$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa File: 5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa (raw, json) Hash identifier: bta1/uKwGdFyKJ886At/5lwDa3FUNacmpBxp4pRJhj4= Subject key identifier: 24:94:3D:6D:0F:C1:A0:56:8C:18:90:CE:AE:43:50:F6:C3:70:DF:74 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858499AF48703E5BAD9EA3F2155C0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 394437 IP address blocks: 72.20.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:87:03:e5:ba:d9:ea:3f:21:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=1b77c4df-9846-4b38-adf4-9cb9d6f94bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:1f:36:6d:56:cf:15:f0:1b:e0:f1:99:bb: 62:75:7c:c0:22:89:e0:55:6e:f4:f2:a8:4b:af:c6: bf:f8:17:74:8e:9d:50:1a:cb:de:1e:85:89:9f:05: 15:ea:64:d0:ae:b9:f4:3a:7d:7a:61:40:b8:dc:ed: 3d:f6:72:a5:3a:a1:9f:b1:6f:b1:d4:ff:52:ec:64: 5d:be:4a:ca:e5:52:79:10:dc:4d:b7:90:30:7c:e6: a6:97:f9:4b:ea:34:7e:19:9e:23:84:90:9b:d1:cc: c8:f6:5e:15:8b:b2:9f:1a:1c:ff:8f:9e:12:58:0c: 48:09:e1:a9:6e:b7:93:b9:16:2a:f0:6b:3b:ea:9e: 07:42:0c:7f:f0:24:0e:61:74:85:f7:f5:26:8c:dd: 16:20:6c:04:1e:4b:97:4e:f4:bc:d1:6e:de:c1:b4: 47:b4:28:28:6d:04:74:97:2a:69:d7:49:75:db:b9: e0:9d:f2:db:c3:2c:ba:6e:64:06:08:06:8f:a9:2e: 57:db:df:4d:84:96:31:70:73:2b:e9:93:76:db:57: 5a:a6:20:d7:8c:87:b2:f6:e6:18:77:d0:68:d5:16: 47:68:8d:60:1c:09:22:3d:29:97:29:ad:17:fa:68: 30:d4:da:1e:c0:14:9b:c9:0e:8d:a2:4d:21:78:44: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:94:3D:6D:0F:C1:A0:56:8C:18:90:CE:AE:43:50:F6:C3:70:DF:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2b:57:a8:81:fd:f4:86:d3:b1:6f:31:8d:a8:bf:90:f5:fd: f5:03:26:58:05:98:89:1c:eb:67:83:9b:3e:34:79:d9:85:a4: 56:7f:ce:52:19:bd:33:10:47:f7:71:20:7a:4c:2c:75:5f:e2: 6a:db:4e:8c:8f:06:80:f6:18:63:51:e4:4b:6a:ad:a3:e0:62: 9c:31:08:07:a4:a4:05:26:27:45:81:66:48:15:ac:43:05:d1: e8:be:62:30:69:f9:bb:3f:46:27:4a:ee:05:c4:b9:e4:b4:11: c7:a8:5d:ea:b2:6e:3e:62:1e:ed:c4:be:af:6d:01:9c:72:2c: b5:66:29:9b:17:76:05:f4:bf:c1:9f:76:ce:df:d2:61:ab:f7: 01:03:33:a2:7f:8b:90:1e:e7:fa:89:3f:00:d2:b5:72:12:cf: 44:4c:86:41:11:97:56:ec:b1:ee:30:b1:7e:b4:77:85:b9:a9: 09:13:86:e5:5b:dc:0e:0e:cf:0f:ce:84:61:75:73:b9:10:f5: ac:ac:a5:f3:ed:36:fd:69:bc:ab:56:62:19:b1:da:28:12:ce: 77:2c:53:ae:08:de:97:bf:45:c9:7c:c7:1f:fd:f1:8f:0d:43: 20:60:ec:ff:00:e2:df:2f:38:f5:da:9d:93:29:6e:7f:22:61: 10:02:23:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IcD5brZ6j8hVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MWI3N2M0ZGYtOTg0Ni00YjM4LWFkZjQtOWNiOWQ2Zjk0YmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/gfNm1WzxXwG+DxmbtidXzAIongVW708qhL r8a/+Bd0jp1QGsveHoWJnwUV6mTQrrn0On16YUC43O099nKlOqGfsW+x1P9S7GRd vkrK5VJ5ENxNt5AwfOaml/lL6jR+GZ4jhJCb0czI9l4Vi7KfGhz/j54SWAxICeGp breTuRYq8Gs76p4HQgx/8CQOYXSF9/UmjN0WIGwEHkuXTvS80W7ewbRHtCgobQR0 lypp10l127ngnfLbwyy6bmQGCAaPqS5X299NhJYxcHMr6ZN221dapiDXjIey9uYY d9Bo1RZHaI1gHAkiPSmXKa0X+mgw1NoewBSbyQ6Nok0heETl4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSUPW0PwaBWjBiQzq5DUPbDcN90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNWZjY2Y1ZWEtZjVlZi0z MDRjLTg4MDgtZGFkZTkwZDdiNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcrV6iB/fSG07FvMY2ov5D1/fUDJlgFmIkc62eDmz40edmFpFZ/zlIZ vTMQR/dxIHpMLHVf4mrbToyPBoD2GGNR5EtqraPgYpwxCAekpAUmJ0WBZkgVrEMF 0ei+YjBp+bs/RidK7gXEueS0EceoXeqybj5iHu3Evq9tAZxyLLVmKZsXdgX0v8Gf ds7f0mGr9wEDM6J/i5Ae5/qJPwDStXISz0RMhkERl1bsse4wsX60d4W5qQkThuVb 3A4Ozw/OhGF1c7kQ9ayspfPtNv1pvKtWYhmx2igSzncsU64I3pe/Rcl8xx/98Y8N QyBg7P8A4t8vOPXanZMpbn8iYRACI2M= -----END CERTIFICATE-----Generated at Tue Apr 29 13:27:10 2025 by rpki-client