$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa File: 8c01b867-e0ea-380c-95a8-417bf084bf0e.roa (raw, json) Hash identifier: X4Um2VwjyrfqYSbMoD+GRXWB3fzjN1dKlKQVIudFfRA= Subject key identifier: 7D:5D:DB:8B:64:5E:62:BB:3C:FA:25:CB:20:F2:6A:9A:97:0F:38:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C3B5780D5BA58D38B6C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 16625 IP address blocks: 72.247.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:3b:57:80:d5:ba:58:d3:8b:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=49d678cd-5cb0-4a78-91bc-a111562d8fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:25:52:b8:bf:70:e9:4f:14:66:ce:63:f4:b7: 8a:96:55:58:44:83:b1:13:a7:b1:24:2f:4e:f9:6d: 18:02:6d:48:da:df:4c:ba:dd:6f:9e:a1:78:33:47: e2:3f:29:44:cb:b7:8b:de:6f:b8:00:3e:c9:74:de: e3:d2:0d:51:16:93:cc:cc:da:db:52:e3:8a:70:0f: fc:d7:eb:b3:53:2c:f1:44:1e:69:cb:7c:d0:b3:a0: 81:7f:17:bb:74:18:6d:39:dc:e1:5a:35:a6:90:62: ef:fc:84:09:74:fd:9d:02:1f:0c:ce:eb:a9:16:9f: 08:25:46:a8:53:bf:5d:ce:29:3e:3f:96:64:b3:08: b2:11:98:d9:cd:7f:cf:5f:6e:67:de:4e:6a:75:cb: 91:6d:59:e9:1b:31:1b:fe:1d:fe:10:fd:fc:7e:3c: 71:74:27:c5:fc:1a:fc:cf:32:78:85:7a:a3:6b:e9: 2d:94:9e:6b:f7:15:8e:d6:bb:f3:37:e6:e8:d7:f7: d0:34:d8:fd:cf:86:9b:2f:5b:6a:2c:72:b5:3b:eb: 75:67:61:4b:79:f5:f1:73:bd:ff:30:a7:7a:30:1d: ce:cb:f1:5b:2e:55:27:dc:97:7f:be:f3:f3:9d:83: 94:31:f0:1a:15:b3:44:f5:72:66:ff:16:a6:87:f4: 2b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5D:DB:8B:64:5E:62:BB:3C:FA:25:CB:20:F2:6A:9A:97:0F:38:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:34:3e:3f:31:1c:e8:48:7d:b6:01:f8:4c:3a:d6:f2:d2:d3: 03:c7:92:a8:55:33:51:c0:61:4f:24:af:6d:67:8a:10:79:80: 9e:36:e4:6f:2f:0b:d5:a6:8a:85:08:ae:a3:11:9c:cf:7c:7c: 29:96:ba:ad:69:7b:81:ce:3c:9f:e0:c4:45:ab:5f:d1:60:34: c2:59:9e:2b:0f:27:7a:29:69:d3:2b:2f:29:2c:36:d7:ae:05: 10:fd:8d:d5:78:e3:70:b7:cf:97:98:f6:20:a6:b0:7a:69:ad: 55:18:ee:33:f7:31:2d:64:94:c8:7f:95:f5:b8:b9:f9:a7:69: 41:82:8c:1e:84:3f:5b:2a:73:ed:e4:94:8f:4d:9b:e0:17:52: df:b0:50:0d:a8:28:fb:ad:d7:85:ca:35:81:92:5c:3f:88:0b: cd:5c:da:bc:1d:3e:4e:5f:8f:f5:a1:03:75:fc:64:5e:08:11: e6:ab:51:5e:c7:0a:89:82:9d:e0:51:b6:8b:e8:d0:b0:61:c0: 4c:f2:5c:91:66:69:c5:85:8a:3f:89:55:f0:45:05:05:9a:67: ed:16:9d:32:ee:01:f9:a5:52:ab:c0:a5:24:60:31:7c:60:0b: 92:c0:9a:8a:70:31:cc:06:1f:6f:5b:14:32:14:84:3d:b3:47: 1f:5c:10:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDtXgNW6WNOLbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NDlkNjc4Y2QtNWNiMC00YTc4LTkxYmMtYTExMTU2MmQ4ZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SVSuL9w6U8UZs5j9LeKllVYRIOxE6exJC9O +W0YAm1I2t9Mut1vnqF4M0fiPylEy7eL3m+4AD7JdN7j0g1RFpPMzNrbUuOKcA/8 1+uzUyzxRB5py3zQs6CBfxe7dBhtOdzhWjWmkGLv/IQJdP2dAh8MzuupFp8IJUao U79dzik+P5ZkswiyEZjZzX/PX25n3k5qdcuRbVnpGzEb/h3+EP38fjxxdCfF/Br8 zzJ4hXqja+ktlJ5r9xWO1rvzN+bo1/fQNNj9z4abL1tqLHK1O+t1Z2FLefXxc73/ MKd6MB3Oy/FbLlUn3Jd/vvPznYOUMfAaFbNE9XJm/xamh/Qr7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1d24tkXmK7PPolyyDyapqXDzj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMwMWI4NjctZTBlYS0z ODBjLTk1YTgtNDE3YmYwODRiZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA0Pj8xHOhIfbYB+Ew61vLS0wPHkqhVM1HAYU8kr21nihB5gJ425G8v C9WmioUIrqMRnM98fCmWuq1pe4HOPJ/gxEWrX9FgNMJZnisPJ3opadMrLyksNteu BRD9jdV443C3z5eY9iCmsHpprVUY7jP3MS1klMh/lfW4ufmnaUGCjB6EP1sqc+3k lI9Nm+AXUt+wUA2oKPut14XKNYGSXD+IC81c2rwdPk5fj/WhA3X8ZF4IEearUV7H ComCneBRtovo0LBhwEzyXJFmacWFij+JVfBFBQWaZ+0WnTLuAfmlUqvApSRgMXxg C5LAmopwMcwGH29bFDIUhD2zRx9cEJY= -----END CERTIFICATE-----Generated at Sun Apr 27 11:23:16 2025 by rpki-client