$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4472f4e3-dbc2-37c7-ae25-05ff52abe6c9.roa File: 4472f4e3-dbc2-37c7-ae25-05ff52abe6c9.roa (raw, json) Hash identifier: ON2s43JKAL1bDkBPt2E7fYSFuICGuoNnuaNyMZm1TVM= Subject key identifier: 5D:C0:E4:A4:CA:8C:57:B2:23:18:18:87:68:B7:33:F9:BA:EB:EA:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F22A7D3274B1E6A276FC9C20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4472f4e3-dbc2-37c7-ae25-05ff52abe6c9.roa Signing time: Thu 20 Feb 2025 13:58:07 +0000 ROA not before: Thu 20 Feb 2025 13:58:07 +0000 ROA not after: Wed 21 May 2025 12:58:07 +0000 asID: 0 IP address blocks: 72.13.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2a:7d:32:74:b1:e6:a2:76:fc:9c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 20 13:58:07 2025 GMT Not After : May 21 12:58:07 2025 GMT Subject: CN=7432a9cb-e042-414b-ab4b-a533551df00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:24:ad:84:8a:2c:d1:08:37:4f:06:27:ff: ea:9e:34:3d:45:8d:2e:70:52:e9:32:86:71:dd:f2: f8:b0:b4:29:e2:7e:12:04:b9:4e:42:1e:29:6b:16: 8a:71:8b:ab:13:c2:ad:12:9c:9b:ba:7a:f5:ae:f5: 3c:bd:60:54:d0:50:db:b6:f6:b1:57:7d:77:42:93: 2a:85:39:0e:ec:90:ff:d8:a9:54:d0:05:65:48:66: 3f:1b:16:e7:77:c8:72:87:d2:11:c8:54:8a:b7:3e: ae:bf:df:52:fb:9f:5a:bc:b8:75:1c:c3:dd:b5:6f: 90:85:f9:97:02:7d:ed:04:ce:fe:de:1f:36:cb:cc: e2:47:61:f5:bb:df:55:58:c4:70:f0:71:65:c1:fe: 75:5f:78:99:7c:95:8d:70:28:7c:b4:94:ff:7a:9d: e2:08:fc:9f:c7:77:15:e9:67:30:6f:92:16:d7:95: c2:81:c6:73:a1:ad:23:d4:d4:ba:25:cb:bb:14:b8: f5:a8:0b:50:3b:6e:6d:54:1d:30:0e:5a:2c:7d:ac: a5:20:6c:fc:a0:67:2b:2a:86:ad:1b:ce:98:80:1f: 06:2f:fc:84:4b:05:2d:2e:df:fe:7e:01:bd:7c:55: 54:72:60:1d:72:af:bf:9c:7e:89:d8:6f:d6:16:3e: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C0:E4:A4:CA:8C:57:B2:23:18:18:87:68:B7:33:F9:BA:EB:EA:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4472f4e3-dbc2-37c7-ae25-05ff52abe6c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:1f:ef:47:e0:4c:24:63:fc:6f:fd:02:a6:26:65:58:d0:a2: 81:b1:5d:9e:07:b5:d4:12:b4:bf:77:07:9a:d1:47:f6:ff:a6: 0f:5f:cb:a9:b1:1b:f8:ed:c5:77:40:9d:96:35:f8:22:d3:38: ca:7f:15:85:7f:67:cb:7f:4e:91:6b:d6:90:82:c2:1a:b4:f6: 93:eb:ae:cc:be:4e:16:19:b6:35:56:c7:0a:14:11:69:02:ff: b5:ce:f2:d3:2f:e7:1a:8d:eb:12:bf:7f:67:73:13:c4:e0:a8: 1e:91:83:fc:49:08:3c:76:81:31:a6:77:e1:4d:32:39:d8:e7: 84:f6:65:3f:0a:13:0b:7d:f3:2a:a3:79:27:07:ce:7e:e1:84: cf:e8:d0:df:99:f5:90:87:c8:7d:54:f3:3e:b5:3b:73:1b:7c: 1b:59:3b:96:19:67:8e:3b:f0:b2:d8:59:f5:88:f4:14:7a:7e: 9b:37:9f:e5:2c:6b:20:2f:7d:7d:1d:ea:7d:5d:cc:0b:0e:59: 98:85:d8:ae:98:5f:2a:61:ec:ab:04:b4:0f:eb:27:ab:2c:81: cb:21:e2:22:d9:b8:b5:f9:0d:5e:13:4b:9b:9b:86:4e:c6:be: 2e:11:25:90:f1:7e:cc:10:f5:a5:72:51:b3:eb:fb:a4:67:6e: 3b:66:b4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyKn0ydLHmonb8nCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMDEzNTgwN1oXDTI1MDUyMTEyNTgwN1owLzEtMCsGA1UEAxMk NzQzMmE5Y2ItZTA0Mi00MTRiLWFiNGItYTUzMzU1MWRmMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYEkrYSKLNEIN08GJ//qnjQ9RY0ucFLpMoZx 3fL4sLQp4n4SBLlOQh4paxaKcYurE8KtEpybunr1rvU8vWBU0FDbtvaxV313QpMq hTkO7JD/2KlU0AVlSGY/Gxbnd8hyh9IRyFSKtz6uv99S+59avLh1HMPdtW+QhfmX An3tBM7+3h82y8ziR2H1u99VWMRw8HFlwf51X3iZfJWNcCh8tJT/ep3iCPyfx3cV 6Wcwb5IW15XCgcZzoa0j1NS6Jcu7FLj1qAtQO25tVB0wDlosfaylIGz8oGcrKoat G86YgB8GL/yESwUtLt/+fgG9fFVUcmAdcq+/nH6J2G/WFj5yDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3A5KTKjFeyIxgYh2i3M/m66+qWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDQ3MmY0ZTMtZGJjMi0z N2M3LWFlMjUtMDVmZjUyYWJlNmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwf70fgTCRj/G/9AqYmZVjQooGxXZ4HtdQStL93B5rRR/b/pg9fy6mx G/jtxXdAnZY1+CLTOMp/FYV/Z8t/TpFr1pCCwhq09pPrrsy+ThYZtjVWxwoUEWkC /7XO8tMv5xqN6xK/f2dzE8TgqB6Rg/xJCDx2gTGmd+FNMjnY54T2ZT8KEwt98yqj eScHzn7hhM/o0N+Z9ZCHyH1U8z61O3MbfBtZO5YZZ4478LLYWfWI9BR6fps3n+Us ayAvfX0d6n1dzAsOWZiF2K6YXyph7KsEtA/rJ6ssgcsh4iLZuLX5DV4TS5ubhk7G vi4RJZDxfswQ9aVyUbPr+6RnbjtmtGQ= -----END CERTIFICATE-----Generated at Sat Apr 12 02:09:15 2025 by rpki-client