$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11e5723a-6711-3871-91a4-615d7b4e2eac.roa File: 11e5723a-6711-3871-91a4-615d7b4e2eac.roa (raw, json) Hash identifier: P05TMKHwgIsQX0rMijdR1YosCmrHGWKstTmiu5oO0no= Subject key identifier: 1F:77:F4:3A:EA:A3:D6:E9:78:6E:74:23:34:54:81:6C:FE:79:B0:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF319DA25792D9C291D280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11e5723a-6711-3871-91a4-615d7b4e2eac.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 32787 IP address blocks: 72.52.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:31:9d:a2:57:92:d9:c2:91:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=aead1246-55bf-4ac5-aa78-ae3db7d69677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:7b:7a:06:4e:4d:1e:12:d4:2b:2c:84:ba: b8:32:6a:d3:2d:a8:ef:67:01:7e:0f:b7:94:95:8f: 55:65:72:03:90:e8:2d:e7:b7:8c:5f:37:90:37:1c: f6:b9:7f:2f:e5:51:fd:d0:31:69:dc:7b:ce:63:d0: 2c:10:07:36:1c:4b:a3:06:85:4e:ed:62:ed:6b:fb: 96:c7:43:87:36:45:a4:2b:72:c8:57:9b:69:a5:fb: 89:39:3a:a9:50:52:ac:f8:d4:74:57:89:5e:64:2f: e9:d0:1e:8b:7a:d8:5d:bd:70:bf:12:0a:92:42:fd: 50:47:75:c7:92:dc:76:a8:ab:f1:7f:de:a2:97:02: bd:b9:8a:b3:46:d0:ee:e1:2b:53:5f:2a:08:c8:04: 02:35:ae:78:b2:96:66:43:8b:13:28:cb:61:03:cb: a3:97:d8:e5:54:0a:9d:55:dc:9d:5a:0d:f0:2e:2a: bd:5e:c9:09:56:b0:6f:90:6c:2c:55:0b:cd:4b:e1: 55:b2:14:e2:87:36:72:83:fa:d1:05:76:ba:3b:f3: 3c:c9:27:4b:a4:66:5f:b6:29:0e:d1:05:59:7b:20: c6:f7:61:5a:25:3b:f4:23:d1:c0:e4:ff:27:94:59: 8f:4a:71:c5:5f:be:8e:cc:c8:08:d4:b7:8d:92:22: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:77:F4:3A:EA:A3:D6:E9:78:6E:74:23:34:54:81:6C:FE:79:B0:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11e5723a-6711-3871-91a4-615d7b4e2eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4f:80:f1:a9:ef:1e:03:0e:db:7d:6e:20:aa:e2:81:01:e9: 01:21:53:33:33:59:3e:69:85:5e:32:6c:c9:2a:ac:d1:0f:d1: 61:ff:96:19:a7:94:65:72:30:c1:b5:8a:c9:13:99:7b:60:50: 0c:64:5f:90:e7:4b:50:8d:21:71:ae:f3:23:3a:08:ce:72:10: b6:6f:2a:0d:e5:39:ed:bf:cb:e1:ed:b2:5f:12:2f:c1:f2:d3: 19:ea:cd:c1:1d:56:9c:fe:f9:1e:fc:94:ac:88:1c:31:f9:43: 83:db:fe:76:a7:c0:f8:a6:a0:ca:30:29:1f:fc:89:a7:be:ca: 14:04:0c:88:62:8b:a2:2e:ce:ab:76:13:c9:27:c0:b2:69:93: 04:2b:19:48:94:05:ae:33:89:b5:06:f2:47:09:35:8a:e9:9d: de:a2:e1:f4:22:58:ec:95:b7:97:7a:54:ff:e3:92:b9:c5:d2: 44:0d:1a:8a:14:16:a6:1d:fc:02:59:e3:18:e5:57:35:aa:f2: 6f:96:65:6a:04:44:e8:9c:8b:00:a6:29:95:72:97:12:31:d7: 76:cf:24:0d:d6:24:94:91:42:b2:9a:06:32:60:bc:01:06:d2: 1f:d8:26:9b:c0:f4:b6:0f:1b:49:d0:0c:c6:8e:e2:e3:c1:d0: 7f:c4:ca:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzGdoleS2cKR0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YWVhZDEyNDYtNTViZi00YWM1LWFhNzgtYWUzZGI3ZDY5Njc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAped7egZOTR4S1CsshLq4MmrTLajvZwF+D7eU lY9VZXIDkOgt57eMXzeQNxz2uX8v5VH90DFp3HvOY9AsEAc2HEujBoVO7WLta/uW x0OHNkWkK3LIV5tppfuJOTqpUFKs+NR0V4leZC/p0B6LethdvXC/EgqSQv1QR3XH ktx2qKvxf96ilwK9uYqzRtDu4StTXyoIyAQCNa54spZmQ4sTKMthA8ujl9jlVAqd VdydWg3wLiq9XskJVrBvkGwsVQvNS+FVshTihzZyg/rRBXa6O/M8ySdLpGZftikO 0QVZeyDG92FaJTv0I9HA5P8nlFmPSnHFX76OzMgI1LeNkiLxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB939Drqo9bpeG50IzRUgWz+ebBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTFlNTcyM2EtNjcxMS0z ODcxLTkxYTQtNjE1ZDdiNGUyZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFPgPGp7x4DDtt9biCq4oEB6QEhUzMzWT5phV4ybMkqrNEP0WH/lhmn lGVyMMG1iskTmXtgUAxkX5DnS1CNIXGu8yM6CM5yELZvKg3lOe2/y+Htsl8SL8Hy 0xnqzcEdVpz++R78lKyIHDH5Q4Pb/nanwPimoMowKR/8iae+yhQEDIhii6Iuzqt2 E8knwLJpkwQrGUiUBa4zibUG8kcJNYrpnd6i4fQiWOyVt5d6VP/jkrnF0kQNGooU FqYd/AJZ4xjlVzWq8m+WZWoEROiciwCmKZVylxIx13bPJA3WJJSRQrKaBjJgvAEG 0h/YJpvA9LYPG0nQDMaO4uPB0H/Eyok= -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:11 2025 by rpki-client