$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a4ef5b1-c0be-3c0b-a032-5db3ad6b8dd6.roa File: 5a4ef5b1-c0be-3c0b-a032-5db3ad6b8dd6.roa (raw, json) Hash identifier: g2kl/98ybI+i1knqRoHrtb+cQBGbRDSRbM3SROgU4us= Subject key identifier: 2A:3D:09:B5:54:0E:85:93:CA:39:26:57:78:63:28:E6:99:81:49:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C3A23024A72E546CE7D70 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a4ef5b1-c0be-3c0b-a032-5db3ad6b8dd6.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 20940 IP address blocks: 72.246.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:3a:23:02:4a:72:e5:46:ce:7d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=ffde232d-6193-487e-91bd-847d7257affa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:d5:ea:c5:2f:7e:83:86:f2:43:dc:4d:e0: 64:76:9c:8d:f8:89:40:bb:43:48:6b:5a:0f:51:d2: 62:86:95:58:73:ce:3d:94:e8:30:98:f2:3a:15:76: b1:e0:46:b5:b1:d9:22:57:e7:94:64:86:4f:20:2f: 45:21:c8:6d:2d:bf:71:59:3b:9e:a8:62:ec:dc:43: 18:e7:c4:e4:af:18:51:7c:0c:5c:73:a3:2b:63:47: b9:55:f8:c8:c0:da:cf:85:43:c9:c0:91:9f:40:71: 1a:b9:24:27:0c:66:b3:5f:5b:d0:e8:c1:b2:05:f5: df:39:7b:67:4d:5c:b6:4f:aa:12:a6:55:56:1f:92: ab:bd:35:ba:67:de:ac:c1:bf:84:7b:a2:7d:4d:11: 1e:e9:d1:0d:17:8e:3d:8c:69:a1:c0:c5:d0:29:51: 6c:63:9b:18:7e:71:ca:2d:9c:f0:40:96:d1:84:d4: 06:2b:20:03:8f:37:3c:b4:d8:25:98:4d:50:69:63: 31:f5:4a:e2:a0:f3:f7:47:9a:b3:52:b2:ae:3e:d9: 8a:e7:cf:61:75:8c:1d:dd:cc:41:f8:5d:55:fb:24: 7a:72:4e:95:94:5b:bf:04:af:31:56:c3:31:83:97: 0c:af:c4:d1:bc:0e:09:44:75:2a:50:15:6e:40:2d: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3D:09:B5:54:0E:85:93:CA:39:26:57:78:63:28:E6:99:81:49:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a4ef5b1-c0be-3c0b-a032-5db3ad6b8dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ea:4a:ae:7a:a9:bc:01:36:b0:54:8b:d1:3c:f1:34:bf:94: be:45:26:61:d3:f3:ef:3b:b4:9b:12:2e:88:4e:43:66:3a:2c: 1f:fc:37:74:f9:d0:23:85:04:5d:7d:fd:4a:2d:a8:d2:f5:95: 55:05:61:30:50:3a:ff:cd:0e:8b:19:67:66:01:bd:8c:12:4d: 7b:9b:e6:45:8f:71:fb:9c:e8:c7:52:bf:98:a6:aa:dd:73:9e: 2a:43:d8:5d:20:cb:55:ef:02:eb:1b:d7:db:fd:ed:04:b3:9c: 79:8d:ff:ed:94:fa:4a:4a:63:b1:59:cb:93:89:9a:19:f6:96: 48:c5:a0:14:01:ae:78:9c:8c:ae:6f:57:f0:09:88:55:b6:13: e7:dc:b0:4e:37:de:45:74:e0:f3:c7:e7:40:20:b0:33:02:b1: a4:f3:1c:69:bb:61:b8:8a:bc:02:2b:3a:d4:2a:fb:c9:60:e5: 79:cf:ac:46:a7:cc:7a:ca:e8:31:18:d9:c5:99:c8:68:a7:35: ad:f9:45:61:af:6d:ce:e9:3a:7a:9c:e3:d9:ab:14:44:80:8b: 93:5d:8b:0a:36:ad:83:fd:a1:5e:14:66:24:4f:6e:54:a6:2e: 10:1b:ec:a5:50:63:5d:a7:f7:06:b5:5a:7b:1e:74:68:64:92: 55:7a:0a:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDojAkpy5UbOfXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZmZkZTIzMmQtNjE5My00ODdlLTkxYmQtODQ3ZDcyNTdhZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4rV6sUvfoOG8kPcTeBkdpyN+IlAu0NIa1oP UdJihpVYc849lOgwmPI6FXax4Ea1sdkiV+eUZIZPIC9FIchtLb9xWTueqGLs3EMY 58TkrxhRfAxcc6MrY0e5VfjIwNrPhUPJwJGfQHEauSQnDGazX1vQ6MGyBfXfOXtn TVy2T6oSplVWH5KrvTW6Z96swb+Ee6J9TREe6dENF449jGmhwMXQKVFsY5sYfnHK LZzwQJbRhNQGKyADjzc8tNglmE1QaWMx9UrioPP3R5qzUrKuPtmK589hdYwd3cxB +F1V+yR6ck6VlFu/BK8xVsMxg5cMr8TRvA4JRHUqUBVuQC0cgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo9CbVUDoWTyjkmV3hjKOaZgUnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWE0ZWY1YjEtYzBiZS0z YzBiLWEwMzItNWRiM2FkNmI4ZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPYvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzqSq56qbwBNrBUi9E88TS/lL5FJmHT8+87tJsSLohOQ2Y6LB/8N3T5 0COFBF19/UotqNL1lVUFYTBQOv/NDosZZ2YBvYwSTXub5kWPcfuc6MdSv5imqt1z nipD2F0gy1XvAusb19v97QSznHmN/+2U+kpKY7FZy5OJmhn2lkjFoBQBrnicjK5v V/AJiFW2E+fcsE433kV04PPH50AgsDMCsaTzHGm7YbiKvAIrOtQq+8lg5XnPrEan zHrK6DEY2cWZyGinNa35RWGvbc7pOnqc49mrFESAi5Ndiwo2rYP9oV4UZiRPblSm LhAb7KVQY12n9wa1WnsedGhkklV6CrM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:35:25 2025 by rpki-client