$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa File: a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa (raw, json) Hash identifier: JwUa0BKHWQAH20xxGJc8gHJfb9HCgGnyP65vo72n7MY= Subject key identifier: 69:6D:75:76:A6:75:D3:64:43:5B:BD:30:09:1C:7A:52:C0:F5:ED:57 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F43285849287E52BD5D2AE86C9202B4F2 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 396085 IP address blocks: 72.249.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:52:bd:5d:2a:e8:6c:92:02:b4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=af095c97-6214-4093-bd7b-65d1d2a7f927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b1:d6:cc:fe:0a:f4:d0:f0:72:f5:44:7a:70: 65:63:c6:ef:10:5e:f0:91:61:de:98:19:b4:ef:6a: a5:cd:f1:14:7d:20:80:b4:e1:41:0b:fa:73:25:89: bc:62:52:b9:5e:77:00:02:bd:28:69:5b:30:12:ba: 1c:30:b4:b3:31:77:2a:b7:56:05:7a:3b:5f:6a:09: 73:51:67:c5:bf:ac:85:d8:0e:51:50:d8:43:7c:22: f2:92:30:56:a7:a5:d0:b0:5d:e9:f2:83:7a:0e:85: d2:ab:91:1a:81:6f:65:19:7e:43:e6:0e:90:49:0c: 41:9d:97:8c:74:e6:78:08:60:72:e5:8b:a1:65:4c: cd:dc:70:bf:d4:60:84:1e:f9:60:fa:d7:ef:89:cd: 47:b2:dd:86:8f:9b:90:af:1c:b9:91:ed:6d:5c:aa: 73:98:0c:fe:11:09:5b:78:32:7f:cd:75:2f:f7:21: 5a:8e:80:81:64:de:25:17:68:09:f3:32:ec:0b:45: 3c:27:60:28:67:90:5d:d3:8a:45:7c:35:b3:68:9b: 19:2f:f0:c5:b3:f4:00:29:66:c6:2d:e9:49:3e:90: 20:cd:46:ef:1a:09:95:f9:13:c7:d7:38:46:df:15: 06:13:cb:ca:6b:72:ba:67:a4:5f:50:c7:bf:74:a1: 8d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6D:75:76:A6:75:D3:64:43:5B:BD:30:09:1C:7A:52:C0:F5:ED:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 72.249.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9b:1b:fc:7b:b2:67:4b:0a:bd:c5:85:00:fd:81:80:a5:16: 20:a1:60:b7:ad:b4:d8:d2:a8:97:6e:bb:b1:de:1d:6e:97:cb: e4:c7:8f:1a:b5:da:cd:71:f8:39:73:be:b2:d1:75:92:4c:38: fb:de:be:e0:04:d5:00:b2:47:2a:0a:05:42:d9:2f:cb:1d:e1: 56:ae:c4:c9:97:39:d8:20:d9:ec:36:9c:a7:97:87:55:0f:09: 77:4f:44:dd:40:90:55:82:59:97:20:fc:75:34:94:1a:48:ec: 30:ce:00:e7:44:a0:5a:59:4a:09:bc:ea:04:ff:0d:1a:30:6a: 75:8d:b7:9c:5b:04:7c:71:f4:81:1b:7d:fc:e3:43:08:11:c0: 27:96:07:2a:03:9e:42:4c:7e:e8:6c:3d:ce:dc:6f:93:be:ba: c6:b6:d5:56:12:1c:8e:42:18:95:5f:9f:83:2c:25:aa:b6:e8: 66:2c:86:bb:a5:b5:e3:8e:e3:55:cb:0c:c0:d1:f4:29:ff:a1: f9:52:4b:f5:d1:66:98:bc:ff:2c:f4:39:b1:ec:71:e5:d5:dc: 86:39:de:1a:45:c9:d6:be:d2:bf:b1:8b:c8:d9:c0:32:0a:8c: fd:f6:6f:3f:dd:09:8b:ca:01:a1:1b:85:54:ff:ce:64:78:fe: cd:ae:9b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkoflK9XSrobJICtPIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk YWYwOTVjOTctNjIxNC00MDkzLWJkN2ItNjVkMWQyYTdmOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbHWzP4K9NDwcvVEenBlY8bvEF7wkWHemBm0 72qlzfEUfSCAtOFBC/pzJYm8YlK5XncAAr0oaVswErocMLSzMXcqt1YFejtfaglz UWfFv6yF2A5RUNhDfCLykjBWp6XQsF3p8oN6DoXSq5EagW9lGX5D5g6QSQxBnZeM dOZ4CGBy5YuhZUzN3HC/1GCEHvlg+tfvic1Hst2Gj5uQrxy5ke1tXKpzmAz+EQlb eDJ/zXUv9yFajoCBZN4lF2gJ8zLsC0U8J2AoZ5Bd04pFfDWzaJsZL/DFs/QAKWbG LelJPpAgzUbvGgmV+RPH1zhG3xUGE8vKa3K6Z6RfUMe/dKGNTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGltdXamddNkQ1u9MAkcelLA9e1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTcwODFjZTYtZDBhNS0z OThhLTkwZTQtMmJmNGRmMGQ4NWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFObG/x7smdLCr3FhQD9gYClFiChYLettNjSqJduu7HeHW6Xy+THjxq1 2s1x+DlzvrLRdZJMOPvevuAE1QCyRyoKBULZL8sd4VauxMmXOdgg2ew2nKeXh1UP CXdPRN1AkFWCWZcg/HU0lBpI7DDOAOdEoFpZSgm86gT/DRowanWNt5xbBHxx9IEb ffzjQwgRwCeWByoDnkJMfuhsPc7cb5O+usa21VYSHI5CGJVfn4MsJaq26GYshrul teOO41XLDMDR9Cn/oflSS/XRZpi8/yz0ObHsceXV3IY53hpFyda+0r+xi8jZwDIK jP32bz/dCYvKAaEbhVT/zmR4/s2um0s= -----END CERTIFICATE-----Generated at Sun Apr 6 09:43:29 2025 by rpki-client