$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/12e7bd35-126d-30c1-bd74-909e56a08057.roa File: 12e7bd35-126d-30c1-bd74-909e56a08057.roa (raw, json) Hash identifier: K0SuIjnHI+gP7v7EvcCiGwrLf9RFiJWz2v23HP+hTig= Subject key identifier: 25:D7:BD:41:71:8B:CB:37:F2:B7:5C:1F:E7:A5:05:87:25:3A:41:9C Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858499AF4874D9D9FB3B048A5F680 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/12e7bd35-126d-30c1-bd74-909e56a08057.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 394437 IP address blocks: 72.20.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:87:4d:9d:9f:b3:b0:48:a5:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=5c0cf3b1-0bb2-4234-ac0b-9c92952af5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:27:5c:6b:27:c5:2e:a4:b1:d0:48:e3:88: 24:5f:b7:fc:61:d4:47:9f:af:61:f8:95:38:f3:f0: a9:e5:cc:41:59:ad:0f:0e:df:55:5f:24:f6:46:b5: b6:3a:a6:d5:b2:5b:83:4d:7d:70:78:66:18:74:bb: 9f:b0:a4:09:67:7b:0c:8d:0e:b7:b4:78:89:72:61: 1b:a4:58:93:2e:a4:0e:e9:2a:c2:39:c2:b0:e3:2c: 21:d0:c7:b2:d7:e6:b7:6b:68:a3:88:d9:60:a6:91: df:b6:5e:ba:ef:f6:52:e2:5f:04:a0:e3:c2:fa:fa: c5:83:be:d9:56:e2:cc:97:5d:8a:f5:33:c7:d2:52: b5:98:95:66:7f:73:44:87:78:c6:32:f6:cc:f6:88: 94:08:62:60:32:d3:aa:64:5d:17:7b:b0:5c:ed:37: a5:c1:fe:1a:e6:31:56:1d:e3:ce:f1:a9:63:3f:63: 76:bb:1e:a9:80:ed:62:f3:4b:dd:59:77:9c:14:e8: b8:5a:be:82:2e:21:f1:53:34:97:5b:e0:12:26:db: a3:7a:9a:56:3a:5e:02:3e:32:d5:80:e7:5a:3b:9c: fe:4a:b3:87:03:57:d7:80:8e:ff:8b:0c:b0:c7:1a: 80:f6:11:b3:58:59:c8:17:1f:60:b2:75:65:90:01: cf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D7:BD:41:71:8B:CB:37:F2:B7:5C:1F:E7:A5:05:87:25:3A:41:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/12e7bd35-126d-30c1-bd74-909e56a08057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:3c:94:e5:16:7a:f2:e2:d6:73:11:df:b0:18:e5:96:ad:32: 39:e7:98:64:8d:fa:ca:91:93:a0:d0:ce:7b:72:54:20:77:62: 08:83:45:95:03:7c:9f:f1:29:49:59:88:78:58:9a:53:3a:ee: 0e:9b:9d:fa:24:1f:bb:eb:72:86:07:fa:92:88:7d:e5:62:a2: 6e:b3:d5:3b:88:fe:3a:79:5e:45:a8:60:5f:8b:16:62:71:6f: af:fa:84:4a:e5:d1:ac:ea:68:0d:5b:e2:bd:f1:fe:63:fc:18: 5c:85:0b:b3:55:b6:61:80:0a:dd:26:d5:51:9f:b9:5a:ed:3d: 63:2c:5e:27:85:e2:80:a1:6f:85:5f:d3:12:65:45:4f:3c:f1: 7b:b7:40:c2:6f:19:b0:b6:cb:8d:2f:2e:b7:d1:f9:3d:f7:91: 94:2c:2f:e8:15:e2:0f:1b:16:3a:df:5c:80:a2:dd:c8:2d:17: 91:3c:9c:70:ed:73:ad:6b:f0:f3:e9:76:41:3a:a5:55:45:cb: 20:56:a8:4b:e0:2f:cc:6d:54:4d:f7:4a:c1:77:87:e8:d4:bc: 27:e2:1d:60:b2:bb:1e:7d:73:a4:5c:95:93:44:6e:f8:90:42: 43:7c:a5:a5:b8:5f:1e:16:93:64:5a:ea:39:7a:87:ba:35:da: c9:d0:b6:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IdNnZ+zsEil9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NWMwY2YzYjEtMGJiMi00MjM0LWFjMGItOWM5Mjk1MmFmNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8knXGsnxS6ksdBI44gkX7f8YdRHn69h+JU4 8/Cp5cxBWa0PDt9VXyT2RrW2OqbVsluDTX1weGYYdLufsKQJZ3sMjQ63tHiJcmEb pFiTLqQO6SrCOcKw4ywh0Mey1+a3a2ijiNlgppHftl667/ZS4l8EoOPC+vrFg77Z VuLMl12K9TPH0lK1mJVmf3NEh3jGMvbM9oiUCGJgMtOqZF0Xe7Bc7Telwf4a5jFW HePO8aljP2N2ux6pgO1i80vdWXecFOi4Wr6CLiHxUzSXW+ASJtujeppWOl4CPjLV gOdaO5z+SrOHA1fXgI7/iwywxxqA9hGzWFnIFx9gsnVlkAHP2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXXvUFxi8s38rdcH+elBYclOkGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMTJlN2JkMzUtMTI2ZC0z MGMxLWJkNzQtOTA5ZTU2YTA4MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo8lOUWevLi1nMR37AY5ZatMjnnmGSN+sqRk6DQzntyVCB3YgiDRZUD fJ/xKUlZiHhYmlM67g6bnfokH7vrcoYH+pKIfeViom6z1TuI/jp5XkWoYF+LFmJx b6/6hErl0azqaA1b4r3x/mP8GFyFC7NVtmGACt0m1VGfuVrtPWMsXieF4oChb4Vf 0xJlRU888Xu3QMJvGbC2y40vLrfR+T33kZQsL+gV4g8bFjrfXICi3cgtF5E8nHDt c61r8PPpdkE6pVVFyyBWqEvgL8xtVE33SsF3h+jUvCfiHWCyux59c6RclZNEbviQ QkN8paW4Xx4Wk2Ra6jl6h7o12snQtlw= -----END CERTIFICATE-----Generated at Tue Apr 29 19:36:39 2025 by rpki-client