$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/293fdc28-b7bd-328e-b1e2-3a1b9c3defde.roa File: 293fdc28-b7bd-328e-b1e2-3a1b9c3defde.roa (raw, json) Hash identifier: Feny8eRUVlEjPC6fk1KV9dFZ4gD92RvUkDn/i8so4QE= Subject key identifier: A6:FB:92:49:F1:A1:AC:DE:D7:01:69:AE:60:D4:4F:43:05:13:30:24 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848FD018275A6EC12AAD20F2300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/293fdc28-b7bd-328e-b1e2-3a1b9c3defde.roa Signing time: Mon 24 Feb 2025 11:09:26 +0000 ROA not before: Mon 24 Feb 2025 11:09:26 +0000 ROA not after: Sun 25 May 2025 10:09:26 +0000 asID: 30036 IP address blocks: 72.255.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:01:82:75:a6:ec:12:aa:d2:0f:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 24 11:09:26 2025 GMT Not After : May 25 10:09:26 2025 GMT Subject: CN=66c33049-b299-4ebd-8eba-d01c10dc4c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:a4:0b:7a:8f:39:05:8f:d3:52:6c:07:48: 90:4d:f1:6e:3e:a0:21:b3:61:af:65:05:af:34:0a: 70:0d:e1:e5:75:2d:c8:87:bd:3d:17:29:d7:17:34: be:23:24:7e:88:93:a2:24:68:b0:18:bb:61:fb:d5: 78:89:55:ad:fa:1b:09:0d:5d:e7:69:65:99:12:39: 3a:b3:45:a1:ce:5d:2d:c8:d3:f9:70:8c:15:5a:22: 83:f8:ac:2d:51:cd:9e:05:a0:27:4a:fa:36:92:ce: 68:df:6e:78:13:fc:9a:d4:5c:f5:09:81:32:41:b6: b9:44:9a:7d:20:66:85:55:24:52:fe:6d:90:96:df: 8e:1c:c8:a8:b3:7b:bc:d9:e1:e4:b1:1a:62:7d:20: 89:3d:61:72:02:bf:20:6e:bb:86:5f:a8:81:65:8a: 7c:76:38:f7:55:c0:3b:67:90:49:f5:2c:cc:08:04: bc:b6:ce:c0:3d:92:a3:1a:c8:c0:92:3c:6d:4a:fc: bb:ba:88:fe:42:2a:17:d9:e8:50:40:e8:9f:21:fa: 79:99:48:e3:a1:f6:67:53:95:3b:91:49:99:41:59: 80:0d:e7:e3:7b:68:e4:fc:cd:35:62:8e:1c:61:3c: 08:37:40:e6:21:04:2e:6a:4a:cc:f0:d6:a5:0a:60: 99:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FB:92:49:F1:A1:AC:DE:D7:01:69:AE:60:D4:4F:43:05:13:30:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/293fdc28-b7bd-328e-b1e2-3a1b9c3defde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d6:65:36:ec:57:06:22:66:03:1e:54:a3:e2:8b:96:ef:e7: 9f:3d:f6:06:68:5d:e2:f0:f6:90:2f:0f:ee:17:3c:9c:31:20: 36:f0:c3:0d:52:9a:c0:3b:1a:04:2e:74:f8:be:df:00:56:81: a6:bb:7f:73:dc:5a:3c:18:d0:05:9b:a5:7d:1b:d7:c1:a3:23: 0f:e4:1a:de:20:f5:1c:0e:79:ee:d1:a9:7c:d8:64:5f:61:43: 20:7b:73:0a:ab:56:ef:2c:bc:5a:1c:91:1e:37:2e:97:27:36: 1c:4c:86:35:e2:09:6b:c3:9e:1d:06:f4:96:88:e5:a5:cb:eb: 61:ca:f3:2e:56:ed:8e:b2:9c:9f:d7:e6:f3:a9:84:2b:2a:bc: 69:fe:4b:cb:e8:c6:f6:bb:65:29:c6:24:5e:0e:02:50:c9:a8: 5e:96:65:d7:28:54:54:34:33:8b:73:6e:93:6d:e9:57:62:47: cf:b3:32:5c:d2:f1:c2:89:c0:b3:9a:18:10:fd:4d:9c:d4:d9: 28:e2:8c:2a:c4:f7:3a:3b:15:57:55:25:2e:7d:2e:22:b9:d7: 5c:3d:a8:ce:1c:26:95:ae:2d:38:02:a6:6b:c8:6b:d0:46:5c: 8a:3f:d8:82:7a:45:0c:f9:c1:ed:99:7d:84:4e:e6:d2:78:32: 10:08:40:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9AYJ1puwSqtIPIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNDExMDkyNloXDTI1MDUyNTEwMDkyNlowLzEtMCsGA1UEAxMk NjZjMzMwNDktYjI5OS00ZWJkLThlYmEtZDAxYzEwZGM0YzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0GkC3qPOQWP01JsB0iQTfFuPqAhs2GvZQWv NApwDeHldS3Ih709FynXFzS+IyR+iJOiJGiwGLth+9V4iVWt+hsJDV3naWWZEjk6 s0Whzl0tyNP5cIwVWiKD+KwtUc2eBaAnSvo2ks5o3254E/ya1Fz1CYEyQba5RJp9 IGaFVSRS/m2Qlt+OHMios3u82eHksRpifSCJPWFyAr8gbruGX6iBZYp8djj3VcA7 Z5BJ9SzMCAS8ts7APZKjGsjAkjxtSvy7uoj+QioX2ehQQOifIfp5mUjjofZnU5U7 kUmZQVmADefje2jk/M01Yo4cYTwIN0DmIQQuakrM8NalCmCZcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb7kknxoaze1wFprmDUT0MFEzAkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjkzZmRjMjgtYjdiZC0z MjhlLWIxZTItM2ExYjljM2RlZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7WZTbsVwYiZgMeVKPii5bv55899gZoXeLw9pAvD+4XPJwxIDbwww1S msA7GgQudPi+3wBWgaa7f3PcWjwY0AWbpX0b18GjIw/kGt4g9RwOee7RqXzYZF9h QyB7cwqrVu8svFockR43LpcnNhxMhjXiCWvDnh0G9JaI5aXL62HK8y5W7Y6ynJ/X 5vOphCsqvGn+S8voxva7ZSnGJF4OAlDJqF6WZdcoVFQ0M4tzbpNt6VdiR8+zMlzS 8cKJwLOaGBD9TZzU2SjijCrE9zo7FVdVJS59LiK511w9qM4cJpWuLTgCpmvIa9BG XIo/2IJ6RQz5we2ZfYRO5tJ4MhAIQCQ= -----END CERTIFICATE-----Generated at Wed Apr 9 00:13:10 2025 by rpki-client