$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa File: cec281ba-09c0-37f8-92de-50b5e586cb84.roa (raw, json) Hash identifier: RRUlVDFcoQyYy+CIyJwdTJyd52LQMV2D1k2jwDSGhNU= Subject key identifier: FE:11:31:0F:B6:BE:ED:D1:58:1A:20:5E:9C:C7:35:9C:BE:04:FD:02 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285848C46B497C0613FBD987898680 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa Signing time: Tue 04 Feb 2025 04:41:30 +0000 ROA not before: Tue 04 Feb 2025 04:41:30 +0000 ROA not after: Mon 05 May 2025 03:41:30 +0000 asID: 14813 IP address blocks: 72.51.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:6b:49:7c:06:13:fb:d9:87:89:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Feb 4 04:41:30 2025 GMT Not After : May 5 03:41:30 2025 GMT Subject: CN=794a91aa-cc65-494a-95fc-15e765c340ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:30:26:dd:52:d6:95:6b:2c:dd:b1:ad:ee: cc:a5:8b:f7:5a:f0:83:7a:3f:e6:28:8c:16:14:b0: 3f:89:04:2d:5a:ee:6e:6c:4c:10:2f:13:fc:44:36: c0:0a:3e:ad:4f:07:93:8b:90:1a:77:99:a7:52:a3: d7:a0:29:06:c2:c8:ad:4b:78:af:4c:49:55:fb:91: 76:50:07:4b:9e:24:ab:92:b7:0e:96:30:b2:e6:ed: e9:1b:84:6d:c1:38:71:49:7e:93:42:1b:29:53:fc: 82:40:28:12:cf:4c:2e:f7:65:b1:10:c7:40:48:bf: 70:78:18:a1:e1:48:83:83:c1:a9:e9:ae:01:95:ec: 04:f9:ac:a0:a9:80:46:9b:b9:bd:08:58:02:54:5b: 5d:a9:c4:a0:ca:35:5a:2c:7c:5a:3e:64:c0:b6:31: 5a:3d:e4:40:e7:24:aa:be:3f:84:20:a6:82:e9:cb: 14:02:fc:da:b3:81:ab:1e:d7:98:4e:4f:a3:54:d3: d1:c3:2e:e3:17:d5:38:81:e8:e1:94:dd:57:16:99: 05:c6:39:6a:0c:df:2f:b9:ce:f6:8c:73:7e:ee:eb: 59:ba:54:85:b2:7a:65:49:2a:69:18:15:88:64:1e: 7c:b6:db:25:38:9f:07:7d:a9:96:89:ae:ca:71:15: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:11:31:0F:B6:BE:ED:D1:58:1A:20:5E:9C:C7:35:9C:BE:04:FD:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.51.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6c:86:f3:53:39:e6:76:2e:55:54:ce:8d:0e:48:1e:f7:b3: dd:f2:33:a3:d7:ba:a3:8c:de:5a:f3:09:66:1d:23:2e:39:98: a6:40:78:14:a4:49:7f:a6:29:35:88:ce:28:ed:55:79:6c:f1: 18:9e:48:91:47:68:1b:c0:f1:94:3e:35:3e:c7:85:e3:69:7e: bb:e5:49:cb:89:e3:aa:d2:d0:2e:e3:a4:d1:0a:cf:91:db:29: 4f:dc:97:08:95:62:d1:56:a7:4c:ae:06:96:fb:4f:22:66:ab: 49:91:5f:f1:29:33:ba:d8:e4:9c:2b:ef:00:26:cb:38:6a:b0: 0d:a8:5b:93:fb:7c:84:63:70:4c:e3:3a:e6:22:40:6d:7d:2a: a0:27:c0:a3:ff:76:8f:d5:6c:8c:8a:4d:92:49:77:1b:87:d3: d7:90:db:99:e0:fe:b6:eb:9d:ac:65:bf:3c:d8:53:30:31:ca: a4:06:95:03:37:12:2c:7e:d2:46:64:81:45:0c:97:73:b2:0d: e7:bb:4d:81:d5:1a:a2:ab:53:26:85:58:dd:44:33:38:6c:10: fe:99:aa:30:b2:70:b7:a0:09:da:4d:a1:92:56:ef:ca:64:c3: 25:56:6e:01:51:57:94:c9:9a:bc:bd:9b:58:16:7f:73:fe:44: 64:4a:5d:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEa0l8BhP72YeJhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDIwNDA0NDEzMFoXDTI1MDUwNTAzNDEzMFowLzEtMCsGA1UEAxMk Nzk0YTkxYWEtY2M2NS00OTRhLTk1ZmMtMTVlNzY1YzM0MGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/cwJt1S1pVrLN2xre7MpYv3WvCDej/mKIwW FLA/iQQtWu5ubEwQLxP8RDbACj6tTweTi5Aad5mnUqPXoCkGwsitS3ivTElV+5F2 UAdLniSrkrcOljCy5u3pG4RtwThxSX6TQhspU/yCQCgSz0wu92WxEMdASL9weBih 4UiDg8Gp6a4BlewE+aygqYBGm7m9CFgCVFtdqcSgyjVaLHxaPmTAtjFaPeRA5ySq vj+EIKaC6csUAvzas4GrHteYTk+jVNPRwy7jF9U4gejhlN1XFpkFxjlqDN8vuc72 jHN+7utZulSFsnplSSppGBWIZB58ttslOJ8HfamWia7KcRXsswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4RMQ+2vu3RWBogXpzHNZy+BP0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvY2VjMjgxYmEtMDljMC0z N2Y4LTkyZGUtNTBiNWU1ODZjYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDNiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9shvNTOeZ2LlVUzo0OSB73s93yM6PXuqOM3lrzCWYdIy45mKZAeBSk SX+mKTWIzijtVXls8RieSJFHaBvA8ZQ+NT7HheNpfrvlScuJ46rS0C7jpNEKz5Hb KU/clwiVYtFWp0yuBpb7TyJmq0mRX/EpM7rY5Jwr7wAmyzhqsA2oW5P7fIRjcEzj OuYiQG19KqAnwKP/do/VbIyKTZJJdxuH09eQ25ng/rbrnaxlvzzYUzAxyqQGlQM3 Eix+0kZkgUUMl3OyDee7TYHVGqKrUyaFWN1EMzhsEP6ZqjCycLegCdpNoZJW78pk wyVWbgFRV5TJmry9m1gWf3P+RGRKXfs= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:39 2025 by rpki-client