$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2d4a32ae-9ef6-3b6c-bab6-bdd7b44e1654.roa File: 2d4a32ae-9ef6-3b6c-bab6-bdd7b44e1654.roa (raw, json) Hash identifier: 327CGlUSF1iAkVnRZtx4NmsMmDoLu+jGcuwQYR/Rs3Q= Subject key identifier: B7:E1:9C:C8:51:DD:F6:0D:E6:A1:4F:44:34:5A:71:9C:1E:1A:9A:89 Certificate issuer: /CN=e699b02b-ca04-4557-94f4-189989d49ccd Certificate serial: 010D0C9F4328584930DE71930C218BE852EB6574 Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2d4a32ae-9ef6-3b6c-bab6-bdd7b44e1654.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 8075 IP address blocks: 72.18.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:71:93:0c:21:8b:e8:52:eb:65:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=4b7c04cd-476f-438c-91a9-7298aaa6f8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:51:e2:9b:4e:da:4c:94:03:4f:cc:ec:3c:3f: 8d:97:4c:92:55:63:1e:32:bf:c5:4f:75:ff:52:5e: bc:44:62:db:4a:47:a8:4d:8e:75:4c:12:8b:68:60: 02:2e:8d:6b:81:80:75:83:ee:1b:79:27:67:64:f2: 3b:71:1d:68:73:40:59:17:fb:8b:87:8e:77:fb:cc: e9:0f:e6:8f:80:ef:35:69:1f:5b:a9:af:ba:39:0e: 80:6c:14:6a:55:15:8b:92:9e:af:27:41:52:c6:ab: 13:ac:5c:73:af:eb:2d:06:8f:3a:db:95:4f:54:7a: 36:a0:b8:5c:c1:96:d3:e3:45:cf:f3:a1:e3:0a:cb: bb:8c:a0:5d:87:3d:57:d7:36:39:15:78:f6:65:f1: 2d:10:78:ad:24:23:27:34:3e:06:7a:eb:6d:48:00: d3:0c:04:5c:13:9e:38:9d:4f:2a:26:36:b3:b1:5c: e7:5a:c2:ba:a2:41:ac:a4:90:71:5e:16:c0:72:f6: a5:3e:60:e2:98:6d:31:b1:52:df:5f:e5:9f:0a:bd: 33:0e:6c:75:13:8b:2b:2d:ec:9b:ea:8b:9f:25:12: 82:b6:06:ae:99:03:b3:d7:fa:f8:75:f5:c4:32:39: a6:08:43:04:38:48:bf:c8:0d:67:c2:cb:0e:90:16: 96:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E1:9C:C8:51:DD:F6:0D:E6:A1:4F:44:34:5A:71:9C:1E:1A:9A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2d4a32ae-9ef6-3b6c-bab6-bdd7b44e1654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl X509v3 Authority Key Identifier: keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer sbgp-ipAddrBlock: critical IPv4: 72.18.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:91:b2:14:7b:75:17:40:19:dd:8f:38:ef:f0:a2:2a:9b:ad: fa:b2:78:0b:43:62:6b:4c:ac:b9:8f:88:0a:f3:6a:44:ef:e7: a2:ed:b2:c7:6a:46:fd:ac:e1:f0:52:06:1e:33:bc:1a:a2:71: fe:72:07:52:f4:fb:70:19:66:6b:cf:3d:ee:9e:a0:95:34:db: 65:b5:70:09:25:3f:39:b9:ed:59:34:7d:8d:ae:11:ee:b1:e0: 95:b0:e5:7c:e9:dc:a8:ea:5b:00:6b:0a:40:fb:8a:b8:f3:d7: ca:1e:cf:c5:92:7a:44:8c:30:cf:14:d2:37:b1:b8:af:10:00: 36:72:9d:6f:52:a0:af:42:25:21:92:d5:09:5e:98:7a:d3:1b: b8:a2:9b:a2:db:65:d2:b4:9a:ff:ef:3b:9c:5d:4d:4e:59:b4: 1f:e1:83:ed:60:3c:d3:7f:88:5c:23:b8:ca:61:de:ea:ad:b4: 19:15:89:a8:84:84:9b:55:33:bb:7b:f3:16:77:06:85:c1:b9: 0e:27:34:8f:ab:3b:94:8a:8c:6e:b0:e5:e5:2c:cc:09:49:6a: a2:2a:56:cb:d9:11:35:54:e4:e6:b6:3d:68:5a:93:c8:ef:ce: be:4e:74:8f:96:fd:d3:c6:c6:df:6d:95:ab:84:0a:8d:05:99: 5f:39:c8:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nGTDCGL6FLrZXQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY5OWIwMmItY2EwNC00NTU3LTk0ZjQtMTg5OTg5ZDQ5 Y2NkMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NGI3YzA0Y2QtNDc2Zi00MzhjLTkxYTktNzI5OGFhYTZmOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFHim07aTJQDT8zsPD+Nl0ySVWMeMr/FT3X/ Ul68RGLbSkeoTY51TBKLaGACLo1rgYB1g+4beSdnZPI7cR1oc0BZF/uLh453+8zp D+aPgO81aR9bqa+6OQ6AbBRqVRWLkp6vJ0FSxqsTrFxzr+stBo8625VPVHo2oLhc wZbT40XP86HjCsu7jKBdhz1X1zY5FXj2ZfEtEHitJCMnND4GeuttSADTDARcE544 nU8qJjazsVznWsK6okGspJBxXhbAcvalPmDimG0xsVLfX+WfCr0zDmx1E4srLeyb 6oufJRKCtgaumQOz1/r4dfXEMjmmCEMEOEi/yA1nwssOkBaWZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfhnMhR3fYN5qFPRDRacZweGpqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5 YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5ODlkNDljY2QvMmQ0YTMyYWUtOWVmNi0z YjZjLWJhYjYtYmRkN2I0NGUxNjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTY5OWIwMmItY2EwNC00NTU3LTk0 ZjQtMTg5OTg5ZDQ5Y2NkL2U2OTliMDJiLWNhMDQtNDU1Ny05NGY0LTE4OTk4OWQ0 OWNjZC5jcmwwHwYDVR0jBBgwFoAUXq+Y0QCDzSh9pkhSkMpB2+xuMXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5 ODlkNDljY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBJOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiRshR7dRdAGd2POO/woiqbrfqyeAtDYmtMrLmPiArzakTv56Ltssdq Rv2s4fBSBh4zvBqicf5yB1L0+3AZZmvPPe6eoJU022W1cAklPzm57Vk0fY2uEe6x 4JWw5Xzp3KjqWwBrCkD7irjz18oez8WSekSMMM8U0jexuK8QADZynW9SoK9CJSGS 1QlemHrTG7iim6LbZdK0mv/vO5xdTU5ZtB/hg+1gPNN/iFwjuMph3uqttBkViaiE hJtVM7t78xZ3BoXBuQ4nNI+rO5SKjG6w5eUszAlJaqIqVsvZETVU5Oa2PWhak8jv zr5OdI+W/dPGxt9tlauECo0FmV85yMA= -----END CERTIFICATE-----Generated at Sat Apr 5 04:43:33 2025 by rpki-client