$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de018d0e-91d5-37a8-a894-92279cb221e6.roa File: de018d0e-91d5-37a8-a894-92279cb221e6.roa (raw, json) Hash identifier: sRsglzuysU/3ZtztNVF8MoCzmVB7sTADWuhXXqZ5Z2A= Subject key identifier: 5A:F4:49:71:47:8E:3C:1D:5F:0A:5A:5D:36:41:BA:2E:8B:7D:8A:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A07D53C4441BEBCB1B4EE5700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de018d0e-91d5-37a8-a894-92279cb221e6.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 396828 IP address blocks: 72.13.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:3c:44:41:be:bc:b1:b4:ee:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=8f85c73b-34b1-48a3-9750-db2c9108c028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c1:33:b1:16:53:ea:b1:52:bd:8f:15:55:92: 5d:67:36:38:64:19:58:8c:3d:ef:75:2e:e3:62:ff: 4d:2a:b2:11:7e:bb:dc:97:38:c8:a1:0a:02:9f:a1: 66:89:ba:6d:29:ea:6f:cd:bc:3b:94:71:51:89:48: db:34:31:4b:45:c8:77:eb:9e:9b:32:aa:5f:25:3a: 11:0d:b6:b0:0a:12:3d:67:da:64:9a:46:23:32:f8: be:80:14:89:70:b1:e0:54:9a:5f:09:78:fb:32:88: 9b:4c:d2:8a:95:94:25:ad:65:09:fa:1d:91:05:dc: 6f:ff:7b:91:33:a5:9b:c6:f5:3d:7d:d0:83:34:d0: 95:1f:d9:80:1d:1f:66:2f:5c:ec:22:a8:da:4e:4f: cf:db:b8:0a:ae:7a:84:e5:63:2f:f4:e2:dc:16:a6: ed:e1:8d:f5:62:56:03:cf:b8:98:3f:17:4e:d5:92: df:a4:be:1e:0d:f5:68:7f:38:5c:e1:c3:f5:ff:78: 14:02:ce:c7:f3:8c:cc:c2:ff:e1:5c:ab:ca:28:d4: 0f:c3:d6:e1:62:b5:ef:97:d3:c3:08:8e:50:12:b2: 1e:d8:94:a0:a4:f9:09:a2:76:73:d8:f5:f1:db:b9: a5:f9:39:a4:be:ea:b3:c0:d2:9b:28:05:da:79:05: 6a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F4:49:71:47:8E:3C:1D:5F:0A:5A:5D:36:41:BA:2E:8B:7D:8A:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de018d0e-91d5-37a8-a894-92279cb221e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:cd:9e:1f:7d:1a:51:44:6f:f5:4c:cb:98:ff:9d:ad:f5:5f: 9f:9b:d3:30:62:78:eb:9d:78:fa:2f:42:1d:04:03:e5:b1:e7: db:38:c4:c8:56:76:c1:cc:06:99:01:f1:93:68:32:f0:b1:5b: 68:35:d1:f8:35:9f:cf:9e:d8:57:9c:a3:12:6e:b6:9c:93:5b: 2e:ca:5e:d4:d3:34:fc:d0:ce:ec:e1:e5:0b:05:de:0a:01:a7: 1a:11:5a:d0:c3:20:07:5f:e5:8f:8e:e4:88:8f:de:f0:e6:fb: 65:d0:fa:4b:cc:20:bc:a7:d4:29:6f:75:30:49:d1:ba:0f:b6: 9a:5a:c5:64:5c:9f:8e:1d:6f:7b:c1:9e:64:58:82:fe:56:17: 82:e8:72:a9:6c:83:83:e0:f0:09:27:2a:e5:58:a4:0d:12:72: 23:43:c0:69:36:6b:9b:f6:65:b9:32:00:06:34:ef:8e:8f:41: c7:bb:18:a7:68:15:a3:5c:f3:4e:75:1e:c4:43:95:31:35:63: 83:2d:6c:f3:65:9d:01:fb:f1:b6:0e:a8:8d:57:41:d9:c0:8e: 91:2c:30:93:3d:59:9a:c2:a8:c0:b6:4a:d7:e4:cb:9b:5b:a0: cc:68:aa:cb:5b:9b:f1:e4:cd:71:bf:99:3e:b8:c1:78:5e:fd: f3:a0:98:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TxEQb68sbTuVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk OGY4NWM3M2ItMzRiMS00OGEzLTk3NTAtZGIyYzkxMDhjMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcEzsRZT6rFSvY8VVZJdZzY4ZBlYjD3vdS7j Yv9NKrIRfrvclzjIoQoCn6FmibptKepvzbw7lHFRiUjbNDFLRch3656bMqpfJToR DbawChI9Z9pkmkYjMvi+gBSJcLHgVJpfCXj7MoibTNKKlZQlrWUJ+h2RBdxv/3uR M6WbxvU9fdCDNNCVH9mAHR9mL1zsIqjaTk/P27gKrnqE5WMv9OLcFqbt4Y31YlYD z7iYPxdO1ZLfpL4eDfVofzhc4cP1/3gUAs7H84zMwv/hXKvKKNQPw9bhYrXvl9PD CI5QErIe2JSgpPkJonZz2PXx27ml+TmkvuqzwNKbKAXaeQVquwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr0SXFHjjwdXwpaXTZBui6LfYosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGUwMThkMGUtOTFkNS0z N2E4LWE4OTQtOTIyNzljYjIyMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3Nnh99GlFEb/VMy5j/na31X5+b0zBieOudePovQh0EA+Wx59s4xMhW dsHMBpkB8ZNoMvCxW2g10fg1n8+e2FecoxJutpyTWy7KXtTTNPzQzuzh5QsF3goB pxoRWtDDIAdf5Y+O5IiP3vDm+2XQ+kvMILyn1ClvdTBJ0boPtppaxWRcn44db3vB nmRYgv5WF4Locqlsg4Pg8AknKuVYpA0SciNDwGk2a5v2ZbkyAAY0746PQce7GKdo FaNc8051HsRDlTE1Y4MtbPNlnQH78bYOqI1XQdnAjpEsMJM9WZrCqMC2Stfky5tb oMxoqstbm/HkzXG/mT64wXhe/fOgmBE= -----END CERTIFICATE-----Generated at Sat Jun 7 04:02:21 2025 by rpki-client