$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa File: 4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa (raw, json) Hash identifier: vvwHdJxGoLZGQaANAHH/s8/+iXke8+z925rFgbrxAAY= Subject key identifier: 43:6F:74:97:4F:C7:AB:90:D4:B6:83:4D:BD:5B:24:C7:77:A4:35:27 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285848C45F1BEC2DE6EA78C957D400 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa Signing time: Tue 04 Feb 2025 04:16:57 +0000 ROA not before: Tue 04 Feb 2025 04:16:57 +0000 ROA not after: Mon 05 May 2025 03:16:57 +0000 asID: 14813 IP address blocks: 72.22.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:5f:1b:ec:2d:e6:ea:78:c9:57:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Feb 4 04:16:57 2025 GMT Not After : May 5 03:16:57 2025 GMT Subject: CN=8e20e480-0871-45e4-aba7-23067dbb97d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:40:5b:6c:75:52:a5:33:89:65:6b:25:42:49: e6:56:5e:94:0e:f1:3b:c9:cb:6d:9c:1a:a6:3c:f3: 56:2d:38:22:5c:87:68:6a:e4:69:4f:07:36:82:3d: 2b:58:aa:00:89:13:c4:5e:ae:fe:b8:2d:5d:34:f9: e9:57:85:a7:51:61:b2:3c:ec:52:5a:41:92:96:d5: c4:6a:5a:fd:57:ae:3f:49:f8:a4:cf:04:a0:42:90: c2:de:4d:cb:dc:a8:64:88:80:08:5b:a5:e1:9d:34: a3:d6:fe:cc:4f:ce:65:59:3f:d7:20:d6:ae:80:59: f9:77:dd:ae:9c:18:72:94:03:44:62:57:34:88:43: 1d:c1:bf:f9:cc:b4:8a:b8:60:9b:46:02:f6:02:bf: fb:82:91:a5:04:7e:6f:13:81:ea:dc:c2:d7:d0:dd: ce:45:2e:24:dc:56:c6:bd:bf:0c:b4:23:da:a5:85: 31:9d:cd:10:f8:16:f5:bc:f7:0b:27:0a:89:54:fa: 12:64:ee:2f:bb:2b:1a:7d:79:fd:fa:2d:64:22:bd: 4f:c0:e2:48:a8:ab:25:b2:ed:29:7e:5c:9c:08:5c: f3:5f:6f:c6:e0:7e:bd:94:be:2a:80:98:42:8a:00: e7:b5:01:fe:52:20:b4:de:88:ce:ec:f3:3b:03:57: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6F:74:97:4F:C7:AB:90:D4:B6:83:4D:BD:5B:24:C7:77:A4:35:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:67:64:d2:96:54:95:6d:5e:83:9a:04:39:2a:82:a4:3b:25: c7:b4:6d:b4:0e:1a:23:07:d8:61:8a:2c:01:13:66:67:b5:eb: f2:f3:f1:eb:65:03:de:f1:ea:50:3c:50:d7:71:67:7d:5e:d9: 98:f5:82:c3:2b:f2:10:53:b5:49:fb:cc:c1:ac:f2:5d:87:07: 2f:85:04:64:0f:45:08:8f:9f:55:bc:0e:06:29:f0:d0:c6:0a: 8a:67:74:2c:c0:8d:94:94:39:6f:99:88:a2:04:87:4b:dd:e9: 13:c5:35:e9:5d:ae:48:f0:f5:f6:94:54:8c:1e:d1:e1:6b:df: 6d:d8:b5:35:68:20:d6:8d:9f:b8:80:c2:50:a0:27:34:22:35: 26:c5:73:54:47:a3:a2:35:1a:ee:0d:cd:a6:a4:77:eb:c6:65: 96:30:1e:90:72:68:4d:ab:62:62:2b:d9:ef:60:54:15:be:3b: 30:69:58:67:16:6e:2d:cb:0d:b8:4a:2d:d1:97:3b:0e:90:30: 6b:66:84:7f:12:b8:f4:16:34:31:bc:33:74:b3:bd:b6:65:c1: 85:45:21:8a:1f:82:97:de:ff:ce:f9:d9:f2:c0:3d:1b:7d:b1: 10:3e:ec:a5:eb:4e:26:0f:a7:85:18:df:d9:78:47:f5:15:6c: 32:a4:2f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEXxvsLebqeMlX1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDIwNDA0MTY1N1oXDTI1MDUwNTAzMTY1N1owLzEtMCsGA1UEAxMk OGUyMGU0ODAtMDg3MS00NWU0LWFiYTctMjMwNjdkYmI5N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEBbbHVSpTOJZWslQknmVl6UDvE7ycttnBqm PPNWLTgiXIdoauRpTwc2gj0rWKoAiRPEXq7+uC1dNPnpV4WnUWGyPOxSWkGSltXE alr9V64/SfikzwSgQpDC3k3L3KhkiIAIW6XhnTSj1v7MT85lWT/XINaugFn5d92u nBhylANEYlc0iEMdwb/5zLSKuGCbRgL2Ar/7gpGlBH5vE4Hq3MLX0N3ORS4k3FbG vb8MtCPapYUxnc0Q+Bb1vPcLJwqJVPoSZO4vuysafXn9+i1kIr1PwOJIqKslsu0p flycCFzzX2/G4H69lL4qgJhCigDntQH+UiC03ojO7PM7A1e3xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENvdJdPx6uQ1LaDTb1bJMd3pDUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNGYzMmJkZDYtYzg2Mi0z OWM5LWJmYmUtMGYwYzcxNzFhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJnZNKWVJVtXoOaBDkqgqQ7Jce0bbQOGiMH2GGKLAETZme16/Lz8etl A97x6lA8UNdxZ31e2Zj1gsMr8hBTtUn7zMGs8l2HBy+FBGQPRQiPn1W8DgYp8NDG CopndCzAjZSUOW+ZiKIEh0vd6RPFNeldrkjw9faUVIwe0eFr323YtTVoINaNn7iA wlCgJzQiNSbFc1RHo6I1Gu4Nzaakd+vGZZYwHpByaE2rYmIr2e9gVBW+OzBpWGcW bi3LDbhKLdGXOw6QMGtmhH8SuPQWNDG8M3SzvbZlwYVFIYofgpfe/8752fLAPRt9 sRA+7KXrTiYPp4UY39l4R/UVbDKkL6M= -----END CERTIFICATE-----Generated at Sat Apr 5 04:31:06 2025 by rpki-client