$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/95005fca-4b4a-3d0b-b8b7-e7d087e4c17f.roa File: 95005fca-4b4a-3d0b-b8b7-e7d087e4c17f.roa (raw, json) Hash identifier: gIZuMd4cj/df5S5JLTpqLPwcboreDHLVHTk0YFbAVeQ= Subject key identifier: 36:88:68:2F:59:A7:F8:DA:49:8C:74:44:88:52:5C:33:BB:F7:4D:5F Certificate issuer: /CN=8780f59d-efa1-4d8e-b7c0-66773735a31d Certificate serial: 010D0C9F43285848BFEBA251683D0B0B6765B180 Authority key identifier: 6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/95005fca-4b4a-3d0b-b8b7-e7d087e4c17f.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 11711 IP address blocks: 72.0.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a2:51:68:3d:0b:0b:67:65:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8780f59d-efa1-4d8e-b7c0-66773735a31d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=e32afc06-9062-4b3a-822d-189cace23518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:74:7f:39:c5:e5:4b:bf:d7:c7:a1:94:59:59: 85:ff:c5:b8:d4:3d:ce:88:9c:24:57:3a:78:e8:9e: ac:4e:d7:99:58:23:09:ea:12:9d:c7:cd:a1:a4:e6: 68:fa:7f:89:17:8b:7d:b1:57:ac:0e:18:4e:5d:25: a7:b4:b7:25:9a:51:1a:27:f3:8e:14:f4:dc:1f:b8: cf:0f:0c:31:05:3b:9d:99:fc:0d:7e:25:be:b9:76: 44:29:c1:53:a8:4b:ed:9d:de:7c:62:02:4d:8a:66: 6f:1c:f8:b4:c0:0c:9e:90:94:42:90:55:a7:20:9c: f0:e4:37:be:1d:be:bb:b1:f3:11:2d:41:cd:21:3c: 8e:23:b5:6c:e0:76:fc:58:44:19:6e:9a:d4:18:a1: 37:9a:7f:b0:4c:71:0d:82:62:cf:aa:d3:b5:31:06: a9:65:01:85:77:a6:2a:96:6b:3c:61:21:bc:e6:7f: 25:c6:b7:0b:6e:68:e1:0e:e1:97:20:bc:24:e4:45: ce:e5:21:d3:7f:06:ef:15:14:0a:bb:08:b6:ac:66: 50:9a:2b:94:15:48:06:72:64:5f:fa:f4:f7:d4:a3: 80:bd:15:cb:fc:75:7a:2f:8c:0b:ba:07:8d:fb:05: 21:2c:5b:be:53:3c:3c:84:79:fc:78:37:a4:14:1c: 41:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:88:68:2F:59:A7:F8:DA:49:8C:74:44:88:52:5C:33:BB:F7:4D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/95005fca-4b4a-3d0b-b8b7-e7d087e4c17f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl X509v3 Authority Key Identifier: keyid:6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer sbgp-ipAddrBlock: critical IPv4: 72.0.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:fb:81:e7:7c:cc:fc:c8:9f:a9:8a:b3:1b:ee:5d:8e:50:ff: ee:d0:1e:82:54:da:ee:b6:10:ff:69:cd:7d:b3:07:24:58:b0: ad:74:e5:55:24:93:de:f1:23:c5:1f:66:bb:b0:ef:23:8e:7d: 02:e5:76:aa:5d:a1:71:38:5c:72:12:88:1a:a0:81:34:9e:f2: 73:6e:91:81:3f:c4:70:04:92:6b:02:c5:50:02:9e:96:0a:a5: b4:c1:c1:ef:c9:dd:2e:f7:1f:fc:51:4e:f6:58:d0:be:ad:61: d2:48:69:13:a0:1d:ba:7c:b0:7b:0d:2f:82:aa:19:22:8e:9b: 03:68:2e:f3:be:65:10:62:c4:19:14:d1:2d:4a:4c:c1:1b:dd: 11:29:37:7d:4c:e3:8e:b8:8d:48:69:72:b6:f8:44:b5:0e:72: 8b:8b:9a:a9:42:c8:ef:ac:e5:b3:b8:f3:01:69:3e:91:54:87: e5:4d:44:c3:41:94:c3:be:72:28:16:02:e0:1d:db:55:e8:f3: 6b:e1:be:36:ba:c2:77:6a:35:25:31:ba:ca:91:73:38:45:0f: 03:1d:53:cf:14:da:45:5e:c4:8a:6e:dd:13:3c:ef:7f:79:b2: a3:cc:96:5b:8c:d5:e6:a8:cc:f7:c0:20:30:3e:84:ac:a3:66: e3:bb:06:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66JRaD0LC2dlsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc4MGY1OWQtZWZhMS00ZDhlLWI3YzAtNjY3NzM3MzVh MzFkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZTMyYWZjMDYtOTA2Mi00YjNhLTgyMmQtMTg5Y2FjZTIzNTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23R/OcXlS7/Xx6GUWVmF/8W41D3OiJwkVzp4 6J6sTteZWCMJ6hKdx82hpOZo+n+JF4t9sVesDhhOXSWntLclmlEaJ/OOFPTcH7jP DwwxBTudmfwNfiW+uXZEKcFTqEvtnd58YgJNimZvHPi0wAyekJRCkFWnIJzw5De+ Hb67sfMRLUHNITyOI7Vs4Hb8WEQZbprUGKE3mn+wTHENgmLPqtO1MQapZQGFd6Yq lms8YSG85n8lxrcLbmjhDuGXILwk5EXO5SHTfwbvFRQKuwi2rGZQmiuUFUgGcmRf +vT31KOAvRXL/HV6L4wLugeN+wUhLFu+Uzw8hHn8eDekFBxBTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaIaC9Zp/jaSYx0RIhSXDO7901fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Nzgw ZjU5ZC1lZmExLTRkOGUtYjdjMC02Njc3MzczNWEzMWQvOTUwMDVmY2EtNGI0YS0z ZDBiLWI4YjctZTdkMDg3ZTRjMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODc4MGY1OWQtZWZhMS00ZDhlLWI3 YzAtNjY3NzM3MzVhMzFkLzg3ODBmNTlkLWVmYTEtNGQ4ZS1iN2MwLTY2NzczNzM1 YTMxZC5jcmwwHwYDVR0jBBgwFoAUbqo4+oEm/bnxO/ynHvl0/E5t1JIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzgwZjU5ZC1lZmExLTRkOGUtYjdjMC02Njc3 MzczNWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALf7ged8zPzIn6mKsxvuXY5Q/+7QHoJU2u62EP9pzX2zByRYsK105VUk k97xI8UfZruw7yOOfQLldqpdoXE4XHISiBqggTSe8nNukYE/xHAEkmsCxVACnpYK pbTBwe/J3S73H/xRTvZY0L6tYdJIaROgHbp8sHsNL4KqGSKOmwNoLvO+ZRBixBkU 0S1KTMEb3REpN31M4464jUhpcrb4RLUOcouLmqlCyO+s5bO48wFpPpFUh+VNRMNB lMO+cigWAuAd21Xo82vhvja6wndqNSUxusqRczhFDwMdU88U2kVexIpu3RM87395 sqPMlluM1eaozPfAIDA+hKyjZuO7BvM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:19 2025 by rpki-client