$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa File: ab8aed72-03d9-3336-891c-beaf500c0618.roa (raw, json) Hash identifier: bPMLj4V3oVMcyhV/98kyE2TKhQbtxb241zx6tjf5EwQ= Subject key identifier: F7:CF:23:17:82:18:71:F6:21:90:EE:54:3F:E1:9A:97:0E:5F:D9:74 Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Certificate serial: 010D0C9F43285849244E7B792D0D0685857B5B00 Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 32524 IP address blocks: 72.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7b:79:2d:0d:06:85:85:7b:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=8fd0cf1d-b59d-4d59-aa44-5ae53e01fbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:24:6e:41:80:6c:b5:b0:ce:27:6a:61:3a:07: 3c:4e:e9:45:83:9f:e3:d2:a4:8e:c9:19:47:20:41: 99:03:52:59:03:5e:5b:f0:31:46:03:49:eb:af:e9: 4b:74:a7:13:f5:92:13:e4:46:f3:9a:fb:fa:17:aa: 3c:71:fa:d7:8a:d0:8f:f5:4c:e1:c3:c0:5c:50:95: c7:c2:5f:0f:e3:3a:8c:3b:46:1c:c0:b5:d5:08:9a: 1d:df:85:ba:e2:27:5e:07:63:f9:ca:c0:3a:ac:ab: 46:52:c6:27:6a:fa:a1:db:9c:ea:a2:de:b4:10:a6: 15:42:20:88:6d:09:bf:e1:fe:4f:dc:76:b4:1c:63: 51:fc:d0:2b:d6:97:25:6f:d9:53:97:71:13:43:bd: 93:8c:7d:af:76:a9:e9:c3:64:e2:f7:3d:b6:8c:a6: 65:04:47:ce:23:84:92:cc:ba:4e:4f:0e:30:e4:96: a4:76:4c:4e:d7:3e:11:b4:7e:94:bd:8b:d5:f1:b5: fd:ca:26:c7:4a:53:24:fd:6a:25:67:66:5e:d6:b1: 24:66:4c:a6:ef:aa:45:a5:4a:47:18:65:32:19:8c: 16:ac:93:c2:9d:a7:e6:31:4e:71:53:b9:39:15:a8: aa:56:e4:20:b1:6a:c6:b1:a6:c8:88:01:32:be:b1: 26:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CF:23:17:82:18:71:F6:21:90:EE:54:3F:E1:9A:97:0E:5F:D9:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl X509v3 Authority Key Identifier: keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer sbgp-ipAddrBlock: critical IPv4: 72.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:57:0c:87:5b:b7:86:e5:3b:22:f1:b9:28:ee:e6:99:16:b6: d0:7c:ab:ff:4b:2f:e9:a7:77:70:f6:36:af:b1:34:6d:79:ad: c2:73:ed:f7:19:32:88:11:de:83:49:db:45:0c:3a:5e:30:ef: f5:ad:39:79:a8:b4:03:84:89:9d:85:60:62:c8:e1:be:c8:84: af:57:e3:fc:18:a2:96:be:95:c8:b6:6e:6d:e5:8e:5a:b4:31: 94:38:3c:4c:dc:30:d4:f7:34:18:9d:d0:94:16:a3:40:c6:96: 15:b1:47:81:53:0d:1c:36:ef:a3:4c:4c:5b:76:1c:2a:a7:8e: ad:ff:c1:fb:1a:2b:c9:fe:b8:1f:b3:47:79:21:d1:5e:79:65: 2e:ec:c5:46:a3:8e:66:88:c1:67:23:b6:21:b9:5b:06:91:6c: 33:13:ca:57:c0:7b:81:05:61:9f:fb:90:06:63:2b:37:f6:14: 6a:2f:97:ef:69:78:06:0d:78:c5:2f:b9:23:06:fb:3c:52:6c: 8d:ce:25:4d:90:b0:f1:1f:98:b5:02:04:ea:69:58:23:01:de: 9f:3b:85:dc:f4:94:66:22:f3:16:6d:e3:48:c7:cc:43:bb:41: a8:5f:e9:9e:02:62:4b:d0:13:6f:5e:b0:31:b6:6d:b9:74:12: 49:e8:86:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnt5LQ0GhYV7WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk YTQ2MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk OGZkMGNmMWQtYjU5ZC00ZDU5LWFhNDQtNWFlNTNlMDFmYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCRuQYBstbDOJ2phOgc8TulFg5/j0qSOyRlH IEGZA1JZA15b8DFGA0nrr+lLdKcT9ZIT5Ebzmvv6F6o8cfrXitCP9Uzhw8BcUJXH wl8P4zqMO0YcwLXVCJod34W64ideB2P5ysA6rKtGUsYnavqh25zqot60EKYVQiCI bQm/4f5P3Ha0HGNR/NAr1pclb9lTl3ETQ72TjH2vdqnpw2Ti9z22jKZlBEfOI4SS zLpOTw4w5JakdkxO1z4RtH6UvYvV8bX9yibHSlMk/WolZ2Ze1rEkZkym76pFpUpH GGUyGYwWrJPCnafmMU5xU7k5FaiqVuQgsWrGsabIiAEyvrEmswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfPIxeCGHH2IZDuVD/hmpcOX9l0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvYWI4YWVkNzItMDNkOS0z MzM2LTg5MWMtYmVhZjUwMGMwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4 NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlXDIdbt4blOyLxuSju5pkWttB8q/9LL+mnd3D2Nq+xNG15rcJz7fcZ MogR3oNJ20UMOl4w7/WtOXmotAOEiZ2FYGLI4b7IhK9X4/wYopa+lci2bm3ljlq0 MZQ4PEzcMNT3NBid0JQWo0DGlhWxR4FTDRw276NMTFt2HCqnjq3/wfsaK8n+uB+z R3kh0V55ZS7sxUajjmaIwWcjtiG5WwaRbDMTylfAe4EFYZ/7kAZjKzf2FGovl+9p eAYNeMUvuSMG+zxSbI3OJU2QsPEfmLUCBOppWCMB3p87hdz0lGYi8xZt40jHzEO7 Qahf6Z4CYkvQE29esDG2bbl0Eknohj4= -----END CERTIFICATE-----Generated at Sat Apr 12 00:25:14 2025 by rpki-client