$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa File: f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa (raw, json) Hash identifier: jiKJAoL6DTnN2/JsmpKcnsu81EriJWCQMF46yN7HLYI= Subject key identifier: D8:77:63:0A:16:DB:9D:14:38:0F:E3:98:6D:AC:83:F0:B1:F1:80:56 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F43285848E9CBE7F5AFCCFBF40B0B0780 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 54032 IP address blocks: 72.233.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e7:f5:af:cc:fb:f4:0b:0b:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=4517b434-1afc-41e6-a551-b2087fac693a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7d:9c:d8:2c:38:e0:44:af:e5:10:d7:9b:4b: d4:1f:50:38:07:bd:0c:1a:da:c4:44:5f:c1:6f:23: bc:28:21:1f:6a:e8:4a:9e:1b:c4:8c:be:a4:2a:06: 3e:f1:df:69:13:dc:aa:13:9c:c3:83:f5:1e:ee:df: 5c:55:c7:4e:52:72:49:27:bc:6b:d7:88:2a:20:62: 15:08:e2:8f:bf:b1:f4:f4:7e:ba:a3:b7:e0:0f:88: de:ab:76:48:28:2c:cc:a9:44:3a:97:10:84:ba:a2: 04:14:00:f7:5d:0a:e3:e4:ff:6a:99:c1:9d:2d:90: f8:3c:e3:93:93:04:e4:bb:aa:61:92:05:2b:46:cb: 5f:52:51:9e:2d:ef:cb:be:71:36:ce:1f:f3:13:74: e3:df:f2:45:ef:76:1c:4d:e5:a1:02:82:2d:65:52: c3:85:8a:6d:bd:a0:63:49:6c:80:8c:56:60:5e:86: 34:94:4f:a2:08:86:bd:b3:d1:06:b0:fa:68:7d:22: e7:b0:66:14:e5:56:47:73:24:65:56:0d:b3:9a:5c: 4c:6b:2d:ab:25:44:f7:62:e4:ba:f7:fb:5f:a5:92: ce:17:2e:c1:d2:71:4c:89:1a:4c:a4:1b:b7:32:cc: 70:2e:d8:56:ff:3e:3d:71:51:5f:ac:d2:9e:c0:b3: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:77:63:0A:16:DB:9D:14:38:0F:E3:98:6D:AC:83:F0:B1:F1:80:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:af:eb:db:3e:f1:cc:6e:4b:47:63:14:98:e8:e4:c6:e5:54: c6:ed:3e:aa:90:ed:49:75:af:51:0e:e8:6f:e9:08:20:b0:80: 9a:1c:03:87:31:bf:a3:76:51:b1:f0:a4:79:93:51:f5:b0:c7: 3d:58:b1:89:20:17:54:a0:92:71:d6:19:e5:b6:8f:5f:3e:24: 18:97:fd:2b:ee:9d:0c:03:7e:75:a4:82:d8:b9:c8:ad:0e:f3: 60:a5:e6:cc:9e:ba:25:bb:c2:f6:09:ff:01:ff:42:b5:ea:db: f7:37:df:16:9f:df:60:e3:53:4c:6f:f1:00:95:e7:7a:39:cd: 38:89:65:eb:6f:54:96:00:c8:01:a9:91:4c:73:9a:10:3f:5d: d0:a0:d9:11:19:4e:75:9f:72:34:82:7b:9d:ba:ea:ed:42:f5: 1c:22:a5:70:f1:4a:fb:fb:4f:93:bc:99:8a:46:8d:af:3b:7d: 61:87:c3:94:5b:3c:eb:49:93:f3:30:99:7c:fa:17:53:36:be: 15:df:10:a2:a7:82:c8:9a:41:59:2b:e9:83:6f:3d:59:6a:33: 41:06:68:9a:61:9e:10:82:4f:cf:54:0e:10:85:2f:92:7f:75: 84:85:e2:a2:0f:56:38:15:89:97:eb:c9:ba:e9:b1:17:22:be: df:97:f2:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+f1r8z79AsLB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk NDUxN2I0MzQtMWFmYy00MWU2LWE1NTEtYjIwODdmYWM2OTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn32c2Cw44ESv5RDXm0vUH1A4B70MGtrERF/B byO8KCEfauhKnhvEjL6kKgY+8d9pE9yqE5zDg/Ue7t9cVcdOUnJJJ7xr14gqIGIV COKPv7H09H66o7fgD4jeq3ZIKCzMqUQ6lxCEuqIEFAD3XQrj5P9qmcGdLZD4POOT kwTku6phkgUrRstfUlGeLe/LvnE2zh/zE3Tj3/JF73YcTeWhAoItZVLDhYptvaBj SWyAjFZgXoY0lE+iCIa9s9EGsPpofSLnsGYU5VZHcyRlVg2zmlxMay2rJUT3YuS6 9/tfpZLOFy7B0nFMiRpMpBu3MsxwLthW/z49cVFfrNKewLM/FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh3YwoW250UOA/jmG2sg/Cx8YBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvZjllZjQ1YzQtYjA2Ny0z YWJhLWFkOGMtOTY5N2YzZjdjMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESOmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSv69s+8cxuS0djFJjo5MblVMbtPqqQ7Ul1r1EO6G/pCCCwgJocA4cx v6N2UbHwpHmTUfWwxz1YsYkgF1SgknHWGeW2j18+JBiX/SvunQwDfnWkgti5yK0O 82Cl5syeuiW7wvYJ/wH/QrXq2/c33xaf32DjU0xv8QCV53o5zTiJZetvVJYAyAGp kUxzmhA/XdCg2REZTnWfcjSCe5266u1C9RwipXDxSvv7T5O8mYpGja87fWGHw5Rb POtJk/MwmXz6F1M2vhXfEKKngsiaQVkr6YNvPVlqM0EGaJphnhCCT89UDhCFL5J/ dYSF4qIPVjgViZfrybrpsRcivt+X8qo= -----END CERTIFICATE-----Generated at Tue Apr 29 09:14:40 2025 by rpki-client