$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/b37abaf8-49e6-3fe4-8fa3-f995d772816b.roa File: b37abaf8-49e6-3fe4-8fa3-f995d772816b.roa (raw, json) Hash identifier: 0hV7/PeBDmnybLZYM68r2jCxOqSxf5ZD8HvR2yHrOTw= Subject key identifier: 01:27:0A:38:4F:B8:17:E7:05:A4:98:A5:12:10:80:BF:FA:40:64:F3 Certificate issuer: /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0 Certificate serial: 010D0C9F4328584950F968EE2A2649FEFD50A280 Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/b37abaf8-49e6-3fe4-8fa3-f995d772816b.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 46320 IP address blocks: 205.142.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:68:ee:2a:26:49:fe:fd:50:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=38a29ced-eb66-4c40-83b6-a94f4af9c8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:88:3c:c2:11:32:76:a0:9f:84:38:24:1c: c2:02:9b:e4:e1:70:93:f3:55:09:59:1b:a0:f3:06: e1:06:fc:48:57:54:37:3f:72:57:ab:fa:62:b4:fe: 12:a4:20:a0:66:54:2f:d9:b6:d2:1e:da:f8:bd:d6: 07:bc:10:ac:30:69:35:2f:c8:4b:de:90:d1:4a:a2: 40:74:0f:de:3d:b2:4d:0e:92:14:5b:16:c1:da:ad: 73:cc:f2:27:2d:d2:f7:ec:58:b3:65:16:0f:2a:d5: 41:fb:88:b1:29:87:ce:76:4a:31:c0:62:12:fd:c4: fa:1e:ef:26:8e:21:67:11:2f:7f:d4:80:07:ec:e2: f6:ca:77:61:7e:20:e3:6b:92:ae:cd:e3:84:7a:9a: d4:f0:82:89:9e:67:70:f0:a4:f0:f8:97:07:9b:c4: f8:e2:b4:8c:37:7f:b1:93:38:39:5f:00:a4:7d:6e: 37:eb:f0:a6:7c:ce:2d:c2:98:1a:72:94:6a:76:2f: d3:88:7d:f9:7b:39:f6:9a:87:09:9a:81:d0:0f:b8: 70:05:4d:79:d5:27:d0:df:2f:58:cc:0c:bb:c5:14: e8:3d:2e:d2:f2:a9:85:27:1d:b5:0c:1b:61:bf:49: ee:b3:75:ae:a5:dd:f2:59:ea:04:9d:bb:ce:92:3a: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:27:0A:38:4F:B8:17:E7:05:A4:98:A5:12:10:80:BF:FA:40:64:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/b37abaf8-49e6-3fe4-8fa3-f995d772816b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl X509v3 Authority Key Identifier: keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer sbgp-ipAddrBlock: critical IPv4: 205.142.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:4a:99:0b:9f:98:6d:37:fa:6b:47:5d:3b:64:cb:97:7d:e5: fb:23:6e:ea:e9:40:ee:cf:51:4c:2b:82:a7:48:74:a6:72:5d: 18:c6:11:3e:bf:28:2f:9b:38:84:3e:69:57:3b:46:0c:65:72: d7:39:b7:e3:29:e6:15:83:84:fb:ef:66:aa:23:fd:54:45:ff: 70:e9:15:f2:49:cf:10:0e:be:8e:4d:ac:27:b1:c3:13:d9:48: ae:f7:2c:e1:34:a7:85:4c:80:32:9b:2a:75:f0:69:4e:9a:f8: 9d:f9:87:e1:ca:0d:9c:42:7d:a8:4b:90:e4:6a:8c:95:f8:6e: be:ce:82:0f:94:3b:ef:28:d0:f5:b9:85:84:8e:21:2d:73:b3: 58:0e:6a:85:c6:2f:b5:7c:c7:3d:e1:fe:a6:30:9f:7a:b5:82: 00:86:5e:2e:c4:12:0d:e3:8a:2d:7c:95:10:e3:22:e5:31:d8: 2a:c4:cc:fd:ba:5a:a3:2a:e5:dc:3f:ab:a4:cd:34:57:e5:f6: 0d:3c:6d:8a:05:d0:f1:80:6c:ee:bd:74:70:02:d6:7f:68:09: de:76:27:18:26:ed:87:46:3d:75:45:f5:aa:6f:03:58:bd:24: 43:ff:1b:c6:53:cb:0c:60:5c:e6:89:e5:23:bc:b9:42:9a:29: d5:d4:4b:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WjuKiZJ/v1QooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJiMTczNDMtZDJmMS00OWNlLWJhOTItMjJmMTNjZmJj MGQwMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk MzhhMjljZWQtZWI2Ni00YzQwLTgzYjYtYTk0ZjRhZjljOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E6IPMIRMnagn4Q4JBzCApvk4XCT81UJWRug 8wbhBvxIV1Q3P3JXq/pitP4SpCCgZlQv2bbSHtr4vdYHvBCsMGk1L8hL3pDRSqJA dA/ePbJNDpIUWxbB2q1zzPInLdL37FizZRYPKtVB+4ixKYfOdkoxwGIS/cT6Hu8m jiFnES9/1IAH7OL2yndhfiDja5KuzeOEeprU8IKJnmdw8KTw+JcHm8T44rSMN3+x kzg5XwCkfW436/CmfM4twpgacpRqdi/TiH35ezn2mocJmoHQD7hwBU151SfQ3y9Y zAy7xRToPS7S8qmFJx21DBthv0nus3Wupd3yWeoEnbvOkjoRTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEnCjhPuBfnBaSYpRIQgL/6QGTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MmIx NzM0My1kMmYxLTQ5Y2UtYmE5Mi0yMmYxM2NmYmMwZDAvYjM3YWJhZjgtNDllNi0z ZmU0LThmYTMtZjk5NWQ3NzI4MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzJiMTczNDMtZDJmMS00OWNlLWJh OTItMjJmMTNjZmJjMGQwLzcyYjE3MzQzLWQyZjEtNDljZS1iYTkyLTIyZjEzY2Zi YzBkMC5jcmwwHwYDVR0jBBgwFoAUoybRn8spmYSXTnzi26U8HqczzBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83MmIxNzM0My1kMmYxLTQ5Y2UtYmE5Mi0yMmYx M2NmYmMwZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzY7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlKmQufmG03+mtHXTtky5d95fsjburpQO7PUUwrgqdIdKZyXRjGET6/ KC+bOIQ+aVc7Rgxlctc5t+Mp5hWDhPvvZqoj/VRF/3DpFfJJzxAOvo5NrCexwxPZ SK73LOE0p4VMgDKbKnXwaU6a+J35h+HKDZxCfahLkORqjJX4br7Ogg+UO+8o0PW5 hYSOIS1zs1gOaoXGL7V8xz3h/qYwn3q1ggCGXi7EEg3jii18lRDjIuUx2CrEzP26 WqMq5dw/q6TNNFfl9g08bYoF0PGAbO69dHAC1n9oCd52Jxgm7YdGPXVF9apvA1i9 JEP/G8ZTywxgXOaJ5SO8uUKaKdXUS1w= -----END CERTIFICATE-----Generated at Sat Apr 12 00:01:43 2025 by rpki-client