$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/77202f3b-37e1-3746-93ec-d99bf6f5ad33.roa File: 77202f3b-37e1-3746-93ec-d99bf6f5ad33.roa (raw, json) Hash identifier: DqB5ZokdbgQotRxz4lCarxeeCXu6OWaJT7JXGkd00A4= Subject key identifier: 35:0B:65:7D:9F:98:C2:64:03:63:43:0D:C7:3C:66:00:DE:01:FE:85 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584971142AF2C111F1329A3DBA00 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/77202f3b-37e1-3746-93ec-d99bf6f5ad33.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 4766 IP address blocks: 72.9.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:2a:f2:c1:11:f1:32:9a:3d:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=2ae6748c-79a5-4556-b971-1c53877bd818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:4a:e2:1b:5f:a4:63:d4:1a:2e:7a:ad:85: ed:c1:4e:2b:9c:62:7c:86:f4:e5:d8:9d:c8:32:18: 82:06:2f:fb:6d:52:a2:27:43:aa:10:70:7c:cb:e4: 2a:1c:fa:ae:cb:10:97:b2:d7:b1:4c:84:c3:6e:7f: 82:8b:2b:67:1b:75:4d:08:b3:c7:31:43:83:f1:de: 3a:29:a2:83:86:26:3f:4b:f5:99:4e:0f:7b:fa:ff: 0c:d8:2c:68:28:3a:2a:ab:ed:d0:c2:ac:13:5c:db: 4d:e5:fa:92:46:25:a0:06:11:0e:d4:95:ba:54:b7: 67:85:6e:e3:f4:3b:c3:91:9d:b5:ed:98:69:01:de: 11:50:09:c0:79:cb:71:d8:23:2d:b7:2c:e7:3d:2f: fb:7e:b4:37:1e:f2:e0:a9:1a:b1:c0:17:37:07:32: 6b:f2:4e:b0:6f:45:ce:dc:4c:48:b7:1b:e4:23:20: 05:d5:bf:e5:b4:49:43:0a:13:49:eb:53:f3:1a:8b: b2:57:dd:a4:4e:74:5d:5d:28:39:af:3c:db:7d:c6: c2:0d:e4:2f:bd:b0:4c:18:a0:a1:c1:cd:eb:7c:7e: cd:76:97:39:fc:11:91:df:a5:f7:fa:de:1d:8a:89: f0:16:14:43:09:b7:ea:57:7e:c9:ba:67:1c:ea:ca: 86:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0B:65:7D:9F:98:C2:64:03:63:43:0D:C7:3C:66:00:DE:01:FE:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/77202f3b-37e1-3746-93ec-d99bf6f5ad33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ff:e3:b1:26:93:68:72:ae:ea:59:e9:a6:1c:76:64:c3:ac: 34:8d:b8:1b:d1:5d:64:19:12:48:5d:b1:9d:ae:3b:a7:38:e9: e8:d2:a2:c8:04:c7:3b:70:02:1c:40:5f:b3:1c:9b:07:41:67: 0a:af:86:28:1e:c3:d9:f5:f7:14:53:4b:33:f2:d7:38:25:df: 70:67:63:94:20:43:52:09:0b:d1:09:ce:8a:3c:19:80:47:92: 08:7d:7e:b8:8c:d7:8d:b9:8e:32:f1:60:76:79:2d:25:ee:c7: 6f:e6:db:49:ac:dc:31:c8:f0:cc:3d:9c:98:cf:f7:53:04:6b: fc:48:0b:f2:71:4c:22:f4:6d:d8:2c:b3:3e:a1:92:74:a1:71: 22:d9:dd:3a:c9:3a:d0:6e:37:14:c4:07:ac:dc:0e:05:17:31: 3e:38:4a:ab:26:13:a8:05:0b:0e:0c:13:4c:da:f2:6a:2e:79: 63:03:dc:93:7a:08:2f:c9:cd:85:78:d7:d7:23:85:17:ca:04: 24:00:07:ea:d0:82:63:b1:4f:dc:b3:06:0c:ee:93:70:28:1e: f8:3d:0d:8d:fa:dc:ca:18:b4:52:e3:c9:0d:a6:ee:71:ec:5c: e6:a6:cf:fa:0a:ea:fb:4f:ef:35:9b:a9:e4:57:58:75:ff:3a: 64:31:ac:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFCrywRHxMpo9ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk MmFlNjc0OGMtNzlhNS00NTU2LWI5NzEtMWM1Mzg3N2JkODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzxK4htfpGPUGi56rYXtwU4rnGJ8hvTl2J3I MhiCBi/7bVKiJ0OqEHB8y+QqHPquyxCXstexTITDbn+CiytnG3VNCLPHMUOD8d46 KaKDhiY/S/WZTg97+v8M2CxoKDoqq+3QwqwTXNtN5fqSRiWgBhEO1JW6VLdnhW7j 9DvDkZ217ZhpAd4RUAnAectx2CMttyznPS/7frQ3HvLgqRqxwBc3BzJr8k6wb0XO 3ExItxvkIyAF1b/ltElDChNJ61PzGouyV92kTnRdXSg5rzzbfcbCDeQvvbBMGKCh wc3rfH7Ndpc5/BGR36X3+t4dionwFhRDCbfqV37Jumcc6sqGNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDULZX2fmMJkA2NDDcc8ZgDeAf6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvNzcyMDJmM2ItMzdlMS0z NzQ2LTkzZWMtZDk5YmY2ZjVhZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3/47Emk2hyrupZ6aYcdmTDrDSNuBvRXWQZEkhdsZ2uO6c46ejSosgE xztwAhxAX7McmwdBZwqvhigew9n19xRTSzPy1zgl33BnY5QgQ1IJC9EJzoo8GYBH kgh9friM1425jjLxYHZ5LSXux2/m20ms3DHI8Mw9nJjP91MEa/xIC/JxTCL0bdgs sz6hknShcSLZ3TrJOtBuNxTEB6zcDgUXMT44SqsmE6gFCw4ME0za8moueWMD3JN6 CC/JzYV419cjhRfKBCQAB+rQgmOxT9yzBgzuk3AoHvg9DY363MoYtFLjyQ2m7nHs XOamz/oK6vtP7zWbqeRXWHX/OmQxrEM= -----END CERTIFICATE-----Generated at Sat Apr 26 17:47:24 2025 by rpki-client