$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa File: 308232c7-7251-38cc-86fe-9125a605bda8.roa (raw, json) Hash identifier: OJWSeGOZG9uIwWOIfrovpcV2SInFOpVj48R88NSVcD0= Subject key identifier: D5:AD:C5:31:86:8E:2F:91:EB:4A:8C:B8:42:2C:E4:FC:DE:E7:87:7F Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F43285849E91FA547D067FB9DC397DA00 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 394437 IP address blocks: 72.20.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a5:47:d0:67:fb:9d:c3:97:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=4f4b5ca8-54af-42dd-bb35-896450c2e785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ad:50:7c:34:c3:cb:af:98:d9:f1:30:89:7b: 6b:c8:a1:c9:c5:30:9f:12:1f:f5:c5:67:d2:89:91: 24:bc:6a:53:ef:2d:60:7b:17:2f:9d:f7:f3:48:27: 84:4a:b7:ab:91:c3:c7:0e:fb:1e:bb:3a:2c:0e:d9: c2:42:33:b9:12:f2:16:1d:3e:38:fd:ff:0b:da:1b: 04:10:1f:0e:9d:34:57:22:3f:92:aa:9a:0f:29:ae: b1:81:42:75:4a:85:73:ae:42:4f:dc:b5:5c:88:11: 5d:9d:a8:af:4b:fc:1b:15:d3:17:df:22:4d:8d:59: de:54:d1:01:b0:3e:03:68:a7:51:01:99:0b:fa:63: 71:f0:24:75:e9:4e:c0:2d:9f:5c:ff:24:15:30:d3: 6d:6d:18:f8:bc:0a:01:31:3f:1b:ee:91:a9:6e:1c: 88:c0:a7:05:35:f0:19:d5:f7:58:84:09:bd:d7:47: 64:af:30:a7:f2:ef:2e:f7:ca:8b:55:3a:77:1e:5b: 33:60:0a:79:da:3b:ec:c1:11:c1:96:53:c6:a4:42: 8b:ef:53:84:d3:64:9e:7d:3f:d4:c5:11:a2:72:69: 2b:0f:4f:51:39:ac:74:21:25:08:1f:06:45:43:56: 9d:42:b8:fc:5a:56:18:a2:5e:6b:f9:30:45:9e:aa: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AD:C5:31:86:8E:2F:91:EB:4A:8C:B8:42:2C:E4:FC:DE:E7:87:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e0:66:93:b8:b7:f6:19:60:7e:27:bf:ac:e6:c9:51:60:88: b0:dc:c7:cc:67:5c:56:47:b4:4c:79:b6:0f:3a:72:5c:f2:92: d2:e8:da:8c:d6:55:34:8b:e6:10:8a:3c:60:0a:ed:82:9f:41: 8a:71:b5:81:4b:40:39:30:a7:8c:10:d3:40:85:89:cc:8c:ad: 3e:e7:a3:53:98:5d:5c:49:73:aa:a1:d5:b0:b7:f7:be:17:2e: 9b:e5:b3:21:db:6f:68:35:db:d3:a5:a5:12:1e:47:af:ce:06: 5d:30:03:6a:51:d5:66:35:14:a3:fb:d6:d5:7e:1c:36:ab:70: 42:62:dc:37:39:12:1a:97:1b:41:dc:30:c6:da:ce:b5:40:f5: bb:20:40:b1:88:14:03:c1:7d:20:17:58:6d:b7:79:bf:4a:aa: 73:13:a6:79:27:3b:3a:2d:39:aa:9f:1b:01:f1:22:ee:8c:27: 54:2b:ca:45:85:e8:2f:77:cb:15:49:a7:e1:49:f3:f8:7c:32: 42:c8:1d:f7:50:2d:3e:30:c6:8e:6e:07:bc:5d:94:30:91:5d: 8e:0f:5b:20:8f:57:b2:08:36:f3:f8:29:cc:16:11:ed:fd:e9: d2:e8:fb:42:ec:9c:79:27:7b:4d:ae:33:3c:74:09:f3:c6:13: db:ec:a8:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6VH0Gf7ncOX2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk NGY0YjVjYTgtNTRhZi00MmRkLWJiMzUtODk2NDUwYzJlNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq1QfDTDy6+Y2fEwiXtryKHJxTCfEh/1xWfS iZEkvGpT7y1gexcvnffzSCeESrerkcPHDvseuzosDtnCQjO5EvIWHT44/f8L2hsE EB8OnTRXIj+SqpoPKa6xgUJ1SoVzrkJP3LVciBFdnaivS/wbFdMX3yJNjVneVNEB sD4DaKdRAZkL+mNx8CR16U7ALZ9c/yQVMNNtbRj4vAoBMT8b7pGpbhyIwKcFNfAZ 1fdYhAm910dkrzCn8u8u98qLVTp3HlszYAp52jvswRHBllPGpEKL71OE02SefT/U xRGicmkrD09ROax0ISUIHwZFQ1adQrj8WlYYol5r+TBFnqpJ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWtxTGGji+R60qMuEIs5Pze54d/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMzA4MjMyYzctNzI1MS0z OGNjLTg2ZmUtOTEyNWE2MDViZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfgZpO4t/YZYH4nv6zmyVFgiLDcx8xnXFZHtEx5tg86clzyktLo2ozW VTSL5hCKPGAK7YKfQYpxtYFLQDkwp4wQ00CFicyMrT7no1OYXVxJc6qh1bC3974X LpvlsyHbb2g129OlpRIeR6/OBl0wA2pR1WY1FKP71tV+HDarcEJi3Dc5EhqXG0Hc MMbazrVA9bsgQLGIFAPBfSAXWG23eb9KqnMTpnknOzotOaqfGwHxIu6MJ1QrykWF 6C93yxVJp+FJ8/h8MkLIHfdQLT4wxo5uB7xdlDCRXY4PWyCPV7IINvP4KcwWEe39 6dLo+0LsnHkne02uMzx0CfPGE9vsqAs= -----END CERTIFICATE-----Generated at Wed Jun 18 03:00:19 2025 by rpki-client