$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa File: 9b381475-2f37-3a66-a109-346ba5355fa0.roa (raw, json) Hash identifier: lCeeTA6vuK7G+dzm7SRQBzCPTnZUWUKUMyUtKeYTaxY= Subject key identifier: 25:B9:75:06:CE:5B:67:43:66:79:C7:12:8F:EE:8F:18:1B:AD:04:60 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858494CC936F61B47B68D76698F00 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 394437 IP address blocks: 72.20.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:36:f6:1b:47:b6:8d:76:69:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=15936ff3-73ef-4f57-be17-5efd2c99fd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:fc:6f:b3:ca:b0:2d:66:b0:9d:e6:ac:28: 71:78:35:47:70:76:70:ed:5f:e8:09:f7:e8:31:47: 78:f2:fb:91:f2:e6:9e:90:5a:f9:e0:31:89:a1:bb: c5:44:22:0d:43:04:88:43:62:b3:76:f5:01:38:a6: 04:fb:1d:95:57:5b:8a:c3:9a:c2:44:1e:23:46:ad: 0a:9d:e3:2e:f1:9b:3a:15:74:c0:0a:34:20:dc:64: a6:6e:0d:ba:6f:36:02:1e:e7:2d:de:75:b5:2c:37: 42:b1:ee:47:db:4e:cd:2c:b7:f1:62:66:bb:ac:72: e3:e8:38:65:e4:7c:e7:7a:14:4c:c3:f3:3f:32:a6: e6:95:e4:9a:ff:63:fb:4e:90:76:68:38:52:70:48: 8e:4f:90:42:ca:98:00:ab:2b:8f:6c:8d:b7:d9:a7: 8f:f7:e8:4d:c0:05:04:80:e6:b4:24:57:bd:3e:d0: 8d:ef:1c:56:38:a4:78:92:d6:33:86:67:8c:08:2c: 75:5b:39:8f:94:16:f2:a2:1c:29:b4:e6:0e:78:0d: f9:96:bb:25:35:91:a2:b6:25:0e:b1:79:96:e3:5f: b8:5e:05:86:33:e7:05:b6:e6:d7:2f:7d:26:35:3b: 63:34:51:5d:2b:4f:ae:86:5e:02:02:21:1b:dc:21: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B9:75:06:CE:5B:67:43:66:79:C7:12:8F:EE:8F:18:1B:AD:04:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:04:db:9d:30:6d:84:a1:9b:be:0b:d5:b6:43:7d:60:5c:ce: b4:7e:20:6d:80:a9:b0:e3:51:91:ad:59:5a:26:f4:7e:e2:18: 88:7c:a0:2a:3f:22:38:52:bf:85:54:c6:20:3f:0a:13:c9:3e: 55:dd:8d:0a:fb:0a:41:4e:be:ce:63:72:82:24:b2:9d:fa:85: 4e:5f:4e:3a:b9:72:c4:27:a1:61:b3:93:08:d4:aa:ca:f4:87: 8d:a6:a3:96:5f:59:17:07:1d:52:3a:95:75:a8:6a:a6:39:c2: 55:61:9f:47:78:5c:63:fe:40:0a:b4:d4:80:b7:09:3c:e3:fa: 52:82:d6:c4:e8:94:07:4c:b2:61:80:1d:34:cf:6a:f2:d7:5f: 15:5f:37:34:7b:95:b4:86:96:8a:79:87:20:ae:53:b0:8b:67: ec:2f:ab:4a:87:66:62:d6:1c:2c:a5:27:10:28:7d:6c:31:4c: 27:19:05:c9:c4:93:96:ca:80:91:e6:93:bd:8f:52:88:3b:95: af:1c:80:31:4b:1c:78:55:5e:f8:2d:23:ca:07:61:57:c9:b5: 93:d0:da:13:4f:a9:82:67:4f:15:6f:75:07:40:96:82:73:73: d4:69:64:28:5a:2b:fb:ef:fb:79:22:06:53:da:f7:4d:7e:65: dd:f6:54:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyTb2G0e2jXZpjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MTU5MzZmZjMtNzNlZi00ZjU3LWJlMTctNWVmZDJjOTlmZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngr8b7PKsC1msJ3mrChxeDVHcHZw7V/oCffo MUd48vuR8uaekFr54DGJobvFRCINQwSIQ2KzdvUBOKYE+x2VV1uKw5rCRB4jRq0K neMu8Zs6FXTACjQg3GSmbg26bzYCHuct3nW1LDdCse5H207NLLfxYma7rHLj6Dhl 5HznehRMw/M/MqbmleSa/2P7TpB2aDhScEiOT5BCypgAqyuPbI232aeP9+hNwAUE gOa0JFe9PtCN7xxWOKR4ktYzhmeMCCx1WzmPlBbyohwptOYOeA35lrslNZGitiUO sXmW41+4XgWGM+cFtubXL30mNTtjNFFdK0+uhl4CAiEb3CEx/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW5dQbOW2dDZnnHEo/ujxgbrQRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvOWIzODE0NzUtMmYzNy0z YTY2LWExMDktMzQ2YmE1MzU1ZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIE250wbYShm74L1bZDfWBczrR+IG2AqbDjUZGtWVom9H7iGIh8oCo/ IjhSv4VUxiA/ChPJPlXdjQr7CkFOvs5jcoIksp36hU5fTjq5csQnoWGzkwjUqsr0 h42mo5ZfWRcHHVI6lXWoaqY5wlVhn0d4XGP+QAq01IC3CTzj+lKC1sTolAdMsmGA HTTPavLXXxVfNzR7lbSGlop5hyCuU7CLZ+wvq0qHZmLWHCylJxAofWwxTCcZBcnE k5bKgJHmk72PUog7la8cgDFLHHhVXvgtI8oHYVfJtZPQ2hNPqYJnTxVvdQdAloJz c9RpZChaK/vv+3kiBlPa901+Zd32VHE= -----END CERTIFICATE-----Generated at Tue Apr 29 17:51:13 2025 by rpki-client