$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0706670c-a267-3021-9f07-74b70af3c5e2.roa File: 0706670c-a267-3021-9f07-74b70af3c5e2.roa (raw, json) Hash identifier: MV2hmP0uEusrswiBnflXu02Xb/8aW8zU7zte1YYo+HQ= Subject key identifier: CA:3F:61:A6:EE:18:53:75:73:84:37:59:70:0E:A6:EC:5C:E1:2B:AC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848FD10A98BDF1654B289922FC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0706670c-a267-3021-9f07-74b70af3c5e2.roa Signing time: Mon 24 Feb 2025 11:39:58 +0000 ROA not before: Mon 24 Feb 2025 11:39:58 +0000 ROA not after: Sun 25 May 2025 10:39:58 +0000 asID: 30036 IP address blocks: 72.255.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:10:a9:8b:df:16:54:b2:89:92:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 24 11:39:58 2025 GMT Not After : May 25 10:39:58 2025 GMT Subject: CN=f33c5d16-3efa-4cf4-83c3-b611021cf85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:5f:86:b5:d9:78:af:6e:60:7b:ce:94:0a: 98:46:55:dd:8e:59:7c:ad:7c:52:bd:8d:5a:b9:7f: ea:c6:35:c3:b4:74:05:19:bb:24:88:63:f1:9d:45: 12:eb:1f:6e:28:82:9e:97:5e:ab:8e:a4:27:38:5e: a5:e8:9e:22:ed:cd:47:df:50:01:43:30:a9:08:93: 92:99:f3:17:24:ad:45:32:6a:c3:12:2b:5c:cf:bc: 6f:f7:72:a8:ef:4a:2b:bd:36:42:0d:8b:eb:0c:9e: cf:07:49:b9:32:33:0a:88:af:91:e5:98:5b:68:4e: ec:4b:09:21:32:7e:8a:41:7d:9c:dc:24:59:4a:9d: 17:8f:6d:c8:bf:70:9d:dd:47:09:ff:4c:06:5d:a5: 28:78:5c:7d:10:ae:d5:2e:39:f7:dd:89:ad:ac:ee: 92:7b:d0:d0:26:7d:19:0f:e9:44:af:2d:56:78:8a: 9a:9a:2f:17:6c:f3:48:5c:0a:7d:d0:0e:bd:d8:18: 6e:fc:69:91:c0:1b:0d:96:5e:87:4e:48:8e:02:23: 1d:83:55:46:3c:b0:04:18:1d:8a:8a:67:74:e6:c2: 05:c7:c4:60:e4:25:0b:fd:64:c3:5b:e3:38:47:7f: 1e:cd:e8:d4:86:f5:0f:0a:e5:68:e9:37:36:6a:56: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3F:61:A6:EE:18:53:75:73:84:37:59:70:0E:A6:EC:5C:E1:2B:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0706670c-a267-3021-9f07-74b70af3c5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ca:3a:f6:58:f8:f0:4b:45:c6:b1:3e:f2:2a:e0:a0:33:5b: 50:ed:dc:ca:23:82:c1:16:50:00:ba:e6:b2:43:38:6e:67:77: 66:33:11:dd:ca:81:04:61:60:ca:17:f2:e2:de:45:d2:b5:2e: 3c:29:ae:d3:37:80:68:64:00:57:f2:69:c5:42:33:4d:23:28: 96:d9:2b:60:3e:8c:1c:0c:1b:54:da:73:96:a2:6c:7f:da:da: 97:ba:62:82:60:26:22:2c:dd:93:75:2b:a1:01:1f:49:8a:b3: 8d:ba:ef:b7:b7:4c:04:e3:96:34:97:f4:09:b0:46:fa:b4:83: c7:b2:f7:a4:78:f4:e2:ff:5f:32:a8:55:b3:34:f7:27:fa:e4: 79:d0:21:29:3a:6f:24:a8:0f:e3:8f:ca:08:07:ff:31:02:f4: 6f:de:c3:19:76:0b:49:01:da:26:da:ad:31:35:6e:7b:6f:03: 4b:11:8f:41:b3:4d:29:18:ce:0a:ac:53:83:18:4d:11:03:d2: ce:6f:80:30:6e:be:99:87:50:35:08:89:c1:0a:2c:39:ea:13: 0e:49:cc:0b:0f:eb:81:51:74:aa:64:14:c1:0c:57:30:80:50: a4:de:8a:93:f3:b7:39:f5:27:2a:80:cd:97:b6:77:19:55:3a: 45:53:9b:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9EKmL3xZUsomSL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNDExMzk1OFoXDTI1MDUyNTEwMzk1OFowLzEtMCsGA1UEAxMk ZjMzYzVkMTYtM2VmYS00Y2Y0LTgzYzMtYjYxMTAyMWNmODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF9fhrXZeK9uYHvOlAqYRlXdjll8rXxSvY1a uX/qxjXDtHQFGbskiGPxnUUS6x9uKIKel16rjqQnOF6l6J4i7c1H31ABQzCpCJOS mfMXJK1FMmrDEitcz7xv93Ko70orvTZCDYvrDJ7PB0m5MjMKiK+R5ZhbaE7sSwkh Mn6KQX2c3CRZSp0Xj23Iv3Cd3UcJ/0wGXaUoeFx9EK7VLjn33YmtrO6Se9DQJn0Z D+lEry1WeIqami8XbPNIXAp90A692Bhu/GmRwBsNll6HTkiOAiMdg1VGPLAEGB2K imd05sIFx8Rg5CUL/WTDW+M4R38ezejUhvUPCuVo6Tc2albkYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo/YabuGFN1c4Q3WXAOpuxc4SusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDcwNjY3MGMtYTI2Ny0z MDIxLTlmMDctNzRiNzBhZjNjNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzKOvZY+PBLRcaxPvIq4KAzW1Dt3MojgsEWUAC65rJDOG5nd2YzEd3K gQRhYMoX8uLeRdK1LjwprtM3gGhkAFfyacVCM00jKJbZK2A+jBwMG1Tac5aibH/a 2pe6YoJgJiIs3ZN1K6EBH0mKs42677e3TATjljSX9AmwRvq0g8ey96R49OL/XzKo VbM09yf65HnQISk6bySoD+OPyggH/zEC9G/ewxl2C0kB2ibarTE1bntvA0sRj0Gz TSkYzgqsU4MYTRED0s5vgDBuvpmHUDUIicEKLDnqEw5JzAsP64FRdKpkFMEMVzCA UKTeipPztzn1JyqAzZe2dxlVOkVTm9E= -----END CERTIFICATE-----Generated at Tue Apr 8 23:56:28 2025 by rpki-client