$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/f0b3dfd7-464e-362f-b1af-d891c621d14d.roa File: f0b3dfd7-464e-362f-b1af-d891c621d14d.roa (raw, json) Hash identifier: wxgkfu+Mp2uKs2+e1usumiTt34Dkmqod87tHMAaci0o= Subject key identifier: 92:64:0A:82:D7:38:51:81:54:51:84:E7:1C:54:24:9F:16:6C:AC:3F Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285848C47095C0EAFB510BD0C87040 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/f0b3dfd7-464e-362f-b1af-d891c621d14d.roa Signing time: Tue 04 Feb 2025 04:52:10 +0000 ROA not before: Tue 04 Feb 2025 04:52:10 +0000 ROA not after: Mon 05 May 2025 03:52:10 +0000 asID: 14813 IP address blocks: 72.51.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:70:95:c0:ea:fb:51:0b:d0:c8:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Feb 4 04:52:10 2025 GMT Not After : May 5 03:52:10 2025 GMT Subject: CN=7049554c-44b0-486d-9d44-5804521577af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1b:6a:4a:b2:e0:84:16:00:46:c9:92:1d:04: eb:e9:f8:ff:ba:53:bf:f5:55:53:60:19:f5:79:a5: 0d:a0:50:d8:30:3a:19:6d:31:fd:c7:15:73:48:12: 17:9f:94:56:7f:5f:22:21:07:28:25:b6:99:ef:06: a5:4c:57:f1:06:f9:71:1b:e9:90:2a:a9:21:8a:ee: 07:46:fb:b2:65:1b:21:65:b1:0c:54:4c:82:01:87: cf:cb:be:53:d3:35:46:b1:25:d3:b2:97:cf:0d:63: 0b:78:6c:ac:53:01:7e:1e:65:89:de:df:7e:bd:5d: 9b:14:07:a1:dd:c7:80:29:58:e4:38:62:53:7a:c4: 30:a9:7e:98:39:f2:2b:65:64:0f:bd:3f:2b:43:16: e2:27:90:88:3b:68:cb:56:1d:cf:0b:aa:26:84:20: 77:d2:db:f7:51:25:89:32:2a:ce:36:19:51:06:0d: bb:1c:3c:44:c5:c4:92:98:2b:7e:1f:5e:d8:d1:2d: a9:8b:58:67:12:42:40:c2:77:f6:2b:2d:11:b0:e2: 28:ca:f6:42:33:e0:a0:32:c7:03:16:83:e8:fe:b6: a8:20:a6:6b:0f:1d:8d:62:29:a4:03:c4:23:8a:2a: d3:64:84:05:a1:67:dd:f6:89:42:0d:83:70:d1:ce: f5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:64:0A:82:D7:38:51:81:54:51:84:E7:1C:54:24:9F:16:6C:AC:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/f0b3dfd7-464e-362f-b1af-d891c621d14d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.51.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:1f:66:ec:f3:a0:00:f1:2e:1f:88:d2:59:b9:55:e8:ca:1c: 07:9b:f1:57:ee:1a:ba:95:10:a2:42:10:7f:83:37:de:cf:57: 0f:fb:34:4b:0b:69:87:7e:b9:d9:40:d7:7f:4a:47:8f:09:44: 8c:3e:6d:cf:cc:0d:d9:af:df:32:cd:8b:41:bb:79:0d:7d:7f: 87:41:99:50:69:2a:68:19:07:a8:61:57:05:eb:6b:4c:b3:e3: 50:72:18:67:e8:b2:98:26:b2:90:14:0b:ca:b9:ac:67:0a:81: 12:a2:30:e6:c5:0e:fc:99:c1:6e:94:a7:87:1f:0d:4d:6d:72: e1:12:bd:d7:59:21:3a:9e:2d:91:f9:4b:4e:2e:ab:6d:cb:b7: 9c:42:d2:8d:ee:87:07:8b:3a:48:e4:7d:cd:7a:f2:db:6b:2e: 16:4b:90:35:a7:a1:a9:c1:49:45:a7:e4:9c:86:d7:6f:0f:d1: 6c:17:24:5e:4e:e0:a5:22:c5:b9:29:d8:24:c3:11:1f:c9:11: c7:24:bc:5d:aa:94:70:86:07:c6:b6:d8:4b:e3:07:21:f5:a8: 3c:8c:8c:7f:a9:28:9d:47:4d:66:97:cd:29:87:f2:ec:d9:4e: 33:97:98:a7:e8:38:76:1b:8c:89:35:43:06:b0:75:c4:d6:f9: 77:a9:24:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEcJXA6vtRC9DIcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDIwNDA0NTIxMFoXDTI1MDUwNTAzNTIxMFowLzEtMCsGA1UEAxMk NzA0OTU1NGMtNDRiMC00ODZkLTlkNDQtNTgwNDUyMTU3N2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0htqSrLghBYARsmSHQTr6fj/ulO/9VVTYBn1 eaUNoFDYMDoZbTH9xxVzSBIXn5RWf18iIQcoJbaZ7walTFfxBvlxG+mQKqkhiu4H RvuyZRshZbEMVEyCAYfPy75T0zVGsSXTspfPDWMLeGysUwF+HmWJ3t9+vV2bFAeh 3ceAKVjkOGJTesQwqX6YOfIrZWQPvT8rQxbiJ5CIO2jLVh3PC6omhCB30tv3USWJ MirONhlRBg27HDxExcSSmCt+H17Y0S2pi1hnEkJAwnf2Ky0RsOIoyvZCM+CgMscD FoPo/raoIKZrDx2NYimkA8QjiirTZIQFoWfd9olCDYNw0c71ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJkCoLXOFGBVFGE5xxUJJ8WbKw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvZjBiM2RmZDctNDY0ZS0z NjJmLWIxYWYtZDg5MWM2MjFkMTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSDNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsfZuzzoADxLh+I0lm5VejKHAeb8VfuGrqVEKJCEH+DN97PVw/7NEsL aYd+udlA139KR48JRIw+bc/MDdmv3zLNi0G7eQ19f4dBmVBpKmgZB6hhVwXra0yz 41ByGGfospgmspAUC8q5rGcKgRKiMObFDvyZwW6Up4cfDU1tcuESvddZITqeLZH5 S04uq23Lt5xC0o3uhweLOkjkfc168ttrLhZLkDWnoanBSUWn5JyG128P0WwXJF5O 4KUixbkp2CTDER/JEcckvF2qlHCGB8a22EvjByH1qDyMjH+pKJ1HTWaXzSmH8uzZ TjOXmKfoOHYbjIk1QwawdcTW+XepJAY= -----END CERTIFICATE-----Generated at Sat Apr 5 00:09:18 2025 by rpki-client