$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/398ec4f1-e274-35f6-aaf0-e1291486e4b8.roa File: 398ec4f1-e274-35f6-aaf0-e1291486e4b8.roa (raw, json) Hash identifier: EDH9Ir8XmHtWdeOalVWcNsl2fr2ihEq4aqa1JQvmoO8= Subject key identifier: C5:E1:90:F1:C2:4D:F9:85:59:71:93:9D:B1:5A:CE:BA:E3:D4:E1:D6 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F432858499CD265A9B2C2AF59795716C0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/398ec4f1-e274-35f6-aaf0-e1291486e4b8.roa Signing time: Tue 22 Apr 2025 17:03:51 +0000 ROA not before: Tue 22 Apr 2025 17:03:51 +0000 ROA not after: Mon 21 Jul 2025 17:03:51 +0000 asID: 21859 IP address blocks: 72.9.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:d2:65:a9:b2:c2:af:59:79:57:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Apr 22 17:03:51 2025 GMT Not After : Jul 21 17:03:51 2025 GMT Subject: CN=a838686a-49a8-477d-873d-989427d3998a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a1:07:77:e2:c4:5b:df:35:50:13:6e:fc:ab: b0:11:07:e4:15:71:01:e2:2a:d1:36:3e:f5:4f:cc: 83:f0:10:f2:30:18:ba:d0:42:6b:78:30:c0:43:09: a3:e1:5a:2a:4b:f6:22:fe:b9:3f:86:65:eb:4f:d7: 05:c4:ad:51:4d:50:cc:a5:25:4f:85:6b:a3:4c:36: 33:cf:01:ba:3a:b5:12:98:ee:a0:1d:7a:af:53:51: a9:79:79:ee:33:32:69:47:5c:27:67:40:f3:67:5c: 3c:4f:1c:2e:91:eb:46:c4:1f:8a:5b:3d:ad:da:d7: 50:94:26:e4:56:88:22:56:ac:79:30:32:e7:5f:fc: 70:d6:54:2d:4b:d3:79:8b:12:bd:be:7c:9a:0c:c3: 78:be:56:3a:21:bc:9d:af:f5:e5:01:b2:5a:da:d5: 39:d7:dd:6b:14:d0:d3:1c:54:82:ee:1d:6a:9a:f5: fd:53:db:a8:fe:60:22:56:91:d3:c3:03:ba:cb:f8: fd:0e:c5:41:13:00:1b:6e:27:da:f4:3a:5a:8f:3f: 4b:9a:95:76:ff:b0:13:01:c8:de:fe:5e:f6:5e:4e: f4:bd:fb:fb:b5:42:6a:cf:4e:82:a9:48:8f:69:f7: c5:af:2f:d1:41:1d:94:66:e2:55:f1:8d:f2:da:7a: 8b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E1:90:F1:C2:4D:F9:85:59:71:93:9D:B1:5A:CE:BA:E3:D4:E1:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/398ec4f1-e274-35f6-aaf0-e1291486e4b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7e:58:14:e1:76:b7:7b:72:33:30:48:0f:ab:c8:19:8b:be: 50:52:65:9f:90:99:71:61:7a:99:57:05:0b:9b:47:c9:75:cf: d6:7a:e8:d0:09:e9:f0:fd:91:90:7a:ef:1a:8b:ce:ce:fe:11: 4c:a0:3b:0e:02:c2:91:f5:1f:b0:0d:44:65:50:2b:04:e7:66: 1d:0f:79:42:66:ca:59:27:c8:73:c0:67:61:51:88:d2:f3:69: dc:fd:58:35:e2:a5:08:4c:cc:7a:39:f9:62:ca:f7:0d:8b:db: 69:d7:9a:d9:b5:44:ee:e3:43:9a:6c:3f:82:57:7d:08:ee:73: 9c:b9:7f:a1:f3:63:bc:22:b9:6e:b5:dc:27:97:c1:c0:1b:04: 2b:ae:69:f5:cf:38:b2:60:73:7a:dd:26:cb:ef:9d:7f:fa:9a: ab:cc:6d:36:b8:14:ea:d0:ca:8b:05:cb:5f:f9:8d:a4:af:e9: ef:d9:c1:2c:70:d4:23:dc:50:8c:79:1f:63:a1:82:51:2b:76: ad:f3:93:29:f3:c7:3f:ea:1c:89:43:7c:4c:0f:47:6f:41:fa: 02:14:b6:b6:ee:f7:dc:06:11:67:8c:ec:e6:1a:e5:d7:6f:cd: 0a:03:53:83:f7:c4:75:3e:9d:1a:e9:77:75:26:b1:83:b5:20: 09:02:13:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmc0mWpssKvWXlXFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDQyMjE3MDM1MVoXDTI1MDcyMTE3MDM1MVowLzEtMCsGA1UEAxMk YTgzODY4NmEtNDlhOC00NzdkLTg3M2QtOTg5NDI3ZDM5OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKEHd+LEW981UBNu/KuwEQfkFXEB4irRNj71 T8yD8BDyMBi60EJreDDAQwmj4VoqS/Yi/rk/hmXrT9cFxK1RTVDMpSVPhWujTDYz zwG6OrUSmO6gHXqvU1GpeXnuMzJpR1wnZ0DzZ1w8TxwuketGxB+KWz2t2tdQlCbk VogiVqx5MDLnX/xw1lQtS9N5ixK9vnyaDMN4vlY6Ibydr/XlAbJa2tU5191rFNDT HFSC7h1qmvX9U9uo/mAiVpHTwwO6y/j9DsVBEwAbbifa9Dpajz9LmpV2/7ATAcje /l72Xk70vfv7tUJqz06CqUiPaffFry/RQR2UZuJV8Y3y2nqLjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXhkPHCTfmFWXGTnbFazrrj1OHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMzk4ZWM0ZjEtZTI3NC0z NWY2LWFhZjAtZTEyOTE0ODZlNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV+WBThdrd7cjMwSA+ryBmLvlBSZZ+QmXFheplXBQubR8l1z9Z66NAJ 6fD9kZB67xqLzs7+EUygOw4CwpH1H7ANRGVQKwTnZh0PeUJmylknyHPAZ2FRiNLz adz9WDXipQhMzHo5+WLK9w2L22nXmtm1RO7jQ5psP4JXfQjuc5y5f6HzY7wiuW61 3CeXwcAbBCuuafXPOLJgc3rdJsvvnX/6mqvMbTa4FOrQyosFy1/5jaSv6e/ZwSxw 1CPcUIx5H2OhglErdq3zkynzxz/qHIlDfEwPR29B+gIUtrbu99wGEWeM7OYa5ddv zQoDU4P3xHU+nRrpd3UmsYO1IAkCE3I= -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:27 2025 by rpki-client