$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/8675f39c-f0b4-325e-bb35-10be8d68c537.roa File: 8675f39c-f0b4-325e-bb35-10be8d68c537.roa (raw, json) Hash identifier: tY7E1NVlDFHqQ1SybaK6ND3bOrIMU7TwXGCW19xsuwQ= Subject key identifier: CD:6D:5F:E7:6C:74:F7:60:9F:3C:4F:8E:09:58:19:FB:6D:54:13:44 Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F43285848B78B8161F3FB48A063EBFB80 Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/8675f39c-f0b4-325e-bb35-10be8d68c537.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 30600 IP address blocks: 72.42.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:81:61:f3:fb:48:a0:63:eb:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=881efaaf-c93d-429f-99e6-1369e75004a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:36:ed:28:d7:b1:df:5d:f2:11:0d:86:8f: d0:97:a5:f4:c1:a4:17:82:4c:eb:0a:fb:f9:77:5d: 69:8b:93:0e:9a:6c:ae:79:4c:83:1e:54:40:5b:60: 1c:9d:e0:4e:9e:d7:fe:4e:8a:06:1d:1a:c3:81:08: a8:8e:88:44:72:ea:f2:61:a9:b9:7e:9a:3b:68:75: 78:bc:a2:8f:8d:74:37:03:d5:d9:d0:4f:a4:80:67: 0e:78:ee:fb:47:08:9e:3a:db:24:2d:8c:a9:72:57: cf:42:48:b9:7e:17:64:08:82:ca:63:86:c5:a7:99: 1b:eb:4b:cf:57:d0:ef:8e:bc:f2:d8:8b:a0:b9:e2: 47:7e:79:54:c6:30:22:75:a3:da:d8:f8:e9:90:ff: 74:c4:d5:ae:78:c7:65:06:b4:18:45:a9:22:34:4f: 2d:ca:5a:e4:ff:05:34:66:fc:c9:45:67:66:8e:25: 1a:08:c0:ac:14:17:6c:f9:57:e2:6d:a0:d7:23:d9: 52:0b:d9:fe:02:27:41:b6:ea:0d:c1:c9:04:53:26: 02:ef:63:59:b0:d6:da:2f:f8:6a:cc:7b:73:93:61: 38:ae:35:4d:8b:41:ce:98:2d:c9:d1:ea:46:9c:12: 6e:1a:f3:e7:86:2c:c9:34:07:28:f1:cb:d4:87:07: ed:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6D:5F:E7:6C:74:F7:60:9F:3C:4F:8E:09:58:19:FB:6D:54:13:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/8675f39c-f0b4-325e-bb35-10be8d68c537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: 72.42.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:42:77:13:05:77:13:3a:b0:9c:99:50:5c:ec:9f:4c:82:22: 38:cb:36:6c:aa:5f:d2:60:8a:e3:1a:eb:7a:76:f6:b6:0f:d7: 67:4b:ed:97:43:04:16:01:1c:87:6c:ab:66:df:4d:01:88:27: 66:eb:29:66:29:bb:7a:33:0e:f4:ef:99:57:c5:ad:30:e9:90: 39:6b:48:00:53:36:fe:05:10:19:9d:e0:17:2f:9c:5e:a6:e7: ab:fd:50:54:dc:d4:34:b2:a6:5b:db:77:91:aa:ba:6c:5c:3f: 3e:fa:89:97:04:b7:04:09:56:91:07:7d:94:0d:87:81:7e:1e: 8f:d4:1b:8e:55:5f:84:6a:3d:65:ae:1f:fa:a7:ee:90:60:9a: 79:8f:63:da:1e:9b:3e:b6:a9:1e:67:1e:90:2e:ca:88:df:af: 5d:fe:71:f8:82:d1:0f:6e:ad:9f:88:fd:63:38:4d:b5:22:1f: 29:ab:ba:ef:2d:54:04:68:69:7e:73:b0:e9:0f:31:92:3f:0b: 93:3c:83:cd:75:0b:6e:83:1f:42:b9:83:11:42:f4:44:1d:1d: 4a:ef:ec:c9:8f:bc:e7:d6:c8:d7:fd:ec:ef:29:ad:81:73:3e: 16:2b:5e:e1:1c:6a:f9:aa:5c:a7:3b:f2:e1:a3:43:a1:d5:95: 98:12:8c:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4Fh8/tIoGPr+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk ODgxZWZhYWYtYzkzZC00MjlmLTk5ZTYtMTM2OWU3NTAwNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9827SjXsd9d8hENho/Ql6X0waQXgkzrCvv5 d11pi5MOmmyueUyDHlRAW2AcneBOntf+TooGHRrDgQiojohEcuryYam5fpo7aHV4 vKKPjXQ3A9XZ0E+kgGcOeO77RwieOtskLYypclfPQki5fhdkCILKY4bFp5kb60vP V9Dvjrzy2IugueJHfnlUxjAidaPa2PjpkP90xNWueMdlBrQYRakiNE8tylrk/wU0 ZvzJRWdmjiUaCMCsFBds+VfibaDXI9lSC9n+AidBtuoNwckEUyYC72NZsNbaL/hq zHtzk2E4rjVNi0HOmC3J0epGnBJuGvPnhizJNAco8cvUhwft+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1tX+dsdPdgnzxPjglYGfttVBNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvODY3NWYzOWMtZjBiNC0z MjVlLWJiMzUtMTBiZThkNjhjNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlCdxMFdxM6sJyZUFzsn0yCIjjLNmyqX9JgiuMa63p29rYP12dL7ZdD BBYBHIdsq2bfTQGIJ2brKWYpu3ozDvTvmVfFrTDpkDlrSABTNv4FEBmd4BcvnF6m 56v9UFTc1DSyplvbd5GqumxcPz76iZcEtwQJVpEHfZQNh4F+Ho/UG45VX4RqPWWu H/qn7pBgmnmPY9oemz62qR5nHpAuyojfr13+cfiC0Q9urZ+I/WM4TbUiHymruu8t VARoaX5zsOkPMZI/C5M8g811C26DH0K5gxFC9EQdHUrv7MmPvOfWyNf97O8prYFz PhYrXuEcavmqXKc78uGjQ6HVlZgSjEw= -----END CERTIFICATE-----Generated at Sat Apr 5 05:22:22 2025 by rpki-client