$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa File: 3e608f82-082e-3625-8820-3883ef973c0c.roa (raw, json) Hash identifier: wS/3EkWb7gA8g+xZCArvwtOMd8lZNmOVlljQ/Nw/+nc= Subject key identifier: 89:40:0F:3C:DE:9F:8A:57:7B:C8:C4:F9:F8:11:9C:56:71:DC:FF:CB Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F432858499AF48DD8B9FFECF84BBD4E00 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 13445 IP address blocks: 170.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8d:d8:b9:ff:ec:f8:4b:bd:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=dbe2e0a1-d37a-4d5f-811e-c9c92c2d1031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f7:ab:de:05:2d:2c:5c:70:02:e4:15:9c:99: 01:7a:7c:f7:ba:66:cd:f2:82:c7:a1:18:fe:04:a5: 3d:e9:50:bd:89:44:a5:a3:01:b0:82:f2:b1:99:d1: 91:04:d8:47:43:08:bd:0c:dd:e1:68:89:e3:47:81: 08:2e:67:7f:b3:58:d9:b2:ce:af:85:7a:27:2e:0c: ab:cf:a6:a9:a0:23:2b:4d:95:6d:76:0f:f3:67:63: 11:ba:c1:9e:51:cf:cb:ff:39:67:e5:ce:b0:31:29: 6f:54:82:ea:98:48:71:51:64:b0:ff:e2:da:58:30: 59:db:b1:5f:ef:07:bf:f6:46:b3:bc:bb:8a:67:fa: be:e6:54:3c:1f:92:25:03:26:30:dd:23:2c:99:eb: 67:c2:2d:6d:f1:05:1d:97:d9:c4:2a:80:58:fd:55: 8f:7f:30:9f:9d:df:10:c4:aa:c8:69:dd:f2:05:68: 14:69:c7:eb:5a:f3:31:8c:bb:a6:ce:15:cc:21:cd: 2b:08:f2:eb:a8:cb:77:b9:52:8b:1b:3e:af:51:75: 1d:02:08:7f:61:1a:3e:ea:5a:c9:a6:37:43:99:1d: ca:50:c6:35:cd:5e:0d:cd:40:f4:12:a3:49:94:f2: 08:47:b1:84:86:d7:f4:b6:77:5a:57:28:e0:69:e2: b9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:40:0F:3C:DE:9F:8A:57:7B:C8:C4:F9:F8:11:9C:56:71:DC:FF:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 170.72.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a2:13:ed:3b:93:a9:4c:f2:97:38:39:2c:97:e6:d9:f4:56: d6:02:18:a1:a4:87:7d:35:20:13:69:7e:32:cc:ab:17:37:4a: 28:1b:7a:03:b6:08:c7:8a:0a:3b:32:77:f8:32:b5:1f:51:a2: ab:4f:4d:82:4d:81:e6:21:a2:f7:f4:b6:72:ac:bd:9d:e3:81: a1:da:66:26:63:5b:1e:ca:4e:4a:e4:92:41:7a:d8:11:7e:3a: c6:9a:6c:76:82:28:67:21:ce:16:db:fb:71:9e:60:40:7c:cf: 27:15:9b:10:a1:4f:bc:44:b5:00:b9:e8:3b:aa:70:33:cb:3b: e3:4b:0c:1b:aa:61:ef:26:eb:54:fb:e8:4e:a6:0c:13:ef:4d: 7f:fe:7f:d8:ce:6e:36:18:5d:0a:ab:8c:cb:9d:86:f2:6d:d5: 1a:2f:2e:54:49:64:29:c7:34:20:99:2b:5d:9f:6c:6b:63:a2: e5:01:12:fc:d7:84:a1:42:f2:a1:2d:c7:12:a7:cf:7c:40:de: 67:2d:11:2c:68:28:e8:ff:8a:c7:37:fa:b5:ad:0c:db:e2:ac: d8:e3:a5:8a:9d:be:3c:42:32:55:24:cc:bb:a5:af:78:77:30: b5:94:30:a0:b1:a9:1d:a0:6d:97:f8:dd:fd:86:07:d6:07:80: b4:c7:57:63 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9I3Yuf/s+Eu9TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZGJlMmUwYTEtZDM3YS00ZDVmLTgxMWUtYzljOTJjMmQxMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofer3gUtLFxwAuQVnJkBenz3umbN8oLHoRj+ BKU96VC9iUSlowGwgvKxmdGRBNhHQwi9DN3haInjR4EILmd/s1jZss6vhXonLgyr z6apoCMrTZVtdg/zZ2MRusGeUc/L/zln5c6wMSlvVILqmEhxUWSw/+LaWDBZ27Ff 7we/9kazvLuKZ/q+5lQ8H5IlAyYw3SMsmetnwi1t8QUdl9nEKoBY/VWPfzCfnd8Q xKrIad3yBWgUacfrWvMxjLumzhXMIc0rCPLrqMt3uVKLGz6vUXUdAgh/YRo+6lrJ pjdDmR3KUMY1zV4NzUD0EqNJlPIIR7GEhtf0tndaVyjgaeK5NwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIlADzzen4pXe8jE+fgRnFZx3P/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvM2U2MDhmODItMDgyZS0z NjI1LTg4MjAtMzg4M2VmOTczYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqkgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAeaIT7TuTqUzylzg5LJfm2fRW1gIYoaSHfTUgE2l+MsyrFzdKKBt6A7YI x4oKOzJ3+DK1H1Giq09Ngk2B5iGi9/S2cqy9neOBodpmJmNbHspOSuSSQXrYEX46 xppsdoIoZyHOFtv7cZ5gQHzPJxWbEKFPvES1ALnoO6pwM8s740sMG6ph7ybrVPvo TqYME+9Nf/5/2M5uNhhdCquMy52G8m3VGi8uVElkKcc0IJkrXZ9sa2Oi5QES/NeE oULyoS3HEqfPfEDeZy0RLGgo6P+Kxzf6ta0M2+Ks2OOlip2+PEIyVSTMu6WveHcw tZQwoLGpHaBtl/jd/YYH1geAtMdXYw== -----END CERTIFICATE-----Generated at Mon Apr 28 18:07:57 2025 by rpki-client