$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa File: 802c7912-9ce3-3856-87c6-4a70974c9e3f.roa (raw, json) Hash identifier: k/fCkuKxuAVFINE+GcgfTvFqXbSfOCFs0/nxsxn2ux4= Subject key identifier: 3C:2C:0C:C1:67:44:CC:16:20:D6:80:9F:DE:B0:46:AE:8E:E9:02:79 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858494CC9394500AC086FD013A900 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 394437 IP address blocks: 72.20.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:39:45:00:ac:08:6f:d0:13:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=ae75db7a-b6da-45cc-a6ba-3ede99c41312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:75:22:3d:73:d9:79:b6:73:4f:05:56:16:e7: be:93:1c:21:3e:ab:9a:2d:a9:f8:6a:b7:2a:3e:a6: 14:52:29:81:8a:a6:c4:e0:5b:88:25:19:16:cf:ff: cc:66:f1:2f:25:b9:46:ae:e7:c6:eb:e0:1a:25:02: 25:6c:e3:1d:10:20:46:fa:a8:2a:07:2c:7a:91:bf: 4e:22:c0:84:1b:b0:c2:22:ab:cb:c3:f6:fe:d0:66: ed:17:57:a1:96:39:43:bf:81:e4:56:cb:8d:bb:8d: ba:3c:0e:94:5e:7c:bf:a5:23:fc:94:60:fd:3f:02: 37:f5:92:3a:4c:d5:04:d3:59:9a:ab:d6:dc:1f:c0: 43:69:94:36:15:74:0b:5b:7f:ed:34:77:88:25:42: f4:dc:77:c9:75:cf:db:d1:e8:0d:45:ac:cd:03:1d: b2:88:43:e0:af:da:28:38:94:8f:88:65:f8:8b:25: f6:de:f2:e1:4b:0f:9f:b9:3c:ff:d5:af:15:ef:95: c9:6a:44:73:b6:62:c7:84:cb:ca:20:2f:cb:14:ba: d7:0b:ee:f6:dd:7d:ac:37:9a:e9:f2:b8:52:d1:71: 8d:cf:90:60:73:bf:c5:63:74:c8:ec:94:24:d8:c3: 20:7a:b6:0b:f7:b9:fa:80:e3:a5:6f:61:dc:47:5f: c7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2C:0C:C1:67:44:CC:16:20:D6:80:9F:DE:B0:46:AE:8E:E9:02:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:87:f3:8b:60:5c:a8:11:db:e3:e7:c3:d2:1e:fb:ae:de:65: 9c:9d:98:f0:7d:13:ef:41:15:e7:62:6e:5a:61:26:1b:0c:28: b4:d7:d2:ed:85:c6:8b:a4:86:00:67:31:23:23:ce:c2:d9:e0: 80:42:be:69:e3:ce:be:df:20:3e:fb:65:d2:22:79:ff:4e:83: 92:a9:08:6e:9e:50:38:25:9d:23:6c:e4:b7:47:34:d4:91:cd: 5d:6c:8a:01:8d:a3:31:32:ab:f7:62:a1:62:4a:1c:82:86:23: 80:ea:ff:7b:59:69:c7:7b:81:8a:6d:a4:f5:a3:c2:34:af:4f: b3:b0:50:a5:78:42:7b:60:50:96:77:be:e0:11:64:fa:b5:2a: 82:42:87:8b:0b:e9:9e:8c:65:93:84:94:5a:fa:db:5c:a0:b2: 1b:00:ef:55:fa:d4:ce:bc:11:05:2a:f6:27:8c:f5:84:1c:67: db:f7:2c:ee:cb:0a:cc:b9:92:da:34:b8:b8:14:7a:a6:d9:9d: 4a:4c:fc:f1:d1:f3:51:1e:a7:c5:e3:fe:b2:65:d9:d8:13:8e: dd:a9:a9:90:cc:c1:e9:45:da:ff:de:e8:09:a2:f0:3e:ac:44: 8e:83:92:57:1c:0b:a1:ea:eb:ce:9b:51:61:ce:03:bb:b3:c4: 8d:c1:42:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyTlFAKwIb9ATqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YWU3NWRiN2EtYjZkYS00NWNjLWE2YmEtM2VkZTk5YzQxMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknUiPXPZebZzTwVWFue+kxwhPquaLan4arcq PqYUUimBiqbE4FuIJRkWz//MZvEvJblGrufG6+AaJQIlbOMdECBG+qgqByx6kb9O IsCEG7DCIqvLw/b+0GbtF1ehljlDv4HkVsuNu426PA6UXny/pSP8lGD9PwI39ZI6 TNUE01maq9bcH8BDaZQ2FXQLW3/tNHeIJUL03HfJdc/b0egNRazNAx2yiEPgr9oo OJSPiGX4iyX23vLhSw+fuTz/1a8V75XJakRztmLHhMvKIC/LFLrXC+723X2sN5rp 8rhS0XGNz5Bgc7/FY3TI7JQk2MMgerYL97n6gOOlb2HcR1/HnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwsDMFnRMwWINaAn96wRq6O6QJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvODAyYzc5MTItOWNlMy0z ODU2LTg3YzYtNGE3MDk3NGM5ZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyH84tgXKgR2+Pnw9Ie+67eZZydmPB9E+9BFediblphJhsMKLTX0u2F xoukhgBnMSMjzsLZ4IBCvmnjzr7fID77ZdIief9Og5KpCG6eUDglnSNs5LdHNNSR zV1sigGNozEyq/dioWJKHIKGI4Dq/3tZacd7gYptpPWjwjSvT7OwUKV4QntgUJZ3 vuARZPq1KoJCh4sL6Z6MZZOElFr621ygshsA71X61M68EQUq9ieM9YQcZ9v3LO7L Csy5kto0uLgUeqbZnUpM/PHR81Eep8Xj/rJl2dgTjt2pqZDMwelF2v/e6Ami8D6s RI6DklccC6Hq686bUWHOA7uzxI3BQms= -----END CERTIFICATE-----Generated at Thu May 1 00:41:25 2025 by rpki-client