$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa File: 35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa (raw, json) Hash identifier: Ro9WOMQxBi0q9AoC00pPSjFzjshunoqITuHMofqm0TY= Subject key identifier: A7:B2:09:79:60:C4:4A:DB:59:8A:DE:40:8C:7D:1A:C2:48:D1:9A:B5 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858499AF48729DCC99A0D6D44D180 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 394437 IP address blocks: 72.20.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:87:29:dc:c9:9a:0d:6d:44:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=ed0c86ec-c258-4676-b3d0-b42f1d3d973c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d7:29:f6:07:13:e6:f5:e2:30:90:d8:93:5d: 14:5d:86:57:d7:d4:38:ea:88:3f:1a:cb:cb:1e:56: ab:ff:9f:77:34:56:3d:26:88:6d:26:0f:2c:05:08: b6:96:ac:02:ba:26:b7:f0:fa:72:44:99:ea:9f:8a: 21:b1:be:7e:fb:03:77:1d:e1:fc:8b:a9:3d:ba:04: c2:95:07:14:25:58:8b:27:86:d3:39:22:3f:71:f8: dc:3a:bc:cc:4a:79:62:6f:e6:46:32:bd:59:b5:9d: 8a:af:0e:6c:6e:e7:b5:62:12:4f:f4:f6:d7:09:af: 61:22:ff:01:db:63:14:05:6c:87:d4:6b:75:29:55: 52:ac:c7:9c:11:27:d2:29:5c:90:65:02:7e:27:33: 48:5d:fd:e5:56:a1:d9:4a:8d:f9:5c:75:51:e7:ee: 62:d7:8d:c5:06:31:5c:08:e6:3b:c4:20:23:9a:7c: 31:eb:72:ae:be:1d:d3:e1:da:40:38:ac:9d:ea:03: 14:a8:6f:1f:34:58:48:4f:2c:d2:14:e1:13:ee:69: 55:7c:a6:f1:88:ed:b2:7f:1b:08:e9:26:62:6a:1c: 16:ea:ba:d1:eb:54:2a:bb:57:7a:59:1a:a7:4e:30: ef:96:b7:1b:6c:c8:c9:c2:ce:2c:8e:2f:47:ed:fc: 82:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B2:09:79:60:C4:4A:DB:59:8A:DE:40:8C:7D:1A:C2:48:D1:9A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:23:90:80:1e:c0:05:a8:76:ea:bf:ba:ba:b5:ed:50:93:a3: 80:71:2c:36:91:db:42:ee:51:e0:74:b7:79:75:7d:f4:5f:55: 78:49:fe:43:90:b9:cd:54:44:ac:3d:1e:2a:e5:a8:79:0f:65: 20:0c:18:04:7e:3c:81:e6:f4:28:b2:ea:71:38:97:25:a5:ff: 54:ca:24:5c:30:69:ac:d1:8d:3b:82:8e:1f:0a:f1:61:92:25: 08:60:ca:3f:03:f5:81:fa:d0:1d:de:38:e1:7a:ef:9b:d0:83: f2:6b:02:06:b6:79:26:cc:bb:72:f5:90:19:03:58:1c:ac:27: 82:10:1c:77:d2:50:9d:82:f8:83:46:80:01:54:8c:b9:eb:4a: 87:e1:7b:71:81:37:1e:b1:01:d8:1b:b5:94:c2:cf:41:5f:b9: eb:5d:af:f8:21:2a:5a:d0:92:a9:0a:a3:ae:5d:13:76:f1:8c: 8b:ba:52:2e:e1:df:3c:cb:98:88:e9:9b:56:07:c7:c7:3b:50: c0:6a:c8:4c:59:61:7f:2a:06:d5:28:37:b6:4d:81:c3:63:b1: 80:f2:26:11:31:bd:f8:5e:b4:1c:21:ae:0b:a3:37:91:0c:27: 42:de:aa:6a:81:fa:67:3a:67:4d:09:d0:8d:43:b6:f5:0a:1d: 73:4a:84:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Icp3MmaDW1E0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZWQwYzg2ZWMtYzI1OC00Njc2LWIzZDAtYjQyZjFkM2Q5NzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9cp9gcT5vXiMJDYk10UXYZX19Q46og/GsvL Hlar/593NFY9JohtJg8sBQi2lqwCuia38PpyRJnqn4ohsb5++wN3HeH8i6k9ugTC lQcUJViLJ4bTOSI/cfjcOrzMSnlib+ZGMr1ZtZ2Krw5sbue1YhJP9PbXCa9hIv8B 22MUBWyH1Gt1KVVSrMecESfSKVyQZQJ+JzNIXf3lVqHZSo35XHVR5+5i143FBjFc COY7xCAjmnwx63Kuvh3T4dpAOKyd6gMUqG8fNFhITyzSFOET7mlVfKbxiO2yfxsI 6SZiahwW6rrR61Qqu1d6WRqnTjDvlrcbbMjJws4sji9H7fyCmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeyCXlgxErbWYreQIx9GsJI0Zq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMzUzOTZiYzQtMGVkMC0z YjI2LThmZTUtYzI4ODNiYWYwOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUjkIAewAWoduq/urq17VCTo4BxLDaR20LuUeB0t3l1ffRfVXhJ/kOQ uc1URKw9HirlqHkPZSAMGAR+PIHm9Ciy6nE4lyWl/1TKJFwwaazRjTuCjh8K8WGS JQhgyj8D9YH60B3eOOF675vQg/JrAga2eSbMu3L1kBkDWBysJ4IQHHfSUJ2C+ING gAFUjLnrSofhe3GBNx6xAdgbtZTCz0Ffuetdr/ghKlrQkqkKo65dE3bxjIu6Ui7h 3zzLmIjpm1YHx8c7UMBqyExZYX8qBtUoN7ZNgcNjsYDyJhExvfhetBwhrgujN5EM J0LeqmqB+mc6Z00J0I1DtvUKHXNKhLc= -----END CERTIFICATE-----Generated at Tue Apr 29 18:44:27 2025 by rpki-client