$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/17c74446-4499-391f-a432-a9ff02dba5ca.roa File: 17c74446-4499-391f-a432-a9ff02dba5ca.roa (raw, json) Hash identifier: xsJpc6JOQuhv49Q8EFMF23HiGunptU6qGugwpZWGvp0= Subject key identifier: 03:7C:34:37:B8:60:FB:01:9A:DC:DC:ED:2E:B9:95:6C:6D:DF:90:1C Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F43285848AF2B98C0F8A4E765EBCD7300 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/17c74446-4499-391f-a432-a9ff02dba5ca.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 396185 IP address blocks: 72.29.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:98:c0:f8:a4:e7:65:eb:cd:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=a9f5f5ca-1648-4d9c-b68f-33f4ca412e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:6d:1e:f0:30:5a:22:bf:19:de:9c:ce:76: 24:be:0f:4e:32:dc:d2:6c:3b:88:8b:4a:ad:d8:86: 23:8c:60:77:62:dd:4a:2c:4c:c0:56:0e:18:fa:b3: 5a:e2:e3:22:79:72:5c:1e:32:57:5d:a2:5d:86:75: cd:94:22:ec:0a:27:15:8d:ad:f4:04:40:b8:35:72: ca:b0:5f:bc:0e:29:29:f0:3d:cb:93:49:b0:dc:20: 22:ab:0d:f5:06:f7:c9:c0:7b:33:11:63:28:3e:62: 7f:5a:ee:62:87:7a:7b:1d:00:95:dc:ad:8d:5b:4f: 42:bf:00:f3:65:1b:b0:c2:37:01:3f:a3:74:65:71: 23:1d:97:0b:90:b7:7f:96:bd:a1:c2:81:7b:27:04: f9:60:0b:29:10:65:af:6d:a7:6b:f1:72:0c:92:11: 16:24:69:c5:07:8d:e6:4f:e2:8e:51:25:a4:32:8a: 36:e8:b9:26:a6:e5:25:19:61:ff:96:67:cd:a5:11: 07:14:58:fd:c0:d8:15:2c:f5:4e:7d:20:dd:15:be: 44:2e:53:75:dd:53:08:ee:53:35:93:d2:0f:2f:b8: 50:39:2b:48:4b:b1:02:18:85:ee:67:1e:0b:4f:66: 1e:30:ad:c4:ff:86:74:2e:58:ed:85:ea:74:90:50: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7C:34:37:B8:60:FB:01:9A:DC:DC:ED:2E:B9:95:6C:6D:DF:90:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/17c74446-4499-391f-a432-a9ff02dba5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:52:3e:e3:f3:8c:13:ae:73:ac:9f:8c:1f:15:be:e1:36:89: 8e:58:0d:ee:9f:21:d8:b6:f1:c5:15:cf:96:af:d2:b2:2b:ac: 40:55:59:1d:64:3e:cf:37:2a:ff:66:1f:37:da:68:e7:a6:3b: 4d:8f:a5:c8:40:b5:22:0e:e3:0f:80:51:d4:e1:0f:55:b6:a1: bd:1f:03:2e:8a:42:a6:a6:fc:ed:13:02:48:ce:79:aa:dc:c5: b7:33:c4:57:23:95:0c:10:04:61:98:8e:dc:59:20:35:30:ab: 58:20:d6:7a:1f:c5:63:48:4a:26:d7:c7:a2:97:f8:17:13:5a: f3:ab:d5:80:d6:bf:e9:d4:14:ad:20:38:e7:0b:d9:b6:0a:bf: cb:7c:17:dd:8b:c4:41:77:7b:db:90:4a:21:8e:79:28:12:1c: 77:f5:ea:92:c3:71:bf:d3:4e:32:b6:27:b8:8a:09:4f:11:5b: be:0a:db:ee:b4:ca:69:b1:2b:34:6d:40:57:4c:7e:8e:85:40: 37:a1:3d:dc:ea:de:91:04:e3:fe:b9:92:98:ad:77:ce:0b:e4: 54:0b:d8:f2:65:ca:a1:0d:81:d8:4b:d1:92:0b:bc:34:b3:35: 96:bb:4b:11:bb:8b:93:70:7a:b7:98:d2:b0:16:21:05:7e:1a: e6:b9:ee:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK5jA+KTnZevNcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YTlmNWY1Y2EtMTY0OC00ZDljLWI2OGYtMzNmNGNhNDEyZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszVtHvAwWiK/Gd6cznYkvg9OMtzSbDuIi0qt 2IYjjGB3Yt1KLEzAVg4Y+rNa4uMieXJcHjJXXaJdhnXNlCLsCicVja30BEC4NXLK sF+8Dikp8D3Lk0mw3CAiqw31BvfJwHszEWMoPmJ/Wu5ih3p7HQCV3K2NW09CvwDz ZRuwwjcBP6N0ZXEjHZcLkLd/lr2hwoF7JwT5YAspEGWvbadr8XIMkhEWJGnFB43m T+KOUSWkMoo26LkmpuUlGWH/lmfNpREHFFj9wNgVLPVOfSDdFb5ELlN13VMI7lM1 k9IPL7hQOStIS7ECGIXuZx4LT2YeMK3E/4Z0Lljthep0kFBE+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN8NDe4YPsBmtzc7S65lWxt35AcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMTdjNzQ0NDYtNDQ5OS0z OTFmLWE0MzItYTlmZjAyZGJhNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB0+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9SPuPzjBOuc6yfjB8VvuE2iY5YDe6fIdi28cUVz5av0rIrrEBVWR1k Ps83Kv9mHzfaaOemO02PpchAtSIO4w+AUdThD1W2ob0fAy6KQqam/O0TAkjOearc xbczxFcjlQwQBGGYjtxZIDUwq1gg1nofxWNISibXx6KX+BcTWvOr1YDWv+nUFK0g OOcL2bYKv8t8F92LxEF3e9uQSiGOeSgSHHf16pLDcb/TTjK2J7iKCU8RW74K2+60 ymmxKzRtQFdMfo6FQDehPdzq3pEE4/65kpitd84L5FQL2PJlyqENgdhL0ZILvDSz NZa7SxG7i5NwereY0rAWIQV+Gua57ns= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:15 2025 by rpki-client