$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4776edfc-bc46-3221-b5cc-4294fec1d431.roa File: 4776edfc-bc46-3221-b5cc-4294fec1d431.roa (raw, json) Hash identifier: /FAQyfFzj8b6++AFmrKGgqppqqlDkCI1JUgvvDGXGXQ= Subject key identifier: D7:89:46:6C:7A:7C:5C:D5:6D:ED:8E:A7:CE:67:9B:25:F7:D0:57:8B Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858499AF486F65A756B2993C46000 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4776edfc-bc46-3221-b5cc-4294fec1d431.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 394437 IP address blocks: 72.20.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:86:f6:5a:75:6b:29:93:c4:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=1e7be58e-7a38-4bcf-9b40-6d0ffd19331b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:75:3f:36:d2:1c:89:6b:29:e2:3b:b4:92: 74:88:cc:30:3c:42:18:2a:53:12:c2:4f:84:67:9b: 4b:c5:c6:53:64:43:37:0c:f1:59:51:ff:ea:eb:ab: ef:cc:c1:4a:eb:d1:3d:b8:a2:28:1e:0d:f9:37:5f: 03:3d:87:a4:9f:1d:b9:ef:cc:c4:c0:2f:d5:61:e9: e7:2b:64:3a:2b:c8:19:5b:71:10:a3:dd:02:d3:c0: 60:7d:99:03:d8:8a:d5:00:d9:48:42:eb:6d:be:15: de:9b:47:e6:a1:33:91:56:b9:20:9d:7a:1f:0d:9f: 9c:a7:c4:45:e4:b6:e1:d4:2c:98:63:89:47:74:2e: 20:c5:6c:e7:4a:60:c8:b5:df:93:78:f3:85:7c:94: 95:2f:fb:b2:47:be:ef:e3:bf:70:ee:7d:20:67:8f: ce:09:ba:2f:78:05:87:04:b9:3e:5f:9e:ce:5a:6c: 34:02:9a:02:37:80:57:22:47:08:0d:75:ac:95:5b: bb:82:24:79:5a:96:c2:db:62:ca:0c:0b:f0:59:bd: f6:fc:4f:b6:61:a0:28:98:91:83:1c:84:d4:36:ab: f1:73:a2:14:f0:86:0c:0c:5d:c3:b6:e9:70:47:53: 99:ae:97:c8:6f:e4:8a:78:67:1b:f8:b3:75:14:33: 18:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:89:46:6C:7A:7C:5C:D5:6D:ED:8E:A7:CE:67:9B:25:F7:D0:57:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4776edfc-bc46-3221-b5cc-4294fec1d431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:46:3c:53:b0:65:29:99:95:83:ed:69:a2:09:93:2f:84:ca: e9:fa:1e:6b:9d:04:73:e5:38:30:87:e0:96:67:0c:86:3c:03: b1:a4:1b:c7:44:a9:f1:6f:5f:82:7a:fa:4a:84:82:9e:5f:27: af:0d:8c:53:f6:aa:b5:6d:f9:07:fb:13:ae:76:fe:13:cd:8b: 0c:d8:73:2e:e3:21:55:09:30:96:35:f6:1b:39:b5:e1:f1:e8: 66:37:37:d3:88:b7:51:b8:fe:07:26:15:71:01:9e:73:2d:26: 86:62:38:22:18:66:09:9a:ea:70:2c:67:50:8a:ce:d8:c3:0f: 87:3a:38:68:5d:58:fa:4c:a6:26:d1:7d:57:4a:de:11:74:d2: 08:83:88:c1:27:62:d4:4d:b9:0b:67:66:c2:f0:69:f0:48:47: 24:83:6d:c0:2d:b5:69:cd:27:61:29:2e:38:03:b1:91:0c:19: 15:33:35:e6:64:dc:c0:cb:33:a2:a1:db:c6:37:f3:77:1f:cf: aa:4c:cd:ec:b8:24:21:c3:e4:c4:bc:56:fd:d8:dd:aa:20:8c: 21:e3:6d:40:8a:dd:05:9f:b6:e2:51:64:23:6c:80:44:92:d3: 7c:c8:8e:2d:f7:8a:f5:df:66:13:bd:0c:54:0b:ef:de:70:69: 9a:dd:88:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Ib2WnVrKZPEYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MWU3YmU1OGUtN2EzOC00YmNmLTliNDAtNmQwZmZkMTkzMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3l1PzbSHIlrKeI7tJJ0iMwwPEIYKlMSwk+E Z5tLxcZTZEM3DPFZUf/q66vvzMFK69E9uKIoHg35N18DPYeknx2578zEwC/VYenn K2Q6K8gZW3EQo90C08BgfZkD2IrVANlIQuttvhXem0fmoTORVrkgnXofDZ+cp8RF 5Lbh1CyYY4lHdC4gxWznSmDItd+TePOFfJSVL/uyR77v479w7n0gZ4/OCboveAWH BLk+X57OWmw0ApoCN4BXIkcIDXWslVu7giR5WpbC22LKDAvwWb32/E+2YaAomJGD HITUNqvxc6IU8IYMDF3DtulwR1OZrpfIb+SKeGcb+LN1FDMYIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeJRmx6fFzVbe2Op85nmyX30FeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNDc3NmVkZmMtYmM0Ni0z MjIxLWI1Y2MtNDI5NGZlYzFkNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpGPFOwZSmZlYPtaaIJky+Eyun6HmudBHPlODCH4JZnDIY8A7GkG8dE qfFvX4J6+kqEgp5fJ68NjFP2qrVt+Qf7E652/hPNiwzYcy7jIVUJMJY19hs5teHx 6GY3N9OIt1G4/gcmFXEBnnMtJoZiOCIYZgma6nAsZ1CKztjDD4c6OGhdWPpMpibR fVdK3hF00giDiMEnYtRNuQtnZsLwafBIRySDbcAttWnNJ2EpLjgDsZEMGRUzNeZk 3MDLM6Kh28Y383cfz6pMzey4JCHD5MS8Vv3Y3aogjCHjbUCK3QWftuJRZCNsgESS 03zIji33ivXfZhO9DFQL795waZrdiJE= -----END CERTIFICATE-----Generated at Wed Apr 30 00:55:23 2025 by rpki-client