$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/72f5aca1-48bc-321c-beb1-4f0419492a94.roa File: 72f5aca1-48bc-321c-beb1-4f0419492a94.roa (raw, json) Hash identifier: MKsUcmhaYVrAXcngLAqlBRU7xFdeZLc2SHs+g6Oo6d0= Subject key identifier: 04:DA:DD:BD:71:A6:78:ED:BB:2A:C8:65:FA:8A:0D:DE:E8:01:72:00 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285848C46F4FD73FB58F3BA9866E00 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/72f5aca1-48bc-321c-beb1-4f0419492a94.roa Signing time: Tue 04 Feb 2025 04:49:36 +0000 ROA not before: Tue 04 Feb 2025 04:49:36 +0000 ROA not after: Mon 05 May 2025 03:49:36 +0000 asID: 14813 IP address blocks: 72.51.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:6f:4f:d7:3f:b5:8f:3b:a9:86:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Feb 4 04:49:36 2025 GMT Not After : May 5 03:49:36 2025 GMT Subject: CN=0e749687-b55c-49e8-926f-03c017379360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:33:57:a9:4e:53:47:9b:6f:56:71:a1:30: 2f:51:f8:d7:22:b8:c0:f1:6c:70:2d:7f:14:6c:ad: ec:ef:00:47:b8:a7:f6:7d:76:89:8e:85:cd:27:78: 24:16:c1:88:44:90:74:16:2d:72:5b:67:69:45:bf: 22:8b:30:42:0e:c0:b7:4f:3b:23:cb:7d:9d:cf:7e: 64:7a:20:db:95:bb:0f:86:99:77:4b:23:4b:1b:4f: 95:d5:5c:6b:3c:3b:51:9f:54:59:f8:43:40:17:3d: 3f:73:09:5b:70:73:0b:bf:6a:00:bc:fe:87:cd:18: de:e2:d6:58:3d:6f:32:e0:bf:ce:15:77:09:44:ce: e3:21:d9:09:04:69:38:9d:66:f8:03:af:fe:22:70: fa:2e:9f:e0:7a:fa:22:53:30:91:60:c6:e4:56:bd: 6e:b4:8f:3d:b4:18:ac:c2:24:1a:94:b6:e4:35:37: ce:32:a6:5f:22:31:46:dd:85:46:83:d4:b5:41:93: 80:bb:83:38:97:da:6f:9b:05:e1:5f:35:02:49:78: 47:7e:78:a5:eb:5b:c6:b6:5e:95:28:be:1b:3d:fd: 29:6d:d9:30:8b:cb:83:c2:71:d1:88:c1:08:3f:ea: 4a:28:18:cd:03:f0:65:32:3e:d1:d8:fe:d4:50:e4: 89:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DA:DD:BD:71:A6:78:ED:BB:2A:C8:65:FA:8A:0D:DE:E8:01:72:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/72f5aca1-48bc-321c-beb1-4f0419492a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.51.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8d:2f:14:e4:c0:2c:69:58:e2:53:05:1d:7e:5c:68:88:75: e6:e4:87:75:7f:67:5b:32:2e:d1:2e:f1:5d:03:dc:8f:f4:a1: 93:c2:9f:c0:bd:9c:e1:03:b6:54:12:69:8b:a4:41:a9:dd:51: d3:b4:96:9c:88:37:83:a9:45:90:89:58:6c:1a:44:69:16:3b: 3a:38:aa:65:49:04:56:55:80:e3:7f:36:f8:5f:00:b0:f7:88: 5a:7c:5a:6f:30:3f:91:7d:e4:e9:b0:f4:31:27:10:17:70:9d: 7f:68:b6:b7:85:ca:2d:d0:75:d1:cd:bf:3e:99:f7:66:9f:e7: c8:49:8a:60:c5:3a:65:b3:0d:e8:a6:ba:a0:19:b1:4e:d5:c6: 2a:cb:8b:b5:38:38:4e:63:55:0e:38:65:d5:f7:e4:8e:df:7d: e7:ce:b2:bd:64:41:42:f6:ed:c4:db:4d:f5:04:c7:fd:ed:05: 6c:dd:04:06:d8:bf:a2:b2:f0:63:47:03:db:d3:34:1a:f2:6f: 15:7e:2c:d5:67:c3:d1:b2:c1:25:41:79:58:4a:d2:f3:5c:e9: bc:f5:6b:f6:e6:81:32:db:37:43:28:7b:62:5b:16:4c:66:a1: a4:bb:31:cb:d0:dd:88:61:02:7c:72:9e:7a:72:c7:72:da:de: 56:f2:be:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEb0/XP7WPO6mGbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDIwNDA0NDkzNloXDTI1MDUwNTAzNDkzNlowLzEtMCsGA1UEAxMk MGU3NDk2ODctYjU1Yy00OWU4LTkyNmYtMDNjMDE3Mzc5MzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJUzV6lOU0ebb1ZxoTAvUfjXIrjA8WxwLX8U bK3s7wBHuKf2fXaJjoXNJ3gkFsGIRJB0Fi1yW2dpRb8iizBCDsC3Tzsjy32dz35k eiDblbsPhpl3SyNLG0+V1VxrPDtRn1RZ+ENAFz0/cwlbcHMLv2oAvP6HzRje4tZY PW8y4L/OFXcJRM7jIdkJBGk4nWb4A6/+InD6Lp/gevoiUzCRYMbkVr1utI89tBis wiQalLbkNTfOMqZfIjFG3YVGg9S1QZOAu4M4l9pvmwXhXzUCSXhHfnil61vGtl6V KL4bPf0pbdkwi8uDwnHRiMEIP+pKKBjNA/BlMj7R2P7UUOSJqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATa3b1xpnjtuyrIZfqKDd7oAXIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNzJmNWFjYTEtNDhiYy0z MjFjLWJlYjEtNGYwNDE5NDkyYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSDNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSNLxTkwCxpWOJTBR1+XGiIdebkh3V/Z1syLtEu8V0D3I/0oZPCn8C9 nOEDtlQSaYukQandUdO0lpyIN4OpRZCJWGwaRGkWOzo4qmVJBFZVgON/NvhfALD3 iFp8Wm8wP5F95Omw9DEnEBdwnX9otreFyi3QddHNvz6Z92af58hJimDFOmWzDeim uqAZsU7VxirLi7U4OE5jVQ44ZdX35I7ffefOsr1kQUL27cTbTfUEx/3tBWzdBAbY v6Ky8GNHA9vTNBrybxV+LNVnw9GywSVBeVhK0vNc6bz1a/bmgTLbN0Moe2JbFkxm oaS7McvQ3YhhAnxynnpyx3La3lbyvos= -----END CERTIFICATE-----Generated at Sun Apr 6 11:49:10 2025 by rpki-client