$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa File: 802c7912-9ce3-3856-87c6-4a70974c9e3f.roa (raw, json) Hash identifier: VLzNvD7UBRlaUdkUaCY8jQkOrqxM9yFCi4E0HXdfP70= Subject key identifier: C0:4B:B0:1C:EF:B6:49:CD:60:E0:01:4B:30:36:BB:57:77:CB:54:18 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584A2C20185FA906AD78DE0B7D00 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 394437 IP address blocks: 72.20.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:18:5f:a9:06:ad:78:de:0b:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=b3b1e31d-954a-4b47-a010-a8d1b7c532b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:b6:50:7e:fd:f9:2b:39:45:7b:9e:07:8d: dd:e8:5d:4e:1a:53:ae:a2:ac:93:a6:ad:fa:5c:33: 76:2c:81:ec:ef:8f:e2:71:84:31:f3:fa:08:e0:79: b2:33:af:de:4b:d8:92:04:d1:08:f7:ba:df:bc:bc: 68:70:80:c9:4b:90:08:94:ca:dc:38:60:60:8f:1b: 25:bf:72:66:7b:15:75:65:68:cc:b1:de:7e:e7:be: 17:40:1e:a9:fa:fe:0d:3e:11:5a:08:c3:65:3f:dc: 21:4f:2a:13:64:4c:2f:b8:5a:6c:a9:01:35:39:18: fa:47:42:19:18:a6:ba:fb:4e:63:3c:32:55:54:4c: c4:86:bd:49:a7:0f:bc:62:c0:c0:23:f5:46:fc:2a: b5:07:13:74:05:1c:55:b2:62:9c:f1:c4:bf:fb:3b: 16:cb:ab:9a:4e:ca:93:85:90:c6:27:4f:33:3e:22: 78:1c:dc:31:6b:f6:a7:f9:18:f2:92:0e:32:e4:3a: 2b:02:63:a1:5d:28:9d:ba:40:b8:a2:bb:63:92:58: 20:c3:4f:28:c8:e2:6c:ad:ab:32:05:eb:54:ce:11: 56:b0:d9:a4:f0:43:eb:94:91:2c:23:ee:94:95:65: 60:0e:d2:07:cc:25:bc:de:36:b2:47:11:92:5a:17: ea:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4B:B0:1C:EF:B6:49:CD:60:E0:01:4B:30:36:BB:57:77:CB:54:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:06:ba:02:2f:0e:f9:bd:d0:4d:59:4e:f0:fe:bb:e9:4e:16: f3:a0:14:cd:9e:fc:df:54:b5:e3:fc:0f:8e:a2:68:f4:de:9b: f5:de:65:a6:ee:09:cc:c8:06:91:95:17:15:29:74:07:24:8f: 9a:f2:6f:18:05:7d:e0:95:e4:97:cb:68:4c:62:97:4b:79:40: 6a:b3:13:3b:69:7b:ac:ba:e0:a4:09:08:44:df:10:2f:af:b0: 97:06:c0:16:f2:33:d2:87:fb:99:f9:da:af:62:c4:5c:06:4a: b6:60:e2:d0:c8:2c:d1:38:73:7f:86:80:5b:f8:44:78:5f:be: ee:1f:0b:3e:13:ea:28:25:55:6a:f8:91:9a:64:f5:4b:4d:b0: b4:38:b4:91:ce:a7:1f:d3:97:f4:d0:59:1c:54:39:cc:87:7c: 2e:58:7e:6f:be:50:88:02:87:a8:12:5a:3a:19:9f:bb:8f:2b: 9c:72:03:4c:ee:89:f6:de:bb:a5:af:1a:02:c8:65:e9:17:16: b7:c3:69:9a:73:b0:fc:6a:38:7b:de:d1:b3:36:73:16:68:50: 0e:a9:51:a2:bb:3d:d3:cc:00:da:a1:ec:c5:5d:44:ae:46:89: 67:54:e9:34:29:0f:c3:a5:f1:06:5b:42:cc:e1:d7:c7:b2:5f: bf:66:0b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBhfqQateN4LfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk YjNiMWUzMWQtOTU0YS00YjQ3LWEwMTAtYThkMWI3YzUzMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeK2UH79+Ss5RXueB43d6F1OGlOuoqyTpq36 XDN2LIHs74/icYQx8/oI4HmyM6/eS9iSBNEI97rfvLxocIDJS5AIlMrcOGBgjxsl v3JmexV1ZWjMsd5+574XQB6p+v4NPhFaCMNlP9whTyoTZEwvuFpsqQE1ORj6R0IZ GKa6+05jPDJVVEzEhr1Jpw+8YsDAI/VG/Cq1BxN0BRxVsmKc8cS/+zsWy6uaTsqT hZDGJ08zPiJ4HNwxa/an+Rjykg4y5DorAmOhXSidukC4ortjklggw08oyOJsrasy BetUzhFWsNmk8EPrlJEsI+6UlWVgDtIHzCW83jayRxGSWhfqKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBLsBzvtknNYOABSzA2u1d3y1QYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvODAyYzc5MTItOWNlMy0z ODU2LTg3YzYtNGE3MDk3NGM5ZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsGugIvDvm90E1ZTvD+u+lOFvOgFM2e/N9UteP8D46iaPTem/XeZabu CczIBpGVFxUpdAckj5rybxgFfeCV5JfLaExil0t5QGqzEztpe6y64KQJCETfEC+v sJcGwBbyM9KH+5n52q9ixFwGSrZg4tDILNE4c3+GgFv4RHhfvu4fCz4T6iglVWr4 kZpk9UtNsLQ4tJHOpx/Tl/TQWRxUOcyHfC5Yfm++UIgCh6gSWjoZn7uPK5xyA0zu ifbeu6WvGgLIZekXFrfDaZpzsPxqOHve0bM2cxZoUA6pUaK7PdPMANqh7MVdRK5G iWdU6TQpD8Ol8QZbQszh18eyX79mCwA= -----END CERTIFICATE-----Generated at Tue Jun 17 19:50:27 2025 by rpki-client