$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa File: 254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa (raw, json) Hash identifier: zEygbsLLC31VeqCUP/lxQoafIXaiGFHDjRIZHsoSJJU= Subject key identifier: B0:10:88:D2:CC:58:37:FA:4A:D0:41:BB:4B:BE:FF:1F:D6:51:E8:83 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858494CC944112D08CE855A2BBB80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 6830 IP address blocks: 72.9.160.0/22 maxlen: 22 72.9.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:44:11:2d:08:ce:85:5a:2b:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=a457702e-a448-4407-b130-e3efac31d91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:67:27:2e:5e:ba:ef:89:73:1e:b3:c9:69: 9e:15:16:90:b7:12:ef:88:8b:43:a9:7e:cf:1d:99: ac:cb:9e:45:ed:f5:c9:d0:63:ce:71:90:56:dc:b7: 16:72:62:03:a7:a2:65:68:e0:da:68:38:ab:d0:12: 0c:1b:99:5e:83:ab:ed:61:37:c2:72:31:b4:75:d1: 9e:78:b4:7f:09:b2:f4:4e:e5:0f:45:4d:3c:db:7c: 31:65:e9:66:f3:bb:ba:37:75:44:c8:56:61:72:71: 6b:07:78:51:87:1d:f9:72:12:e0:1f:f4:48:a4:4e: df:24:c4:8d:0a:6a:74:89:4d:e7:98:91:37:29:54: ac:3d:4d:00:18:68:25:b5:4c:a7:7f:32:ea:65:77: 82:62:1e:3c:1f:30:22:82:13:ad:d7:da:6e:43:6d: f3:01:4b:3c:e4:57:f2:f4:8e:6f:ea:f7:32:28:4e: c6:c4:a7:5c:95:46:95:4b:20:74:5a:85:35:d3:d8: 05:7c:7d:b3:78:fe:90:5c:72:39:91:70:0e:15:12: 48:15:4b:06:f8:1e:a8:c8:1e:a6:5c:7b:af:15:ad: 3e:cc:39:bc:8b:c7:fa:7d:b2:00:7d:3d:b2:3d:ea: bb:de:4f:fb:f8:72:5d:ab:16:e6:c5:99:0e:f7:31: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:10:88:D2:CC:58:37:FA:4A:D0:41:BB:4B:BE:FF:1F:D6:51:E8:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 72.9.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:9e:c7:5e:8b:aa:66:fe:c1:59:02:5b:13:92:37:ec:a1:48: dc:4f:eb:79:2c:e4:5f:72:46:a5:32:c4:85:38:4a:64:50:18: 02:e2:52:9f:fb:99:dd:96:f8:57:c7:84:16:17:ac:d7:84:30: b7:06:3f:6c:95:93:8c:7d:cb:2d:1c:e8:5f:ff:eb:2e:bd:04: e5:85:72:ef:a1:93:31:7b:69:e1:fe:5f:03:bc:d8:f5:91:4a: 2e:78:57:4d:0b:a4:36:78:ee:54:97:d4:2d:d8:47:16:66:e3: 65:83:d9:56:7c:fb:56:24:b7:42:4f:fe:41:dd:ac:95:df:34: f7:3f:a5:6b:b4:aa:d3:4b:03:57:b6:bb:ca:e8:02:35:d0:e1: f7:ce:11:bd:d9:f6:f1:d7:78:7a:3a:10:1f:09:39:80:d1:6a: d5:23:46:64:a3:94:39:d5:ed:a5:3e:50:9a:10:41:bb:66:5a: af:91:9d:ad:f6:79:ae:92:ef:4c:13:50:26:b8:3e:a1:3d:6d: b4:bc:bb:1f:42:b7:50:fa:dd:a6:84:f6:8a:63:ef:7d:44:93: 9b:d6:a8:db:72:64:75:e9:3c:f8:cf:82:6e:74:17:30:61:6c: 16:8a:31:37:c4:47:10:fc:77:cc:56:f5:0e:4d:8d:40:30:4a: 97:29:45:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUQRLQjOhVoru4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YTQ1NzcwMmUtYTQ0OC00NDA3LWIxMzAtZTNlZmFjMzFkOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyspnJy5euu+Jcx6zyWmeFRaQtxLviItDqX7P HZmsy55F7fXJ0GPOcZBW3LcWcmIDp6JlaODaaDir0BIMG5leg6vtYTfCcjG0ddGe eLR/CbL0TuUPRU0823wxZelm87u6N3VEyFZhcnFrB3hRhx35chLgH/RIpE7fJMSN Cmp0iU3nmJE3KVSsPU0AGGgltUynfzLqZXeCYh48HzAighOt19puQ23zAUs85Ffy 9I5v6vcyKE7GxKdclUaVSyB0WoU109gFfH2zeP6QXHI5kXAOFRJIFUsG+B6oyB6m XHuvFa0+zDm8i8f6fbIAfT2yPeq73k/7+HJdqxbmxZkO9zGb5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAQiNLMWDf6StBBu0u+/x/WUeiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjU0Njg1ZTItYzQwYi0z Nzc3LTlhMWQtNGZkODQxOWVjZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSAmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaex16Lqmb+wVkCWxOSN+yhSNxP63ks5F9yRqUyxIU4SmRQGALiUp/7 md2W+FfHhBYXrNeEMLcGP2yVk4x9yy0c6F//6y69BOWFcu+hkzF7aeH+XwO82PWR Si54V00LpDZ47lSX1C3YRxZm42WD2VZ8+1Ykt0JP/kHdrJXfNPc/pWu0qtNLA1e2 u8roAjXQ4ffOEb3Z9vHXeHo6EB8JOYDRatUjRmSjlDnV7aU+UJoQQbtmWq+Rna32 ea6S70wTUCa4PqE9bbS8ux9Ct1D63aaE9opj731Ek5vWqNtyZHXpPPjPgm50FzBh bBaKMTfERxD8d8xW9Q5NjUAwSpcpRf4= -----END CERTIFICATE-----Generated at Sat Apr 26 22:54:10 2025 by rpki-client