$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa File: cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa (raw, json) Hash identifier: BO/SbIOjiWBtnJ6ES3WfeRlCoyOZYKsZJmuZk/GzUvQ= Subject key identifier: D5:62:28:8C:8F:0D:01:56:CF:58:6B:6C:7A:B5:2D:59:C0:5F:DC:F3 Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584A23C008EC58B65EAAB59EEF80 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 7922 IP address blocks: 72.22.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:08:ec:58:b6:5e:aa:b5:9e:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=27252032-5543-48fb-896d-6aecc161d0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5f:94:1d:fd:3f:6a:4d:96:ce:52:25:97:6d: 03:ca:b1:ea:8e:2d:5e:df:92:33:0d:e0:8b:7a:50: 69:be:ba:ed:1e:4a:42:43:78:38:38:35:df:1c:17: 0b:d8:0a:f6:cb:b2:39:c0:84:d5:c8:21:a2:d6:84: 91:34:a3:75:d5:58:88:3a:4f:45:8d:df:f1:8d:41: f9:46:44:04:c2:85:b6:55:93:f4:81:9a:18:8e:ba: c5:ec:25:13:e8:51:67:4d:22:af:6b:9b:f8:d7:29: 28:28:44:5a:21:1d:77:17:54:62:41:40:da:31:2b: 5b:ac:19:45:2b:ff:eb:5d:a7:54:4c:b0:d0:ae:f4: 2e:10:80:10:69:34:6d:3e:e1:d7:41:05:b6:c1:a5: 21:c5:08:cc:77:ed:c6:4f:aa:6e:83:87:50:ef:c0: 79:bb:29:fe:7f:71:71:bc:28:c3:9c:4f:15:2f:5d: 3e:e7:e4:c5:c9:4e:d3:52:a7:c0:8d:b3:88:35:db: f5:41:ac:f0:88:73:63:1d:f2:f7:07:c6:cf:c0:7c: 57:4f:4b:96:fe:b8:c3:78:6b:65:c2:2e:e6:9a:35: 49:36:87:00:5d:a0:37:88:f1:d7:e7:81:48:44:55: 30:51:66:31:53:7d:5d:f8:b5:74:21:2a:64:65:64: 8d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:62:28:8C:8F:0D:01:56:CF:58:6B:6C:7A:B5:2D:59:C0:5F:DC:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 72.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:44:c2:20:22:89:fa:c1:ec:88:e8:37:71:88:88:98:4e:8d: 97:45:31:4f:87:5b:65:3d:51:07:1e:6b:4f:c2:54:4e:88:f3: 5c:fb:4d:0e:4c:24:c8:0c:dc:24:b5:2e:51:42:b8:dd:5d:3b: 2c:3f:73:7f:46:61:bb:30:b7:ad:e2:6d:f6:ee:11:5f:aa:9c: 78:b1:b7:7e:18:c7:e0:f4:ee:eb:20:be:4b:cd:d8:27:87:3f: 31:5c:0b:9b:75:a0:d0:40:4a:34:9c:1a:c7:2b:e6:69:70:ba: 82:a1:29:11:b7:1a:48:60:f8:2d:8b:7c:c8:6c:21:31:8c:99: 69:2e:fb:a9:a9:6f:df:c4:6b:ce:43:8c:a0:b5:20:96:06:4d: ff:eb:67:a8:3b:cc:87:b4:d9:b7:ad:a3:e5:d9:2d:6c:4c:32: 27:2a:db:0e:ee:b4:96:9c:22:d4:21:a6:e8:84:bc:47:ca:fa: 14:30:e1:d6:f3:5d:6e:46:e4:2a:0c:b8:a8:47:c8:29:b9:d5: 9e:4d:12:c2:77:c7:70:d3:88:69:35:21:f1:d4:6f:e1:64:02: 41:e5:cb:b1:0e:0e:6c:49:3c:ae:2b:36:63:b0:61:55:e1:f2: bd:0e:31:cf:d0:b0:e7:d4:d1:8e:ef:ab:73:17:2f:00:14:4b: 99:e2:c1:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAjsWLZeqrWe74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk MjcyNTIwMzItNTU0My00OGZiLTg5NmQtNmFlY2MxNjFkMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF+UHf0/ak2WzlIll20DyrHqji1e35IzDeCL elBpvrrtHkpCQ3g4ODXfHBcL2Ar2y7I5wITVyCGi1oSRNKN11ViIOk9Fjd/xjUH5 RkQEwoW2VZP0gZoYjrrF7CUT6FFnTSKva5v41ykoKERaIR13F1RiQUDaMStbrBlF K//rXadUTLDQrvQuEIAQaTRtPuHXQQW2waUhxQjMd+3GT6pug4dQ78B5uyn+f3Fx vCjDnE8VL10+5+TFyU7TUqfAjbOINdv1QazwiHNjHfL3B8bPwHxXT0uW/rjDeGtl wi7mmjVJNocAXaA3iPHX54FIRFUwUWYxU31d+LV0ISpkZWSNBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNViKIyPDQFWz1hrbHq1LVnAX9zzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvY2ZiZDE5ODQtYjM0Zi0z MzI4LTgwNzItODVlMmUxZWNmZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZEwiAiifrB7IjoN3GIiJhOjZdFMU+HW2U9UQcea0/CVE6I81z7TQ5M JMgM3CS1LlFCuN1dOyw/c39GYbswt63ibfbuEV+qnHixt34Yx+D07usgvkvN2CeH PzFcC5t1oNBASjScGscr5mlwuoKhKRG3Gkhg+C2LfMhsITGMmWku+6mpb9/Ea85D jKC1IJYGTf/rZ6g7zIe02beto+XZLWxMMicq2w7utJacItQhpuiEvEfK+hQw4dbz XW5G5CoMuKhHyCm51Z5NEsJ3x3DTiGk1IfHUb+FkAkHly7EODmxJPK4rNmOwYVXh 8r0OMc/QsOfU0Y7vq3MXLwAUS5niwYQ= -----END CERTIFICATE-----Generated at Mon Jun 16 04:36:12 2025 by rpki-client