f-b604-4405597dc272.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 72.22.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:38:80:c6:e0:90:83:00:5d:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f0c8a-705e-440d-8160-752196eb04a2 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=2fcdb3f5-e01f-43dd-86d2-9e13761986eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:6c:48:18:c2:33:04:e4:4a:41:ed:be:d4: c8:66:cf:b8:e1:f7:94:5b:5a:00:bb:e8:02:d5:ba: b6:db:16:4a:77:e1:b8:e3:38:e4:37:57:df:63:77: cf:91:fe:f7:d0:04:87:95:dd:d3:9a:55:a5:28:10: 56:62:09:43:14:44:19:6e:e8:63:64:92:97:7a:29: cf:7d:8f:99:01:aa:93:9c:c5:3d:47:d8:7a:93:4d: 3b:38:b3:a8:a3:a0:09:6e:ab:de:34:bf:42:19:8f: c4:df:70:a4:3e:fc:e1:d2:3a:96:73:5d:96:6d:df: 64:46:64:15:5c:15:d4:30:2a:fa:61:63:0e:7c:58: 3e:6a:f6:d2:70:69:94:cf:f9:55:a3:db:74:00:19: 06:64:e2:f4:d6:3f:6e:d0:9d:cd:17:92:8e:0c:ba: 49:79:79:07:3b:2c:ff:3c:92:aa:02:4c:76:34:54: 79:94:8e:79:86:8f:05:d6:98:b1:9c:2b:5d:a9:13: 2a:c2:3e:6e:1c:24:2c:a5:2c:7d:2d:0c:2b:81:ad: 92:a3:eb:63:88:3f:be:34:63:a2:31:b5:63:f1:22: 36:f5:b0:2a:d6:45:9c:7d:e0:c0:a4:49:66:0e:30: f1:eb:0d:6e:c7:c3:0d:36:4d:ba:25:7c:94:ba:ae: a9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9A:4F:75:75:80:06:9E:7F:1E:97:3B:BE:BC:D9:E0:E3:66:B6:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/92ac91aa-5a40-302f-b604-4405597dc272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl X509v3 Authority Key Identifier: keyid:AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer sbgp-ipAddrBlock: critical IPv4: 72.22.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:7d:03:3d:a1:d9:d9:e1:10:2f:57:72:e2:45:23:1b:3a:13: 08:33:46:5a:b4:90:17:47:a6:ec:b0:1e:06:74:02:0c:1a:ae: e4:30:d5:be:36:e6:4f:86:e5:0a:e6:2e:61:11:ad:3f:78:af: c9:d8:e2:fc:53:c4:a0:ea:4c:38:51:9f:6c:93:fa:92:86:0a: e3:b1:e8:9a:53:aa:59:fd:df:6f:61:b7:07:b9:10:b0:d3:f1: 9e:4b:64:ba:77:f2:8c:32:a1:19:f7:17:6d:36:98:d0:fc:c1: b2:67:2f:cc:ff:d4:09:5b:43:87:19:26:1e:be:82:22:57:fe: da:ab:19:05:0d:4f:a8:e9:35:2d:46:24:b7:bc:d7:55:29:53: b0:b5:1d:86:cf:55:18:0d:86:0e:d4:30:13:75:42:81:85:94: 91:1d:eb:d1:b5:a1:34:7a:6b:90:1a:6d:ac:d0:e7:97:70:e0: 07:98:21:a7:72:12:eb:63:fe:c7:65:29:2e:77:0b:9b:1e:1b: 8f:89:ea:39:d3:16:c1:dc:16:6c:c5:fe:4d:9c:71:91:be:5d: 60:ab:cf:cb:a7:49:19:21:2c:aa:1f:62:49:b4:15:8d:77:85: 67:e0:b8:94:f8:85:a6:13:62:34:74:6b:72:9e:66:ee:57:cb: 5e:b7:92:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DiAxuCQgwBdBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTE3ZjBjOGEtNzA1ZS00NDBkLTgxNjAtNzUyMTk2ZWIw NGEyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MmZjZGIzZjUtZTAxZi00M2RkLTg2ZDItOWUxMzc2MTk4NmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AdsSBjCMwTkSkHtvtTIZs+44feUW1oAu+gC 1bq22xZKd+G44zjkN1ffY3fPkf730ASHld3TmlWlKBBWYglDFEQZbuhjZJKXeinP fY+ZAaqTnMU9R9h6k007OLOoo6AJbqveNL9CGY/E33CkPvzh0jqWc12Wbd9kRmQV XBXUMCr6YWMOfFg+avbScGmUz/lVo9t0ABkGZOL01j9u0J3NF5KODLpJeXkHOyz/ PJKqAkx2NFR5lI55ho8F1pixnCtdqRMqwj5uHCQspSx9LQwrga2So+tjiD++NGOi MbVj8SI29bAq1kWcfeDApElmDjDx6w1ux8MNNk26JXyUuq6pkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGaT3V1gAaefx6XO7682eDjZrZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMTdm MGM4YS03MDVlLTQ0MGQtODE2MC03NTIxOTZlYjA0YTIvOTJhYzkxYWEtNWE0MC0z MDJmLWI2MDQtNDQwNTU5N2RjMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTE3ZjBjOGEtNzA1ZS00NDBkLTgx NjAtNzUyMTk2ZWIwNGEyLzExN2YwYzhhLTcwNWUtNDQwZC04MTYwLTc1MjE5NmVi MDRhMi5jcmwwHwYDVR0jBBgwFoAUrR+VyGWB55XajGVUK0RqLpLI99gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMTdmMGM4YS03MDVlLTQ0MGQtODE2MC03NTIx OTZlYjA0YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR9Az2h2dnhEC9XcuJFIxs6EwgzRlq0kBdHpuywHgZ0AgwaruQw1b42 5k+G5QrmLmERrT94r8nY4vxTxKDqTDhRn2yT+pKGCuOx6JpTqln9329htwe5ELDT 8Z5LZLp38owyoRn3F202mND8wbJnL8z/1AlbQ4cZJh6+giJX/tqrGQUNT6jpNS1G JLe811UpU7C1HYbPVRgNhg7UMBN1QoGFlJEd69G1oTR6a5AabazQ55dw4AeYIady Eutj/sdlKS53C5seG4+J6jnTFsHcFmzF/k2ccZG+XWCrz8unSRkhLKofYkm0FY13 hWfguJT4haYTYjR0a3KeZu5Xy163ktg= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:13 2025 by rpki-client