$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa File: 6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa (raw, json) Hash identifier: X7ttCloQw/NfmGuwC+CsQ/WtH/+5XQmJqTc3Tdb9MWo= Subject key identifier: D8:5B:90:79:4C:73:E7:D9:C2:F9:BF:CF:22:22:1C:F3:02:68:9B:19 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584919418A259B5779E980D34B00 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 22765 IP address blocks: 72.20.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:8a:25:9b:57:79:e9:80:d3:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=2efe484d-a89b-4e09-859a-c73ca1c1aab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fa:66:47:3d:75:3e:e4:76:9b:b5:ef:57:97: 3a:aa:f8:95:65:8c:9e:b6:a3:85:33:31:39:43:3b: 02:a4:31:0d:53:a2:9f:1f:d8:e1:e2:ba:20:57:36: 54:6f:c2:40:db:c3:cf:28:e6:90:16:1b:78:f9:46: db:05:a9:0c:a1:ef:a7:8b:bf:34:31:e7:19:89:44: bd:e9:1a:4a:85:57:82:b2:ed:3d:27:f3:52:d0:48: 3e:75:96:e8:ee:3a:ae:53:c8:53:d5:d7:b7:ce:06: dc:a4:ff:9e:ff:0d:a2:cf:b7:1b:24:9b:20:f8:13: 2f:21:42:3d:94:82:73:27:b9:89:9e:b5:69:a0:c7: 8f:bb:70:2c:ae:ce:be:cf:32:9e:73:be:24:d8:02: 04:26:62:09:b9:e1:a9:71:46:52:91:d5:64:21:5e: 17:0c:93:cc:ff:eb:33:12:00:00:76:53:69:82:dc: 8d:57:3e:70:f5:6e:05:6b:41:ad:0c:ab:ea:47:9d: fe:5d:02:51:eb:53:e8:3a:c4:b9:39:f0:8b:9f:97: 9a:16:90:12:71:81:14:1f:b9:f2:7c:a6:c4:fd:12: 35:5f:eb:8e:65:0e:1f:6b:6f:ed:11:2c:28:ad:72: 13:8b:93:4a:fe:01:1e:13:eb:3b:85:65:39:42:d6: 5e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5B:90:79:4C:73:E7:D9:C2:F9:BF:CF:22:22:1C:F3:02:68:9B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:04:c6:63:53:d6:57:e4:3f:4b:de:d3:67:a4:44:f3:ff:06: 5f:33:a8:0e:13:fc:4f:11:2d:5e:95:19:8c:50:3b:6c:90:7c: 54:21:c6:b4:64:59:ad:fa:89:89:9e:c6:f8:4e:a8:43:ef:84: a3:26:b3:0f:36:b6:48:95:87:61:5e:36:a9:1c:44:f4:7f:4d: 7b:c9:0c:38:8e:db:9a:48:05:6d:8e:d4:8d:54:63:d4:7e:e5: b1:af:ab:0b:f3:e4:19:32:dd:f9:79:83:f1:35:78:be:6b:7a: 1f:e9:92:86:f5:40:01:8c:ef:35:b6:34:01:00:3d:49:59:cd: 1a:9b:37:b5:d0:d8:96:28:16:3f:f7:39:e4:d7:82:ae:ed:98: 7a:72:ec:6b:c9:d9:bb:9b:af:cf:fa:cd:71:12:27:86:a3:69: 94:f9:c9:80:c9:c0:f8:be:bf:1a:00:4f:49:b9:89:8a:db:e0: 1e:93:49:2e:6a:5e:12:f8:ba:c6:7b:36:a3:04:7e:29:47:07: f8:d2:a5:30:5a:89:e8:97:1c:50:f0:f1:bc:8c:25:ad:c5:e1: c3:c8:e4:ee:d5:c2:5c:58:1e:f1:22:cd:47:f5:b8:a9:19:d9: 44:9c:65:91:28:d0:43:3b:d6:7c:5d:7e:ff:95:fb:9f:85:a5: 36:be:b8:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQYolm1d56YDTSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk MmVmZTQ4NGQtYTg5Yi00ZTA5LTg1OWEtYzczY2ExYzFhYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPpmRz11PuR2m7XvV5c6qviVZYyetqOFMzE5 QzsCpDENU6KfH9jh4rogVzZUb8JA28PPKOaQFht4+UbbBakMoe+ni780MecZiUS9 6RpKhVeCsu09J/NS0Eg+dZbo7jquU8hT1de3zgbcpP+e/w2iz7cbJJsg+BMvIUI9 lIJzJ7mJnrVpoMePu3Asrs6+zzKec74k2AIEJmIJueGpcUZSkdVkIV4XDJPM/+sz EgAAdlNpgtyNVz5w9W4Fa0GtDKvqR53+XQJR61PoOsS5OfCLn5eaFpAScYEUH7ny fKbE/RI1X+uOZQ4fa2/tESworXITi5NK/gEeE+s7hWU5QtZezQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhbkHlMc+fZwvm/zyIiHPMCaJsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvNmMzNzJlOTMtYzY3Yi0z ZTFlLWE2ZjUtYTY4NTA0YzRmNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBTKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQExmNT1lfkP0ve02ekRPP/Bl8zqA4T/E8RLV6VGYxQO2yQfFQhxrRk Wa36iYmexvhOqEPvhKMmsw82tkiVh2FeNqkcRPR/TXvJDDiO25pIBW2O1I1UY9R+ 5bGvqwvz5Bky3fl5g/E1eL5reh/pkob1QAGM7zW2NAEAPUlZzRqbN7XQ2JYoFj/3 OeTXgq7tmHpy7GvJ2bubr8/6zXESJ4ajaZT5yYDJwPi+vxoAT0m5iYrb4B6TSS5q XhL4usZ7NqMEfilHB/jSpTBaieiXHFDw8byMJa3F4cPI5O7VwlxYHvEizUf1uKkZ 2UScZZEo0EM71nxdfv+V+5+FpTa+uJE= -----END CERTIFICATE-----Generated at Fri Apr 11 21:33:21 2025 by rpki-client