$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa File: c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa (raw, json) Hash identifier: yeS+Jw6y1jnOOia810thSNrjO7fWXynQ1wZ53KjwApg= Subject key identifier: 35:A8:EC:B1:52:E7:A8:EC:43:A6:33:77:30:46:01:E3:D6:CC:17:B6 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F43285849DF5A6E984842D9DAD1A54050 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 399629 IP address blocks: 72.5.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:6e:98:48:42:d9:da:d1:a5:40:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=6eeac924-0d00-43b7-9653-0b12b0242538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:3a:cc:f6:fc:e7:0e:ec:3a:95:35:21:1d: fc:bc:5a:aa:7a:fb:07:fb:d3:2b:ce:86:56:5e:e7: 57:b6:9c:25:22:82:a5:53:8e:85:e3:80:c1:f0:56: 79:6f:ff:f4:a7:f4:f8:a5:88:4e:7f:c6:7a:99:d3: d0:bb:ef:35:36:5e:d2:72:ed:b1:62:f9:e8:70:63: 31:e0:84:e3:f5:3f:03:03:d1:7b:b6:05:70:f6:5d: 94:42:1b:d9:10:c0:25:49:f4:fc:f1:87:be:31:c7: 9a:63:c3:5b:17:a2:5b:82:0c:5f:0e:26:9e:a0:ea: bf:0e:6c:e4:40:6e:f3:6c:4a:c7:85:0a:ba:31:bb: 60:59:fe:16:ea:6e:4b:28:6f:2e:d4:73:ff:ba:15: e7:08:3d:38:f9:01:f0:d0:00:05:a4:dc:44:95:70: da:2f:e4:c2:db:ff:30:8e:8e:7f:38:43:b3:9a:80: eb:85:5b:37:65:4f:ac:d1:0d:8f:f2:20:9b:86:1a: 42:38:3a:7d:7f:fc:bd:42:83:36:91:25:8b:53:0c: 13:0a:6e:da:b9:ca:5c:d7:23:eb:5a:26:27:6c:56: ca:74:3e:92:7d:5b:3c:01:be:4f:90:bc:e2:12:71: 1a:31:66:6a:1a:b7:ea:6e:8b:33:fa:6b:48:9c:be: 36:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A8:EC:B1:52:E7:A8:EC:43:A6:33:77:30:46:01:E3:D6:CC:17:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 72.5.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:52:2f:4d:93:8a:32:db:1e:3a:b3:d4:85:6e:d2:b6:15:c2: 96:66:d2:ba:09:c0:87:9b:51:56:d6:12:9f:bc:30:3e:e3:5b: ee:8e:47:1f:78:17:f7:08:33:83:18:6a:cd:f9:c3:24:22:de: 2a:0c:d2:f0:aa:c6:c4:1b:10:f4:4d:3f:49:8c:30:1c:be:78: 43:7f:20:79:bf:60:c7:f6:de:ec:5c:80:e9:6e:4c:61:90:d9: a1:1f:12:4b:59:50:ec:54:50:44:ac:7e:f6:4e:20:04:c2:a4: 95:50:e5:82:7e:08:af:43:ce:8b:b4:55:f3:9f:83:39:29:36: e1:c2:c1:ee:fb:35:da:83:c0:43:7b:2b:7b:96:1a:fc:e8:d9: 03:b3:09:2e:2a:69:01:ad:27:f3:ba:f4:22:ee:c0:80:4e:dc: 6c:1e:49:58:39:05:9b:44:53:2e:77:54:ed:18:d9:57:0e:7f: 0d:28:dd:01:a0:ac:28:90:4e:ed:d6:9e:d3:16:27:d9:ca:ea: ce:cc:ee:7c:67:7a:1c:d1:0f:57:b4:0f:af:ea:90:b4:f2:3c: 09:56:68:2f:08:3b:97:c9:98:4d:2b:0b:7e:64:31:fd:49:9a: d5:74:de:4b:d7:70:88:e2:b2:99:d6:6b:0d:fa:6f:97:04:cd: 77:59:66:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWm6YSELZ2tGlQFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NmVlYWM5MjQtMGQwMC00M2I3LTk2NTMtMGIxMmIwMjQyNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIs6zPb85w7sOpU1IR38vFqqevsH+9MrzoZW XudXtpwlIoKlU46F44DB8FZ5b//0p/T4pYhOf8Z6mdPQu+81Nl7Scu2xYvnocGMx 4ITj9T8DA9F7tgVw9l2UQhvZEMAlSfT88Ye+MceaY8NbF6JbggxfDiaeoOq/Dmzk QG7zbErHhQq6MbtgWf4W6m5LKG8u1HP/uhXnCD04+QHw0AAFpNxElXDaL+TC2/8w jo5/OEOzmoDrhVs3ZU+s0Q2P8iCbhhpCODp9f/y9QoM2kSWLUwwTCm7aucpc1yPr WiYnbFbKdD6SfVs8Ab5PkLziEnEaMWZqGrfqbosz+mtInL42rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWo7LFS56jsQ6YzdzBGAePWzBe2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYzFjYWI3YjQtNTcyYy0z NWIwLWI2YjYtZmIyYTg2ZmVlY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSAUqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpSL02TijLbHjqz1IVu0rYVwpZm0roJwIebUVbWEp+8MD7jW+6ORx94 F/cIM4MYas35wyQi3ioM0vCqxsQbEPRNP0mMMBy+eEN/IHm/YMf23uxcgOluTGGQ 2aEfEktZUOxUUESsfvZOIATCpJVQ5YJ+CK9Dzou0VfOfgzkpNuHCwe77NdqDwEN7 K3uWGvzo2QOzCS4qaQGtJ/O69CLuwIBO3GweSVg5BZtEUy53VO0Y2VcOfw0o3QGg rCiQTu3WntMWJ9nK6s7M7nxnehzRD1e0D6/qkLTyPAlWaC8IO5fJmE0rC35kMf1J mtV03kvXcIjispnWaw36b5cEzXdZZlo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:05:01 2025 by rpki-client