$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa File: 2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa (raw, json) Hash identifier: ojwlpOnI9yhqsOha3B5PSWenPyW8+UhkrP+uaGJP5YQ= Subject key identifier: 49:8E:D9:E3:E6:B5:47:58:83:73:82:D2:82:D8:60:D4:A1:DC:32:CA Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858499AF486DA2C2FC81E62BD2400 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 394437 IP address blocks: 72.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:86:da:2c:2f:c8:1e:62:bd:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=e86b16be-1fd0-4896-9296-558cdc783d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:f0:ad:ad:0e:e9:47:2e:a9:51:18:f7:3d: e9:93:34:bf:22:62:27:6f:e5:fb:be:a8:d6:40:4c: 07:77:a5:66:5c:e5:2e:95:2c:c6:d1:5e:38:de:c1: 8e:39:fa:2e:69:8a:8d:6e:ac:f9:bc:49:c4:24:31: f2:db:a3:d3:9c:43:08:24:66:f3:46:3c:96:b6:65: 0d:3d:c6:2e:e1:5e:b3:25:88:13:52:82:02:71:c2: 7e:91:07:20:bc:63:d5:0b:35:0e:26:de:2a:70:94: d3:ac:11:64:bb:74:a6:c8:94:9f:21:79:10:7e:6c: 0a:9b:09:35:d4:26:ca:30:ca:73:f2:96:7f:07:43: 99:4f:47:37:51:5c:f5:eb:50:5e:a7:29:8f:30:20: 66:4f:68:ee:5e:38:09:64:c5:b4:05:f8:45:fc:76: e8:f8:d4:87:40:68:b5:ca:11:88:39:3e:4c:ca:3c: e5:ca:b5:0a:d3:7f:37:3c:7a:5b:8a:ab:25:2e:a7: 3b:44:73:26:a1:00:5a:54:80:2f:79:af:81:b5:4c: 18:90:51:d5:ea:55:80:5f:96:1e:73:4f:e8:4c:2f: 51:25:de:f6:5b:2f:bc:b8:7a:f0:4c:8b:6a:a1:39: 34:c6:ec:bf:ea:a7:12:62:ee:80:cc:0c:cc:1a:15: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8E:D9:E3:E6:B5:47:58:83:73:82:D2:82:D8:60:D4:A1:DC:32:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4d:88:a5:e1:7a:94:37:6d:cb:1c:f4:cd:0e:f5:34:91:37: d5:be:29:90:bc:0d:3e:d3:eb:0e:69:97:ec:88:c3:ae:17:22: 02:d9:19:ac:af:d9:cb:78:17:58:54:12:4d:5f:b2:ee:45:fb: c1:47:5e:7d:27:7d:a6:fd:f1:1c:ba:34:14:26:ed:ef:6c:82: 9f:7a:e4:43:0c:e7:6b:f4:6d:45:b6:33:e7:f7:2b:45:c0:38: d7:dd:60:ac:3a:e6:0b:c7:44:70:40:9f:76:35:1c:26:f8:d8: bf:8e:74:1d:71:af:d5:a0:e1:4c:89:65:d0:64:4c:6b:1c:d4: aa:45:3e:7a:d2:43:ef:1a:e0:0e:3b:7d:f9:09:f2:02:63:44: 3b:28:e9:24:d2:ad:17:94:14:f8:76:e5:4f:86:af:50:76:44: 6c:a0:18:94:34:be:0e:8a:7a:56:67:71:13:01:ec:92:e9:32: 15:a7:a9:e1:68:a6:b9:94:2d:3e:da:ab:28:f7:e8:4f:52:b9: 92:30:ec:cd:d8:38:a2:cf:39:23:59:3e:bd:b5:75:e8:67:83: 4a:be:c6:a3:94:48:da:a3:68:8a:4d:ee:ef:f2:da:0c:78:86: da:0f:27:4a:c2:f8:09:5a:8e:8b:a6:b3:b1:62:b9:75:58:09: b6:b5:f0:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IbaLC/IHmK9JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZTg2YjE2YmUtMWZkMC00ODk2LTkyOTYtNTU4Y2RjNzgzZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqvwra0O6UcuqVEY9z3pkzS/ImInb+X7vqjW QEwHd6VmXOUulSzG0V443sGOOfouaYqNbqz5vEnEJDHy26PTnEMIJGbzRjyWtmUN PcYu4V6zJYgTUoICccJ+kQcgvGPVCzUOJt4qcJTTrBFku3SmyJSfIXkQfmwKmwk1 1CbKMMpz8pZ/B0OZT0c3UVz161BepymPMCBmT2juXjgJZMW0BfhF/Hbo+NSHQGi1 yhGIOT5MyjzlyrUK0383PHpbiqslLqc7RHMmoQBaVIAvea+BtUwYkFHV6lWAX5Ye c0/oTC9RJd72Wy+8uHrwTItqoTk0xuy/6qcSYu6AzAzMGhUgxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmO2ePmtUdYg3OC0oLYYNSh3DLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMjMyMGRmMGEtYmExYS0z ODBjLWJlMGYtZDhlM2M3Zjk3M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNNiKXhepQ3bcsc9M0O9TSRN9W+KZC8DT7T6w5pl+yIw64XIgLZGayv 2ct4F1hUEk1fsu5F+8FHXn0nfab98Ry6NBQm7e9sgp965EMM52v0bUW2M+f3K0XA ONfdYKw65gvHRHBAn3Y1HCb42L+OdB1xr9Wg4UyJZdBkTGsc1KpFPnrSQ+8a4A47 ffkJ8gJjRDso6STSrReUFPh25U+Gr1B2RGygGJQ0vg6KelZncRMB7JLpMhWnqeFo prmULT7aqyj36E9SuZIw7M3YOKLPOSNZPr21dehng0q+xqOUSNqjaIpN7u/y2gx4 htoPJ0rC+Alajoums7FiuXVYCba18No= -----END CERTIFICATE-----Generated at Tue Apr 29 13:25:51 2025 by rpki-client