$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/afb6a581-496d-3eeb-bbf1-132145bd6a49.roa File: afb6a581-496d-3eeb-bbf1-132145bd6a49.roa (raw, json) Hash identifier: wT6N5lAPV2NgQyheZ8eOoKm4wNJlBo+/Pibo7il1Dhs= Subject key identifier: 7C:BD:0F:16:B1:A6:97:C1:BC:FA:61:1E:6C:CA:B8:53:29:09:AE:B1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848FD09180FF034FFC9D88E5D00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/afb6a581-496d-3eeb-bbf1-132145bd6a49.roa Signing time: Mon 24 Feb 2025 11:24:43 +0000 ROA not before: Mon 24 Feb 2025 11:24:43 +0000 ROA not after: Sun 25 May 2025 10:24:43 +0000 asID: 30036 IP address blocks: 72.255.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:09:18:0f:f0:34:ff:c9:d8:8e:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 24 11:24:43 2025 GMT Not After : May 25 10:24:43 2025 GMT Subject: CN=3d4b7f9a-5615-4cd2-ac90-83e9195c6560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:09:6d:30:5f:8c:5d:99:b8:5d:6c:08:b6:20: 4c:8a:43:9e:6d:58:64:0d:90:d0:9f:6c:4d:2d:4c: 75:98:df:4b:5c:90:e7:d9:48:4c:82:a7:08:47:b3: b0:e2:99:ff:29:b9:5f:55:46:44:ed:64:e3:31:9b: 6e:de:a9:d3:55:b3:5f:55:7d:40:cc:13:1b:8d:05: db:51:6e:00:74:82:46:b8:ac:c4:51:84:c0:38:2a: ee:e0:ca:fa:c1:8d:61:eb:99:e8:7f:87:f8:86:77: fd:8f:e8:06:08:89:21:cd:21:ce:10:70:8b:da:28: 54:46:b1:b9:25:8f:44:11:19:2b:f4:bf:53:be:17: e0:c1:29:9e:ef:91:bd:34:74:c6:83:8f:38:13:b6: a8:f5:44:b6:b8:f5:e4:3c:19:7f:64:9c:66:bd:1a: be:48:82:28:91:fa:4e:d5:3f:00:03:b3:5d:40:14: 04:19:1f:bd:5c:0b:58:e4:52:5e:30:fe:42:8b:dc: a4:2a:6d:12:b4:97:33:10:dc:a5:1a:a5:06:9a:4e: 8e:0c:3e:f2:04:8b:ef:10:8f:13:bd:2c:04:8f:9c: 75:e5:bb:bd:f8:dc:9c:4d:82:de:48:4d:b2:96:3c: f1:01:50:32:4e:cb:8d:19:84:bb:a8:83:01:21:4f: e1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BD:0F:16:B1:A6:97:C1:BC:FA:61:1E:6C:CA:B8:53:29:09:AE:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/afb6a581-496d-3eeb-bbf1-132145bd6a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:22:58:26:51:31:78:a0:62:9b:e9:c2:e6:f4:14:9b:c2:ab: 99:3e:c3:fa:8d:f0:ae:eb:c3:4b:7c:a4:1c:92:73:06:a7:e1: 03:24:15:ca:04:72:ff:46:80:ce:4b:3f:41:44:b2:9e:71:30: 47:fa:7b:f0:60:5e:33:b7:e1:28:12:cd:9c:0f:3c:64:65:af: 68:aa:b7:f3:71:1a:fd:7e:78:e9:10:38:ec:49:1b:65:4d:e8: fc:32:79:ed:b2:f8:4a:05:2a:ae:d6:20:84:05:7e:79:cc:82: db:7c:6b:51:8d:5f:07:f6:a6:c6:19:fc:61:83:56:c5:e3:b8: 6b:17:8c:50:75:23:73:aa:48:5d:83:80:81:fe:1e:30:f0:44: b5:6e:bb:b2:df:8c:4c:db:5d:44:44:e0:bc:2b:84:70:16:5b: a4:ff:7f:66:04:4d:dd:fd:d9:40:47:be:4b:3f:ab:b9:89:26: 3b:f6:99:17:08:a8:c7:7c:b7:df:82:da:25:db:c4:73:64:ee: 69:64:ce:52:2a:36:8e:3b:84:4f:f2:9e:b5:40:5d:2d:1d:d6: 64:c1:a2:a8:3f:7d:06:9d:05:7c:51:ee:ef:9d:b2:c1:4c:9f: 10:83:4c:5a:7e:f4:b4:1a:dc:06:00:af:87:fc:61:91:fd:d8: dd:ef:b2:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9CRgP8DT/ydiOXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNDExMjQ0M1oXDTI1MDUyNTEwMjQ0M1owLzEtMCsGA1UEAxMk M2Q0YjdmOWEtNTYxNS00Y2QyLWFjOTAtODNlOTE5NWM2NTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwltMF+MXZm4XWwItiBMikOebVhkDZDQn2xN LUx1mN9LXJDn2UhMgqcIR7Ow4pn/KblfVUZE7WTjMZtu3qnTVbNfVX1AzBMbjQXb UW4AdIJGuKzEUYTAOCru4Mr6wY1h65nof4f4hnf9j+gGCIkhzSHOEHCL2ihURrG5 JY9EERkr9L9TvhfgwSme75G9NHTGg484E7ao9US2uPXkPBl/ZJxmvRq+SIIokfpO 1T8AA7NdQBQEGR+9XAtY5FJeMP5Ci9ykKm0StJczENylGqUGmk6ODD7yBIvvEI8T vSwEj5x15bu9+NycTYLeSE2yljzxAVAyTsuNGYS7qIMBIU/hWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHy9DxaxppfBvPphHmzKuFMpCa6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWZiNmE1ODEtNDk2ZC0z ZWViLWJiZjEtMTMyMTQ1YmQ2YTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP96MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIiWCZRMXigYpvpwub0FJvCq5k+w/qN8K7rw0t8pByScwan4QMkFcoE cv9GgM5LP0FEsp5xMEf6e/BgXjO34SgSzZwPPGRlr2iqt/NxGv1+eOkQOOxJG2VN 6Pwyee2y+EoFKq7WIIQFfnnMgtt8a1GNXwf2psYZ/GGDVsXjuGsXjFB1I3OqSF2D gIH+HjDwRLVuu7LfjEzbXURE4LwrhHAWW6T/f2YETd392UBHvks/q7mJJjv2mRcI qMd8t9+C2iXbxHNk7mlkzlIqNo47hE/ynrVAXS0d1mTBoqg/fQadBXxR7u+dssFM nxCDTFp+9LQa3AYAr4f8YZH92N3vsj8= -----END CERTIFICATE-----Generated at Wed Apr 9 00:18:00 2025 by rpki-client