$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45ea7a02-5ea2-3999-9a2a-ad602dd624ad.roa File: 45ea7a02-5ea2-3999-9a2a-ad602dd624ad.roa (raw, json) Hash identifier: ZH7CZoHa5+rFUuOLeUEm3okAHTcJS2aN3WzgQ1icGUg= Subject key identifier: EA:AD:8F:73:AF:CC:58:95:D4:72:2C:D3:2F:62:A8:D8:86:5D:8B:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C302456135C9F05FABA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45ea7a02-5ea2-3999-9a2a-ad602dd624ad.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 16625 IP address blocks: 72.246.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:30:24:56:13:5c:9f:05:fa:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=97475885-005a-49ed-b5d0-139b2194adc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4e:14:6a:96:73:6c:02:03:8f:8f:2a:d1:c6: d0:9f:f5:87:1b:7d:4d:ae:4f:cf:cf:83:b6:2e:84: ad:06:be:71:9b:70:fe:77:92:7e:53:5f:de:40:75: e5:72:06:ce:95:07:e5:76:98:4e:01:7c:0e:d7:5e: c0:35:71:11:3a:03:db:3e:b6:bc:00:59:d3:c1:4c: c5:06:be:33:3e:63:ce:68:44:c5:98:0b:78:84:fd: ac:90:55:3a:63:2d:ec:e3:f0:e3:36:0b:f3:40:39: 67:97:e3:c2:a5:d4:5d:8a:f6:02:b4:4a:e1:79:21: e3:8c:94:6a:e4:7f:d2:5b:16:1e:33:73:a2:80:42: d7:55:42:5f:7c:ea:e3:30:cf:91:a0:f9:39:5d:2c: 69:78:7b:7c:f6:43:32:6a:e7:6c:b4:70:c9:06:d8: 7e:33:e8:43:be:6e:9f:5f:37:a4:f9:d7:7a:0c:1e: 3b:e2:a8:ca:b6:4d:45:ad:ca:b2:ac:55:a1:4e:eb: 22:e0:7b:16:df:5d:23:14:f0:d2:54:b1:f6:70:9e: dc:b9:09:59:db:3b:f8:a2:a2:bb:fa:b2:cf:d3:3a: eb:51:f6:67:a0:f8:96:8f:9d:cf:89:06:16:ea:ba: 90:b1:41:cf:48:67:f9:86:e2:f8:70:6f:45:12:d4: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AD:8F:73:AF:CC:58:95:D4:72:2C:D3:2F:62:A8:D8:86:5D:8B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45ea7a02-5ea2-3999-9a2a-ad602dd624ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ed:7c:0b:c9:28:d9:25:e9:bc:68:ce:8f:f0:35:b5:28:b5: 24:e5:f0:ac:85:77:e8:56:ae:5f:77:3b:96:5a:37:73:2e:9a: b6:eb:98:69:4f:47:17:b2:36:b7:56:a3:6f:a4:93:5a:c1:fc: dd:7c:ba:9f:1a:a4:7c:c0:35:44:4e:9c:5f:6a:f2:76:d9:8f: e5:8c:c4:4f:ef:c3:d8:75:0c:cb:83:07:53:06:df:e7:9f:6c: 2a:c9:26:e1:9d:a6:ba:ab:da:1d:12:db:0c:d3:9b:bb:c0:ad: 9c:3b:1c:b5:b0:13:03:b6:8f:e1:a5:41:d2:41:cd:70:65:d4: f9:5f:f9:ae:d9:73:1a:52:d4:34:70:1c:8c:af:f0:08:a5:a4: 9f:85:15:c7:38:6b:50:57:20:a9:70:f6:0b:58:75:0a:98:da: 1f:5e:7f:da:5c:92:f2:9e:e0:73:4c:8e:43:11:ee:08:54:77: 8e:4f:94:8f:1d:b9:29:69:28:9b:7f:62:75:da:8b:0a:e3:00: 41:c5:7b:11:9b:d6:4b:c3:97:09:70:f7:d0:88:53:0f:47:3e: 6a:7a:0b:09:e9:b1:b2:4f:f2:44:87:5c:d3:da:d0:77:f9:d5: b0:58:79:00:a9:62:08:bf:11:16:42:56:38:2c:1b:4c:25:f3: c5:73:1d:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDAkVhNcnwX6uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk OTc0NzU4ODUtMDA1YS00OWVkLWI1ZDAtMTM5YjIxOTRhZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU4UapZzbAIDj48q0cbQn/WHG31Nrk/Pz4O2 LoStBr5xm3D+d5J+U1/eQHXlcgbOlQfldphOAXwO117ANXEROgPbPra8AFnTwUzF Br4zPmPOaETFmAt4hP2skFU6Yy3s4/DjNgvzQDlnl+PCpdRdivYCtErheSHjjJRq 5H/SWxYeM3OigELXVUJffOrjMM+RoPk5XSxpeHt89kMyaudstHDJBth+M+hDvm6f Xzek+dd6DB474qjKtk1FrcqyrFWhTusi4HsW310jFPDSVLH2cJ7cuQlZ2zv4oqK7 +rLP0zrrUfZnoPiWj53PiQYW6rqQsUHPSGf5huL4cG9FEtSYEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqtj3OvzFiV1HIs0y9iqNiGXYv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDVlYTdhMDItNWVhMi0z OTk5LTlhMmEtYWQ2MDJkZDYyNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEntfAvJKNkl6bxozo/wNbUotSTl8KyFd+hWrl93O5ZaN3MumrbrmGlP RxeyNrdWo2+kk1rB/N18up8apHzANUROnF9q8nbZj+WMxE/vw9h1DMuDB1MG3+ef bCrJJuGdprqr2h0S2wzTm7vArZw7HLWwEwO2j+GlQdJBzXBl1Plf+a7ZcxpS1DRw HIyv8AilpJ+FFcc4a1BXIKlw9gtYdQqY2h9ef9pckvKe4HNMjkMR7ghUd45PlI8d uSlpKJt/YnXaiwrjAEHFexGb1kvDlwlw99CIUw9HPmp6CwnpsbJP8kSHXNPa0Hf5 1bBYeQCpYgi/ERZCVjgsG0wl88VzHf4= -----END CERTIFICATE-----Generated at Sat Apr 26 22:16:29 2025 by rpki-client