$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22321f28-08aa-3d05-b4de-e1cce43023ad.roa File: 22321f28-08aa-3d05-b4de-e1cce43023ad.roa (raw, json) Hash identifier: LVQeLwLPSauLSgvJZYvxJQ10UjEqn4rrmn1VvrjYe8o= Subject key identifier: 60:AC:B1:D0:58:4D:91:11:4B:8F:D5:85:10:DB:74:8A:35:46:B3:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849350EB2AFAD3DB6C33F1F8F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22321f28-08aa-3d05-b4de-e1cce43023ad.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 0 IP address blocks: 72.13.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b2:af:ad:3d:b6:c3:3f:1f:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=973f8817-f31c-4d48-9295-121c1e253541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dc:f8:45:59:6a:7f:af:53:7d:b5:cf:cb:9d: e4:d3:be:5c:bb:60:30:71:b9:f0:e5:36:c5:d7:15: 4b:8d:3d:6f:6b:69:9c:b7:b7:37:2b:6c:6f:af:63: 23:63:e3:7a:3d:d2:36:ef:0f:ed:e6:ac:9c:88:84: 70:25:54:cf:32:27:5d:34:a4:e3:20:7d:a7:b3:20: aa:a7:0e:8d:50:84:d4:b4:32:17:75:cd:87:32:8f: cb:dd:09:fa:b8:e4:19:77:4b:bd:85:31:49:19:f3: 35:a4:9e:9e:34:6b:5e:77:33:0c:f3:04:0e:a9:7f: 3f:66:b1:f7:91:27:76:a3:e7:67:ea:14:7e:f9:5d: 8b:f0:fa:57:ce:42:d7:35:35:b6:b4:45:d5:30:3b: 57:68:67:5a:ea:db:8d:dd:2f:79:10:c4:b9:16:2d: b6:a2:55:4f:04:be:df:10:81:91:ac:6c:e0:59:e6: db:c5:b4:41:ec:10:ca:1c:a9:99:09:dc:86:e8:40: b7:ff:45:81:c8:16:77:99:a3:5c:8e:22:8a:90:33: 52:e7:84:c2:d8:90:1c:af:2a:ef:aa:fb:17:58:87: d1:71:c5:ec:34:3a:39:f9:8e:3a:44:d6:69:0f:5b: 2e:a3:07:a0:fe:da:a6:cb:c5:1d:6d:77:e0:7f:1b: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AC:B1:D0:58:4D:91:11:4B:8F:D5:85:10:DB:74:8A:35:46:B3:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22321f28-08aa-3d05-b4de-e1cce43023ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c6:be:8a:06:6a:c9:27:d6:83:d0:03:1b:96:cf:21:2d:00: c9:7a:82:fc:7d:11:de:bf:f1:c0:e9:a5:53:2c:6b:76:85:72: aa:04:46:73:69:b1:b0:74:6c:01:66:35:86:73:33:e0:5c:3d: d3:6b:05:a9:b9:da:83:40:2e:17:9f:cf:f4:25:c1:dc:c0:e6: e6:47:7b:c1:22:2a:6a:a9:89:49:72:9a:a7:4a:31:ac:bf:0e: 50:2e:be:43:f2:82:cd:f0:e3:57:56:86:dd:28:54:0a:49:61: d8:a7:45:50:3c:f1:4b:94:25:8a:44:88:a7:20:49:cb:ad:0b: 60:fa:a7:56:ae:84:c3:fa:dc:43:02:da:b0:31:c6:f6:b9:82: f9:df:56:7c:d0:8b:8b:67:4e:52:bb:78:e1:99:23:14:9a:72: c8:6d:ba:ca:d3:5c:03:25:f9:37:34:02:b7:f4:42:88:d7:5e: 91:9a:00:0c:df:cf:d4:b5:22:fa:e1:8d:2f:07:f4:d7:5c:17: 8c:c9:19:1d:f6:38:64:e6:fc:34:97:ac:a4:da:28:d3:0c:37: c7:6f:26:c2:cd:5d:5e:a8:95:af:ee:a2:52:34:f9:b1:d1:fa: 1f:81:c0:32:4a:09:da:51:93:ed:cb:55:3b:93:c9:25:8f:a1: b1:ed:5b:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrKvrT22wz8fjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk OTczZjg4MTctZjMxYy00ZDQ4LTkyOTUtMTIxYzFlMjUzNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidz4RVlqf69TfbXPy53k075cu2Awcbnw5TbF 1xVLjT1va2mct7c3K2xvr2MjY+N6PdI27w/t5qyciIRwJVTPMiddNKTjIH2nsyCq pw6NUITUtDIXdc2HMo/L3Qn6uOQZd0u9hTFJGfM1pJ6eNGtedzMM8wQOqX8/ZrH3 kSd2o+dn6hR++V2L8PpXzkLXNTW2tEXVMDtXaGda6tuN3S95EMS5Fi22olVPBL7f EIGRrGzgWebbxbRB7BDKHKmZCdyG6EC3/0WByBZ3maNcjiKKkDNS54TC2JAcryrv qvsXWIfRccXsNDo5+Y46RNZpD1suoweg/tqmy8UdbXfgfxtNqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCssdBYTZERS4/VhRDbdIo1RrMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjIzMjFmMjgtMDhhYS0z ZDA1LWI0ZGUtZTFjY2U0MzAyM2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErGvooGaskn1oPQAxuWzyEtAMl6gvx9Ed6/8cDppVMsa3aFcqoERnNp sbB0bAFmNYZzM+BcPdNrBam52oNALhefz/QlwdzA5uZHe8EiKmqpiUlymqdKMay/ DlAuvkPygs3w41dWht0oVApJYdinRVA88UuUJYpEiKcgScutC2D6p1auhMP63EMC 2rAxxva5gvnfVnzQi4tnTlK7eOGZIxSacshtusrTXAMl+Tc0Arf0QojXXpGaAAzf z9S1IvrhjS8H9NdcF4zJGR32OGTm/DSXrKTaKNMMN8dvJsLNXV6ola/uolI0+bHR +h+BwDJKCdpRk+3LVTuTySWPobHtWwM= -----END CERTIFICATE-----Generated at Wed Apr 16 15:08:44 2025 by rpki-client