$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa File: 00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa (raw, json) Hash identifier: u5ZWdKpd/NLV9nNIZE6745MJ8M+6Iu7KIT68dF7a5LM= Subject key identifier: 45:85:B2:68:60:BE:91:92:56:9F:26:03:76:C6:7D:7C:34:E7:3E:CF Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858499AF4878C88364951E1C85280 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 394437 IP address blocks: 72.20.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:87:8c:88:36:49:51:e1:c8:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=329c896a-1f36-4dd6-a0e3-856e7a19c591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8e:dc:2b:b9:1a:35:6f:71:31:0c:ad:0c:b4: f2:bb:43:f2:64:f3:fb:d9:1a:eb:3d:d8:00:93:b8: c8:39:1b:ef:3e:b0:23:da:b5:53:23:0c:e5:c4:02: 44:00:1d:37:27:d7:aa:99:7d:f1:9f:86:11:48:64: 4f:77:d1:25:c6:e4:a4:70:fa:2a:16:e2:42:9d:96: 49:20:c2:7c:b0:a0:8b:c4:07:0c:5d:b9:ca:7a:67: 17:f1:db:58:55:c4:19:7c:b6:b2:cd:be:d1:d6:23: 07:7a:98:a6:a6:12:86:64:b2:b7:3a:40:6f:b8:1f: b1:81:4e:b1:96:74:a0:32:2b:bb:35:ce:c3:b5:1b: 48:08:cb:94:47:28:23:71:45:a2:e2:57:73:50:7a: 02:d2:2e:0c:99:12:1e:63:e1:c2:df:a2:12:dd:21: 4e:5c:41:d0:ba:af:a9:4f:a2:2b:e6:c0:94:5d:c7: 46:5d:9d:18:8b:72:66:1a:26:e3:45:85:19:9c:2b: bf:1b:d2:eb:a3:ee:a2:02:7b:09:8e:fe:ab:2a:0b: 14:73:1f:7f:3d:38:0e:de:5d:a6:eb:da:dc:0e:42: 62:97:da:51:15:40:16:42:80:e0:07:4e:90:49:1c: e1:1e:f6:42:ae:64:c4:8b:55:a8:da:82:c2:bf:1c: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:85:B2:68:60:BE:91:92:56:9F:26:03:76:C6:7D:7C:34:E7:3E:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:9c:55:19:0e:9c:36:dd:00:d4:7f:c4:e6:d6:68:36:8c:b9: e5:ca:59:af:fa:7e:9e:8d:8a:14:a5:38:90:42:7f:ba:3b:99: df:35:4d:04:4b:b4:26:47:ad:14:67:fe:2e:14:cb:fc:52:f5: 33:8c:78:cf:f5:7e:9e:41:1c:02:cc:c9:c1:64:00:49:88:b9: 4d:a5:8e:d7:ee:d5:10:57:3e:cb:04:ae:3e:d1:ed:99:a9:ec: 11:e5:89:22:52:7b:3c:2b:ef:b1:2e:19:81:fd:d2:7c:f2:28: 87:23:76:cc:21:35:75:e3:94:44:5f:c5:a0:f8:6d:ce:e6:a9: 0d:ef:d3:50:7d:55:f4:e3:77:92:10:20:01:29:b4:5d:2d:5a: 14:0c:38:8b:5b:76:11:77:71:cd:eb:5d:6d:47:5e:02:51:31: 7f:f5:b1:76:4c:e4:b1:08:e9:a5:19:e4:77:0d:98:69:b7:8b: 71:3e:b8:ad:fc:51:bc:62:43:1e:fc:a9:fa:d2:64:a8:60:f3: 45:4c:71:ba:d0:4a:01:5c:35:fd:f4:7a:6e:69:a0:cc:cd:81: da:c2:0d:02:f6:66:50:e7:f1:d9:8e:aa:a4:60:cd:97:dc:60: eb:91:90:a7:96:d0:11:b8:2d:e9:11:85:42:00:37:70:4a:46: f2:a1:98:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IeMiDZJUeHIUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MzI5Yzg5NmEtMWYzNi00ZGQ2LWEwZTMtODU2ZTdhMTljNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY7cK7kaNW9xMQytDLTyu0PyZPP72RrrPdgA k7jIORvvPrAj2rVTIwzlxAJEAB03J9eqmX3xn4YRSGRPd9ElxuSkcPoqFuJCnZZJ IMJ8sKCLxAcMXbnKemcX8dtYVcQZfLayzb7R1iMHepimphKGZLK3OkBvuB+xgU6x lnSgMiu7Nc7DtRtICMuURygjcUWi4ldzUHoC0i4MmRIeY+HC36IS3SFOXEHQuq+p T6Ir5sCUXcdGXZ0Yi3JmGibjRYUZnCu/G9Lro+6iAnsJjv6rKgsUcx9/PTgO3l2m 69rcDkJil9pRFUAWQoDgB06QSRzhHvZCrmTEi1Wo2oLCvxykSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWFsmhgvpGSVp8mA3bGfXw05z7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMDBkODQwNDktY2UzZC0z OGZkLThmN2ItNmIyYzJiODk2Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM6cVRkOnDbdANR/xObWaDaMueXKWa/6fp6NihSlOJBCf7o7md81TQRL tCZHrRRn/i4Uy/xS9TOMeM/1fp5BHALMycFkAEmIuU2ljtfu1RBXPssErj7R7Zmp 7BHliSJSezwr77EuGYH90nzyKIcjdswhNXXjlERfxaD4bc7mqQ3v01B9VfTjd5IQ IAEptF0tWhQMOItbdhF3cc3rXW1HXgJRMX/1sXZM5LEI6aUZ5HcNmGm3i3E+uK38 UbxiQx78qfrSZKhg80VMcbrQSgFcNf30em5poMzNgdrCDQL2ZlDn8dmOqqRgzZfc YOuRkKeW0BG4LekRhUIAN3BKRvKhmOI= -----END CERTIFICATE-----Generated at Tue Apr 29 16:54:43 2025 by rpki-client