$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/15f24b66-dbb0-3253-9695-b4bada323f5a.roa File: 15f24b66-dbb0-3253-9695-b4bada323f5a.roa (raw, json) Hash identifier: r7n7cjQBRkaHyHM2luNKEgAbyP0wrRwV/M6xXoB1FT8= Subject key identifier: 90:85:FA:5F:32:36:C6:1B:91:E5:8E:0A:EE:C3:13:4E:E2:86:D6:39 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584908817926F50318C5D25FF400 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/15f24b66-dbb0-3253-9695-b4bada323f5a.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 11693 IP address blocks: 72.15.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:79:26:f5:03:18:c5:d2:5f:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=b62ff03f-29a1-4286-a629-476eeafefec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:12:e2:8c:1e:8d:68:af:9c:47:ef:13:a3: 77:4f:58:68:03:29:fc:26:5f:57:43:ba:03:ce:20: 20:94:0d:62:a6:34:d9:4a:31:4b:59:1d:3b:89:5c: 98:c1:99:c7:14:7a:5f:b4:11:c5:7a:db:ff:e2:b8: c3:4a:a7:3f:cc:1b:fb:dc:09:90:d9:af:fa:43:1a: 01:5d:2a:00:99:43:c3:89:c4:55:85:24:dc:be:09: 48:e8:8b:67:e2:3e:8d:7d:a4:c5:82:8e:fd:88:0c: ae:f7:d6:15:51:c3:d9:28:05:e4:b6:98:91:11:5a: 0a:0a:c6:54:14:4b:6e:fb:37:00:88:10:3e:73:77: cf:df:7c:03:10:24:86:be:d2:da:8c:50:3e:a6:f7: 99:1b:19:2d:7c:55:d4:49:96:66:b2:5c:df:2e:f2: db:e3:e4:4a:ba:29:cc:cd:bb:0a:b0:e1:f7:a0:4f: a4:b4:f4:9f:cc:c5:bf:64:b6:ee:d8:0a:3b:f7:ee: c1:03:84:cb:d3:3f:69:fc:ea:02:0b:a8:3a:d7:c8: af:b8:5c:1a:e6:c5:41:5c:47:ef:e3:3b:06:11:d2: be:49:f9:59:57:a8:74:3f:12:90:94:ea:98:a1:7b: ba:f3:c2:2c:5a:a5:27:26:3d:9c:31:a1:a0:b7:15: 9d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:85:FA:5F:32:36:C6:1B:91:E5:8E:0A:EE:C3:13:4E:E2:86:D6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/15f24b66-dbb0-3253-9695-b4bada323f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 72.15.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:30:9d:da:38:be:86:26:d0:41:c8:24:3f:af:b9:8e:66:0c: c4:01:c6:74:61:6f:f5:67:92:a5:c7:85:53:d8:28:99:18:f4: 15:e8:d7:a2:95:90:b7:8e:e7:54:44:70:77:7b:ae:b2:89:4b: d7:4d:23:42:01:dc:7b:b3:b0:31:5d:9c:f5:4b:bd:59:01:33: 7f:41:eb:9a:35:4f:aa:92:56:7a:6d:10:c2:e2:cb:0a:b0:63: 93:1a:21:ab:d8:52:82:8e:3d:20:77:1c:b6:96:85:d2:24:2b: 2d:c4:72:99:0c:0d:c1:64:f8:ca:4e:48:3e:25:50:0c:d6:b6: 05:62:a9:5a:9b:ac:83:a1:87:7d:29:e4:32:32:22:24:28:08: b2:46:1d:cf:83:3b:67:eb:26:f0:5a:c2:5e:15:33:33:74:0c: 23:38:47:b6:70:5f:6a:60:7a:2e:60:2b:c3:eb:19:14:dc:4a: 0d:b4:5c:8b:d3:78:c1:14:73:82:b7:2d:b4:c2:d2:ce:02:74: 85:19:10:ea:4a:4a:73:a0:b9:91:cc:bd:20:3c:41:e6:3a:3b: 56:c2:a4:37:0e:e5:67:4e:46:6b:d2:c9:59:0b:6d:5f:5a:97: b9:4a:86:cf:a5:1b:2b:0e:d4:35:fb:8b:e3:f5:0a:19:98:2a: 32:fd:93:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXkm9QMYxdJf9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YjYyZmYwM2YtMjlhMS00Mjg2LWE2MjktNDc2ZWVhZmVmZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwsS4owejWivnEfvE6N3T1hoAyn8Jl9XQ7oD ziAglA1ipjTZSjFLWR07iVyYwZnHFHpftBHFetv/4rjDSqc/zBv73AmQ2a/6QxoB XSoAmUPDicRVhSTcvglI6Itn4j6NfaTFgo79iAyu99YVUcPZKAXktpiREVoKCsZU FEtu+zcAiBA+c3fP33wDECSGvtLajFA+pveZGxktfFXUSZZmslzfLvLb4+RKuinM zbsKsOH3oE+ktPSfzMW/ZLbu2Ao79+7BA4TL0z9p/OoCC6g618ivuFwa5sVBXEfv 4zsGEdK+SflZV6h0PxKQlOqYoXu688IsWqUnJj2cMaGgtxWdXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCF+l8yNsYbkeWOCu7DE07ihtY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMTVmMjRiNjYtZGJiMC0z MjUzLTk2OTUtYjRiYWRhMzIzZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYwndo4voYm0EHIJD+vuY5mDMQBxnRhb/VnkqXHhVPYKJkY9BXo16KV kLeO51REcHd7rrKJS9dNI0IB3HuzsDFdnPVLvVkBM39B65o1T6qSVnptEMLiywqw Y5MaIavYUoKOPSB3HLaWhdIkKy3EcpkMDcFk+MpOSD4lUAzWtgViqVqbrIOhh30p 5DIyIiQoCLJGHc+DO2frJvBawl4VMzN0DCM4R7ZwX2pgei5gK8PrGRTcSg20XIvT eMEUc4K3LbTC0s4CdIUZEOpKSnOguZHMvSA8QeY6O1bCpDcO5WdORmvSyVkLbV9a l7lKhs+lGysO1DX7i+P1ChmYKjL9k4o= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:28 2025 by rpki-client