$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa File: ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa (raw, json) Hash identifier: FkV91KHhqHFpa0GILlWNePP/MRlHG74XUvCNFHcrDbU= Subject key identifier: 14:75:F3:6F:82:97:39:BE:50:54:9E:35:75:94:D5:7A:72:4E:C3:DC Certificate issuer: /CN=117f0c8a-705e-440d-8160-752196eb04a2 Certificate serial: 010D0C9F4328584917DC388D3539189693B64160 Authority key identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 72.22.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:38:8d:35:39:18:96:93:b6:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f0c8a-705e-440d-8160-752196eb04a2 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=e1b89288-7daf-46d3-a67a-cbe63939d835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:67:45:32:5e:33:b2:17:ec:93:07:90:0f:7e: 82:75:19:d9:c7:c8:b2:64:ba:ee:19:a4:d7:e5:c6: f2:47:d7:0a:cc:37:0d:74:84:90:e6:1c:ea:55:c0: a7:e0:24:e8:29:ae:81:9a:18:c8:8f:f1:b7:a7:22: 43:3a:61:95:4c:04:34:5a:36:c6:ec:15:ce:cd:38: a3:0e:42:23:68:ec:f5:e6:39:ca:31:66:f2:de:a2: 44:79:60:f2:92:2c:89:34:e8:f7:92:ea:1d:ac:42: 17:9c:3a:f7:74:3b:e3:e5:b1:31:b5:9b:20:f0:7c: dd:9a:33:56:63:2d:f7:23:80:0d:6b:ed:06:2e:e8: 9a:05:4e:bb:e4:fe:d1:49:8a:35:80:02:75:d1:b5: b2:d6:eb:a8:20:b4:e8:7e:39:06:8f:cb:43:9a:1e: b3:cc:dd:96:99:c1:f0:5b:6a:3d:81:3a:32:43:b1: fe:39:f3:4a:bf:d2:18:6f:1c:87:28:6c:52:3c:2e: ca:9d:2b:71:27:de:c8:ac:52:98:39:95:df:b5:7c: 11:42:96:26:46:e3:b0:74:b5:9e:50:d0:53:16:ea: 5c:da:a4:1b:63:09:0a:2b:2e:93:8c:5a:25:8a:0f: f4:4a:69:33:2b:00:dc:e2:55:28:2a:40:82:6c:88: fe:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:75:F3:6F:82:97:39:BE:50:54:9E:35:75:94:D5:7A:72:4E:C3:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl X509v3 Authority Key Identifier: keyid:AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer sbgp-ipAddrBlock: critical IPv4: 72.22.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:7a:f7:4e:93:ba:9e:d1:cd:c8:c5:e4:fb:ae:d8:08:ba:96: 8b:97:5f:3a:79:37:b6:76:da:91:0c:0b:98:a6:7a:a2:b4:25: e9:82:73:b8:7b:d6:08:80:99:de:3c:f5:f9:4c:b6:6a:83:b2: 2d:6b:ea:9e:b6:f2:bd:24:9c:06:77:57:60:02:5e:70:4b:02: f8:c8:2a:94:2c:7b:00:dd:a7:d2:38:73:28:07:b4:e8:77:c4: 01:83:0b:f2:da:0e:fd:82:d6:1e:bd:ed:ec:01:f1:d3:10:71: b1:c2:35:54:6b:5c:7c:e5:90:04:8c:a4:3f:58:98:56:1e:2a: 11:e5:de:ed:8f:b9:48:ae:ad:c6:d1:78:5a:91:21:55:e6:90: e4:9e:c1:fd:d4:8c:7f:e2:d8:e8:b9:52:c2:2d:ae:be:b8:82: c1:c0:33:77:5f:9c:62:4e:00:38:dd:0d:81:27:88:7d:c6:0f: 00:ba:6b:c9:6a:26:96:e3:0a:a1:02:96:42:0f:d4:20:d3:a0: 81:1c:28:52:68:1a:04:f0:96:37:0a:b8:e7:f1:df:1c:73:e8: 34:2b:af:3a:b2:c6:25:ef:f0:0c:e7:90:f8:1d:b5:5b:55:a4: f3:2f:e0:de:8a:90:cf:94:ac:3e:8f:25:fa:52:00:e4:b7:e3: 6a:4e:ac:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DiNNTkYlpO2QWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTE3ZjBjOGEtNzA1ZS00NDBkLTgxNjAtNzUyMTk2ZWIw NGEyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTFiODkyODgtN2RhZi00NmQzLWE2N2EtY2JlNjM5MzlkODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWdFMl4zshfskweQD36CdRnZx8iyZLruGaTX 5cbyR9cKzDcNdISQ5hzqVcCn4CToKa6BmhjIj/G3pyJDOmGVTAQ0WjbG7BXOzTij DkIjaOz15jnKMWby3qJEeWDykiyJNOj3kuodrEIXnDr3dDvj5bExtZsg8HzdmjNW Yy33I4ANa+0GLuiaBU675P7RSYo1gAJ10bWy1uuoILTofjkGj8tDmh6zzN2WmcHw W2o9gToyQ7H+OfNKv9IYbxyHKGxSPC7KnStxJ97IrFKYOZXftXwRQpYmRuOwdLWe UNBTFupc2qQbYwkKKy6TjFolig/0SmkzKwDc4lUoKkCCbIj+ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR182+Clzm+UFSeNXWU1XpyTsPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMTdm MGM4YS03MDVlLTQ0MGQtODE2MC03NTIxOTZlYjA0YTIvY2E2ZDVhNmEtNWEwNi0z NWQ4LWI1YTAtZDFjMzU4ODc3YTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTE3ZjBjOGEtNzA1ZS00NDBkLTgx NjAtNzUyMTk2ZWIwNGEyLzExN2YwYzhhLTcwNWUtNDQwZC04MTYwLTc1MjE5NmVi MDRhMi5jcmwwHwYDVR0jBBgwFoAUrR+VyGWB55XajGVUK0RqLpLI99gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMTdmMGM4YS03MDVlLTQ0MGQtODE2MC03NTIx OTZlYjA0YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl6906Tup7RzcjF5Puu2Ai6louXXzp5N7Z22pEMC5imeqK0JemCc7h7 1giAmd489flMtmqDsi1r6p628r0knAZ3V2ACXnBLAvjIKpQsewDdp9I4cygHtOh3 xAGDC/LaDv2C1h697ewB8dMQcbHCNVRrXHzlkASMpD9YmFYeKhHl3u2PuUiurcbR eFqRIVXmkOSewf3UjH/i2Oi5UsItrr64gsHAM3dfnGJOADjdDYEniH3GDwC6a8lq JpbjCqEClkIP1CDToIEcKFJoGgTwljcKuOfx3xxz6DQrrzqyxiXv8AznkPgdtVtV pPMv4N6KkM+UrD6PJfpSAOS342pOrK4= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:43 2025 by rpki-client