$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa File: ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa (raw, json) Hash identifier: 0yImFJcfwIJnq46n1BPxGT9rWcWP/xIFvHG1H8yQjJ8= Subject key identifier: 49:C5:2D:FA:99:B4:0F:72:B5:B4:49:C3:1A:21:45:03:28:90:85:2D Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F432858498E64977D3BA1802C3C6B0200 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 396185 IP address blocks: 72.29.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:97:7d:3b:a1:80:2c:3c:6b:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=51613735-a7b8-4d70-84d6-5c01c84e4e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:37:8b:cf:50:ca:7f:e1:7b:45:68:c9:84:4a: 01:db:41:04:dc:a4:8f:54:7a:04:a6:da:b2:4f:cb: e9:7e:a3:8c:48:77:f5:25:ef:02:06:7a:e0:83:12: b4:a3:38:48:d1:ce:79:b3:83:f9:3a:84:24:d4:d2: c6:78:ea:b1:bf:04:78:70:46:06:2a:14:96:a5:42: c7:e4:2c:ec:21:e7:ad:9f:f6:62:a3:a9:40:12:f3: ad:70:63:18:16:88:f6:df:da:ac:ce:1e:80:26:fc: 1b:69:40:dd:a0:08:82:4c:1a:3d:2c:62:2f:d2:5c: ce:da:68:98:80:ae:b8:c0:8a:e8:71:f5:77:57:84: 80:af:60:a7:5a:61:d5:92:9b:24:b5:d8:37:1d:a4: 31:0b:5c:42:6c:fd:c3:5c:cd:0e:9f:90:70:f4:76: 17:6e:27:67:4f:e5:03:d1:12:9d:76:92:48:2e:4e: fc:87:4a:d2:22:94:42:c4:e8:31:51:03:d3:79:be: d1:8f:08:e2:6a:fa:3f:24:76:e4:8d:39:eb:b4:bd: 3c:62:bb:61:b3:0e:b6:f1:40:3d:8f:4e:78:50:f5: 04:d8:1a:59:0b:ab:74:32:a7:79:ee:c3:9a:d8:35: de:25:46:a8:cc:a7:b0:02:4f:dc:ed:94:dd:7d:8d: 63:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C5:2D:FA:99:B4:0F:72:B5:B4:49:C3:1A:21:45:03:28:90:85:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c7:7b:56:7c:66:94:39:be:6f:0d:ad:30:40:e1:b1:e2:21: 83:48:af:78:c1:ec:39:bb:83:15:fc:b7:0d:9d:8e:ce:9e:02: cf:b7:94:ac:0a:7a:d2:0a:ee:2e:25:d0:c0:cb:fe:67:77:12: 27:78:7b:16:ba:65:78:58:f6:d4:aa:47:0c:1d:14:bd:50:92: 35:71:a5:b1:ec:dd:53:2d:74:4b:7e:9d:e6:c6:dc:e0:25:ff: 57:b5:ac:73:62:93:30:c6:13:90:e8:23:e8:66:6c:21:2a:bc: e9:2f:c3:ac:e3:de:5d:43:6e:eb:77:69:10:e0:47:ce:81:0b: 08:4c:16:d3:02:78:bc:6d:9d:09:d0:22:45:23:b3:74:a0:55: bd:37:89:b4:c3:29:d3:f0:66:65:ff:fa:42:28:34:6c:64:7a: d7:2d:85:8b:68:82:b0:b1:b6:b7:89:34:2d:57:ec:8e:5b:95: 4a:67:63:33:a3:b4:9c:c3:de:de:1a:4f:e5:e2:42:04:a2:f4: 87:95:64:6a:db:fc:b6:37:97:5f:22:b7:86:ad:8a:d5:7a:51: 3b:18:e9:0b:9a:38:a6:e1:55:ca:cd:fc:a8:c0:96:3c:66:7c: d8:9b:1f:17:68:60:0f:2b:47:7f:25:41:98:eb:67:6f:b9:00: c9:84:ff:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJd9O6GALDxrAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NTE2MTM3MzUtYTdiOC00ZDcwLTg0ZDYtNWMwMWM4NGU0ZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDeLz1DKf+F7RWjJhEoB20EE3KSPVHoEptqy T8vpfqOMSHf1Je8CBnrggxK0ozhI0c55s4P5OoQk1NLGeOqxvwR4cEYGKhSWpULH 5CzsIeetn/Zio6lAEvOtcGMYFoj239qszh6AJvwbaUDdoAiCTBo9LGIv0lzO2miY gK64wIrocfV3V4SAr2CnWmHVkpsktdg3HaQxC1xCbP3DXM0On5Bw9HYXbidnT+UD 0RKddpJILk78h0rSIpRCxOgxUQPTeb7Rjwjiavo/JHbkjTnrtL08Yrthsw628UA9 j054UPUE2BpZC6t0Mqd57sOa2DXeJUaozKewAk/c7ZTdfY1jUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnFLfqZtA9ytbRJwxohRQMokIUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvZWJjNDdjNmYtODI3My0z MTRjLThjOWEtZWNiNDAyMDFjZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPHe1Z8ZpQ5vm8NrTBA4bHiIYNIr3jB7Dm7gxX8tw2djs6eAs+3lKwK etIK7i4l0MDL/md3Eid4exa6ZXhY9tSqRwwdFL1QkjVxpbHs3VMtdEt+nebG3OAl /1e1rHNikzDGE5DoI+hmbCEqvOkvw6zj3l1Dbut3aRDgR86BCwhMFtMCeLxtnQnQ IkUjs3SgVb03ibTDKdPwZmX/+kIoNGxketcthYtogrCxtreJNC1X7I5blUpnYzOj tJzD3t4aT+XiQgSi9IeVZGrb/LY3l18it4atitV6UTsY6QuaOKbhVcrN/KjAljxm fNibHxdoYA8rR38lQZjrZ2+5AMmE/6o= -----END CERTIFICATE-----Generated at Mon Apr 21 01:23:19 2025 by rpki-client