$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa File: 3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa (raw, json) Hash identifier: 9UKVdBgQmm9MdYArYjVTJBtDsQYKLyhefGqQ7qBtfJg= Subject key identifier: 34:C1:CE:6B:B0:6B:6C:F0:76:D0:4A:EB:50:8F:F0:AE:7E:4E:AB:8F Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E006901A2D280A0DEF842C00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 33363 IP address blocks: 72.31.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:90:1a:2d:28:0a:0d:ef:84:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=f0ea14d8-ea3e-41f9-9079-d4f36a7fb236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:2f:86:0c:07:2d:2c:ae:a8:e2:ec:97:0d: 41:db:63:f3:6a:ef:03:e5:24:94:b5:5f:44:6d:90: 2b:64:a5:c0:cb:a0:f7:e6:65:50:c9:0d:40:8c:5f: 34:b1:3a:9d:5b:83:36:de:35:b2:54:71:1b:6a:a9: 9b:76:01:8f:8e:0b:82:09:ee:bc:03:7c:a1:b8:8b: 53:ff:e2:06:c3:b3:a6:92:e3:47:4f:cb:68:c9:c3: a3:7a:3b:a4:65:89:e1:3b:af:a3:29:38:3f:f3:af: 23:28:80:6a:33:43:35:43:e6:ef:b3:8a:fa:01:e7: 4f:74:59:b4:5c:b9:9f:a1:a5:2a:78:9a:64:e6:94: 4e:ab:65:5e:0c:41:17:cd:55:79:68:a2:4d:b8:2a: 7b:b3:27:7b:71:d0:f1:61:3b:e1:07:84:d1:a4:bd: a6:e7:fe:d8:2c:84:b6:cd:69:90:84:33:00:e8:d4: 99:a8:06:c7:6d:61:e4:fe:d2:37:bc:b1:f4:55:43: b2:76:da:1f:99:bf:65:dc:ba:87:24:92:ea:b8:39: d9:c9:89:72:21:9a:97:50:b1:ee:25:82:ae:bd:47: 57:e8:15:d1:c7:09:b7:e9:17:14:fe:0b:0f:d5:9e: c5:16:2b:7a:a5:d2:80:c6:3a:8f:b1:d7:e4:4c:22: fc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C1:CE:6B:B0:6B:6C:F0:76:D0:4A:EB:50:8F:F0:AE:7E:4E:AB:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e4:98:16:49:48:09:1f:85:e0:72:bc:4b:5a:15:c7:15:bd: 67:76:f5:5b:71:8d:0d:af:de:a7:6e:2b:f5:bf:1b:30:8a:01: 17:00:ea:29:ea:cd:06:e8:3e:17:d2:88:38:1d:3c:a3:cb:fe: 13:a5:c2:da:0f:5d:8a:18:62:c5:85:4b:8f:4b:ee:58:5b:75: a8:0f:cf:9f:e9:d0:db:e2:ed:0b:ca:90:fe:41:bf:08:1d:c1: 51:29:14:b2:e9:77:56:44:46:45:d4:67:a7:9b:1e:67:4b:1d: b8:d7:be:4e:d3:d7:0a:73:db:bc:bd:4e:7a:dd:7b:28:ff:6d: c8:3f:1e:4e:6d:76:f1:74:11:52:a9:fb:e0:27:75:7d:35:14: eb:77:71:e3:59:18:cd:c9:5f:68:c6:b6:72:21:38:5e:1c:da: 98:cd:5b:1c:a2:8b:05:01:83:42:36:69:a5:6d:9a:8f:da:fd: 33:fa:d7:a3:46:1f:7e:6f:83:34:d8:59:86:c4:d2:65:86:0c: d7:6d:8a:aa:b1:42:14:49:bf:b9:52:ed:4b:00:96:b9:c5:f7: 7f:ac:03:44:30:45:76:04:53:3e:ca:f4:51:22:03:a2:12:ce: 96:62:96:4f:41:c3:a0:87:43:53:21:a7:0e:26:26:20:2b:88: 9a:20:14:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBpAaLSgKDe+ELAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjBlYTE0ZDgtZWEzZS00MWY5LTkwNzktZDRmMzZhN2ZiMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2kvhgwHLSyuqOLslw1B22Pzau8D5SSUtV9E bZArZKXAy6D35mVQyQ1AjF80sTqdW4M23jWyVHEbaqmbdgGPjguCCe68A3yhuItT /+IGw7OmkuNHT8toycOjejukZYnhO6+jKTg/868jKIBqM0M1Q+bvs4r6AedPdFm0 XLmfoaUqeJpk5pROq2VeDEEXzVV5aKJNuCp7syd7cdDxYTvhB4TRpL2m5/7YLIS2 zWmQhDMA6NSZqAbHbWHk/tI3vLH0VUOydtofmb9l3LqHJJLquDnZyYlyIZqXULHu JYKuvUdX6BXRxwm36RcU/gsP1Z7FFit6pdKAxjqPsdfkTCL8ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTBzmuwa2zwdtBK61CP8K5+TquPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvM2QwYzA4Y2MtNjA1YS0z ZjhlLThlMDktZmE1ZmRhOGY1NDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSB/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzkmBZJSAkfheByvEtaFccVvWd29VtxjQ2v3qduK/W/GzCKARcA6inq zQboPhfSiDgdPKPL/hOlwtoPXYoYYsWFS49L7lhbdagPz5/p0Nvi7QvKkP5Bvwgd wVEpFLLpd1ZERkXUZ6ebHmdLHbjXvk7T1wpz27y9Tnrdeyj/bcg/Hk5tdvF0EVKp ++AndX01FOt3ceNZGM3JX2jGtnIhOF4c2pjNWxyiiwUBg0I2aaVtmo/a/TP616NG H35vgzTYWYbE0mWGDNdtiqqxQhRJv7lS7UsAlrnF93+sA0QwRXYEUz7K9FEiA6IS zpZilk9Bw6CHQ1Mhpw4mJiAriJogFBY= -----END CERTIFICATE-----Generated at Tue Apr 29 17:13:10 2025 by rpki-client