$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300dbd74-6428-329b-87a1-93eec764e123.roa File: 300dbd74-6428-329b-87a1-93eec764e123.roa (raw, json) Hash identifier: 9lO8RBbG3ELKhtI/SPSsMugsNKJHfi07AvTl+4oIJSE= Subject key identifier: AA:EF:10:14:3D:3E:D5:88:F1:8A:19:3E:0F:0C:D5:86:69:41:F3:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C3B62E16F0EA5FF893980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300dbd74-6428-329b-87a1-93eec764e123.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 20940 IP address blocks: 72.247.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:3b:62:e1:6f:0e:a5:ff:89:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=54045a27-c7d7-4411-b767-b3baca21826d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:03:02:50:bb:2d:6f:bb:fc:57:0f:93:e4:03: 1b:d4:d8:80:ff:8d:2e:9e:72:3f:be:12:6e:e3:24: 20:1d:49:66:84:14:8d:04:32:8b:87:fd:44:01:8d: a2:20:df:13:88:76:3d:68:28:91:c6:ac:2c:3a:10: e3:b9:3b:b7:2d:61:40:c4:93:c2:56:24:8e:b3:d3: 65:16:5e:4c:b9:21:71:0d:24:ca:1a:af:54:73:56: e2:53:08:43:c6:59:e4:8a:2b:99:1e:b1:d0:4f:10: 8c:e2:2a:fd:9b:91:18:44:d7:b7:bf:27:d7:e1:9f: b6:c4:b7:fc:9d:00:6e:3a:07:26:df:0d:8d:52:cf: 39:1a:fd:78:9e:a4:02:cf:12:f5:ad:cc:12:06:73: aa:c2:88:3e:1a:5f:3c:94:c4:97:4a:2a:fb:3f:32: ae:d1:d7:d5:51:9c:84:ce:a6:e8:c3:c2:4e:5e:df: 88:5c:30:8e:67:b3:6e:cb:cb:56:bd:24:66:47:4e: 78:53:6a:ca:45:aa:ae:3a:77:ec:71:cb:5b:35:95: 42:81:30:53:2a:50:77:50:ed:62:8f:39:7e:11:dc: ad:33:95:af:a8:ef:52:a2:79:01:ff:87:35:af:b7: 09:1a:4e:20:f1:58:01:38:72:12:9d:cd:3c:91:f8: 1c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EF:10:14:3D:3E:D5:88:F1:8A:19:3E:0F:0C:D5:86:69:41:F3:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300dbd74-6428-329b-87a1-93eec764e123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ed:11:e5:c4:ec:d1:48:ef:50:70:19:1f:ba:0d:a0:df:83: 99:af:f5:05:8b:1a:2a:bd:eb:09:5d:4f:7b:31:87:4a:f0:b6: 7c:6b:31:32:d9:e1:88:d0:be:6b:02:c8:88:50:ad:dd:51:48: 2c:01:ac:34:06:99:b8:03:8b:f3:da:54:ad:44:26:d8:9a:4f: 79:01:66:6f:cd:1b:a4:4c:dd:ad:b6:3a:fa:85:cb:bd:8d:ab: 4d:eb:f1:c3:19:e5:f7:57:a1:2b:8a:af:09:23:d4:0a:4d:09: a6:13:87:98:98:25:ed:25:33:d2:9a:97:c1:9a:62:43:71:81: be:02:8a:c4:f7:84:92:e0:54:d8:c6:84:2d:01:89:48:41:a5: 80:b8:29:6d:d1:82:08:93:ab:e6:5f:d8:e3:28:26:73:36:cd: 8b:6d:f4:13:69:8c:d5:e0:7d:c1:c1:39:0c:c9:8e:1d:41:c8: 08:46:af:6c:4c:3f:15:24:9d:fb:60:d1:9d:28:4b:e9:3c:03: 40:0d:67:2e:e9:f1:ce:92:69:cb:f0:c5:c8:ac:29:61:e3:02: b0:16:a0:8e:6e:cf:ba:45:ec:4d:3d:90:74:e9:8b:cd:ef:37: 42:3e:1e:73:4c:2e:ca:69:d4:08:a2:4c:ee:c9:fa:22:ad:e0: 0f:2d:c4:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDti4W8Opf+JOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NTQwNDVhMjctYzdkNy00NDExLWI3NjctYjNiYWNhMjE4MjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgMCULstb7v8Vw+T5AMb1NiA/40unnI/vhJu 4yQgHUlmhBSNBDKLh/1EAY2iIN8TiHY9aCiRxqwsOhDjuTu3LWFAxJPCViSOs9Nl Fl5MuSFxDSTKGq9Uc1biUwhDxlnkiiuZHrHQTxCM4ir9m5EYRNe3vyfX4Z+2xLf8 nQBuOgcm3w2NUs85Gv14nqQCzxL1rcwSBnOqwog+Gl88lMSXSir7PzKu0dfVUZyE zqbow8JOXt+IXDCOZ7Nuy8tWvSRmR054U2rKRaquOnfscctbNZVCgTBTKlB3UO1i jzl+EdytM5WvqO9SonkB/4c1r7cJGk4g8VgBOHISnc08kfgcOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrvEBQ9PtWI8YoZPg8M1YZpQfMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzAwZGJkNzQtNjQyOC0z MjliLTg3YTEtOTNlZWM3NjRlMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7tEeXE7NFI71BwGR+6DaDfg5mv9QWLGiq96wldT3sxh0rwtnxrMTLZ 4YjQvmsCyIhQrd1RSCwBrDQGmbgDi/PaVK1EJtiaT3kBZm/NG6RM3a22OvqFy72N q03r8cMZ5fdXoSuKrwkj1ApNCaYTh5iYJe0lM9Kal8GaYkNxgb4CisT3hJLgVNjG hC0BiUhBpYC4KW3RggiTq+Zf2OMoJnM2zYtt9BNpjNXgfcHBOQzJjh1ByAhGr2xM PxUknftg0Z0oS+k8A0ANZy7p8c6SacvwxcisKWHjArAWoI5uz7pF7E09kHTpi83v N0I+HnNMLspp1AiiTO7J+iKt4A8txJs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:18:23 2025 by rpki-client