$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa File: 1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa (raw, json) Hash identifier: AExY6SYTT4+6uVa9DTKcbd4cUT5eIEUVqEWx4Vh1qtU= Subject key identifier: 4D:31:59:3F:85:89:9E:89:EB:47:BA:DF:16:05:C3:42:59:DE:32:95 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584919418A40B4F1148F731E7A80 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 22765 IP address blocks: 72.20.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:8a:40:b4:f1:14:8f:73:1e:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=4be5b1c1-4e4a-414b-810d-51005dde1f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:94:2a:70:da:b7:6f:ba:d4:8b:15:3d:4b:4d: 7f:8c:0a:b1:14:25:93:72:71:b6:3d:b3:99:32:30: a9:80:4a:a3:0d:05:7c:bf:59:47:c8:d7:c3:e4:e9: 48:8f:3f:af:37:0d:88:1c:d8:10:28:c3:81:d6:fa: 05:98:49:10:00:74:ec:1c:4c:a6:05:85:fb:5f:ca: 80:2e:a5:1d:15:32:c0:d6:2e:54:9c:c0:17:04:6d: d5:8a:57:24:91:6f:77:0e:c8:a5:df:87:20:99:c6: 85:ff:b0:31:d4:40:43:98:89:2d:85:6e:5d:3d:e9: c4:f0:87:db:87:00:a6:3a:8e:45:8c:fe:20:50:cf: a7:86:aa:df:16:85:40:90:2b:b7:8a:69:32:54:78: a2:a5:9b:60:e0:e9:7c:11:d8:82:39:9e:23:8b:29: 82:4d:96:f1:b3:de:64:89:9f:bb:50:eb:e1:29:43: 4b:8b:93:97:d0:6e:a6:cd:a6:de:a8:36:db:58:97: 1d:e6:07:ff:65:24:48:62:73:e9:9c:48:44:02:af: e8:86:4f:72:8e:0e:2f:c7:c2:2b:be:49:7e:65:2f: b8:a0:b7:f0:f8:d2:d4:71:e7:2f:fb:ed:c0:90:d2: 77:43:c6:b8:5f:de:54:2f:c7:b2:cf:a6:e7:c2:a2: d9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:31:59:3F:85:89:9E:89:EB:47:BA:DF:16:05:C3:42:59:DE:32:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:dd:8a:7a:6f:d2:39:95:e6:a2:e3:0e:a1:99:44:49:ef:bf: 19:30:25:f2:7f:fc:c6:d8:39:45:b3:4f:15:71:8d:5f:c3:ad: 8a:e6:6a:32:66:6e:64:83:02:64:7f:7f:b0:79:a1:dc:df:46: 1b:b6:73:a0:bc:1e:c9:3c:06:fa:f3:94:51:1e:26:eb:0c:e4: c5:a1:c5:48:04:48:04:42:8c:69:bb:08:48:4d:21:80:9b:41: ab:28:b4:b9:c3:4b:71:98:bf:61:3f:89:01:5b:59:28:24:1f: af:bf:37:53:92:9e:2d:60:65:b2:75:3a:17:3f:dc:e5:0b:1d: 14:e0:de:2a:cf:5a:6a:11:db:28:59:39:71:86:76:63:38:8b: df:7e:e4:b4:a1:20:bb:e7:24:df:b5:2c:2a:bf:53:b5:97:49: 0b:5a:41:96:c7:bf:5b:a7:1d:18:4b:2f:3a:8e:a9:18:78:e7: d4:78:9b:2f:d7:4b:98:f0:b6:db:9d:2e:21:82:6c:46:ac:29: 9d:27:b2:51:26:cb:3e:a3:79:13:c0:6f:c1:5e:08:2b:39:14: e9:4a:b9:00:52:9e:96:65:2d:b1:72:2c:8a:f9:d9:59:20:1e: fd:ff:e2:ae:4a:d3:2c:2e:42:90:8d:c5:74:11:2b:c2:6d:0f: f4:fa:19:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQYpAtPEUj3MeeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NGJlNWIxYzEtNGU0YS00MTRiLTgxMGQtNTEwMDVkZGUxZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJQqcNq3b7rUixU9S01/jAqxFCWTcnG2PbOZ MjCpgEqjDQV8v1lHyNfD5OlIjz+vNw2IHNgQKMOB1voFmEkQAHTsHEymBYX7X8qA LqUdFTLA1i5UnMAXBG3VilckkW93Dsil34cgmcaF/7Ax1EBDmIkthW5dPenE8Ifb hwCmOo5FjP4gUM+nhqrfFoVAkCu3imkyVHiipZtg4Ol8EdiCOZ4jiymCTZbxs95k iZ+7UOvhKUNLi5OX0G6mzabeqDbbWJcd5gf/ZSRIYnPpnEhEAq/ohk9yjg4vx8Ir vkl+ZS+4oLfw+NLUcecv++3AkNJ3Q8a4X95UL8eyz6bnwqLZhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0xWT+FiZ6J60e63xYFw0JZ3jKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMWIzNTY0Y2YtZGI5Zi0z Y2Y1LWFiMTYtOTMzNDVkZjg5YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfdinpv0jmV5qLjDqGZREnvvxkwJfJ//MbYOUWzTxVxjV/DrYrmajJm bmSDAmR/f7B5odzfRhu2c6C8Hsk8BvrzlFEeJusM5MWhxUgESARCjGm7CEhNIYCb QasotLnDS3GYv2E/iQFbWSgkH6+/N1OSni1gZbJ1Ohc/3OULHRTg3irPWmoR2yhZ OXGGdmM4i99+5LShILvnJN+1LCq/U7WXSQtaQZbHv1unHRhLLzqOqRh459R4my/X S5jwttudLiGCbEasKZ0nslEmyz6jeRPAb8FeCCs5FOlKuQBSnpZlLbFyLIr52Vkg Hv3/4q5K0ywuQpCNxXQRK8JtD/T6GS4= -----END CERTIFICATE-----Generated at Tue Apr 15 04:59:30 2025 by rpki-client