$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/694332a3-7a56-39e6-aeb3-45e55815e400.roa File: 694332a3-7a56-39e6-aeb3-45e55815e400.roa (raw, json) Hash identifier: haUWE2wPBJbqj6+7pzfY+3UREgtZWU94Gdd379UU3nA= Subject key identifier: 46:E2:36:00:54:43:1F:3A:21:C3:31:E2:35:60:09:EF:E8:DF:9C:95 Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Certificate serial: 010D0C9F4328584902EC1841D18B48BE18828400 Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/694332a3-7a56-39e6-aeb3-45e55815e400.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 395425 IP address blocks: 72.42.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:18:41:d1:8b:48:be:18:82:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=3a1c3174-832b-4912-a1cb-c1df4725a03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:88:ce:aa:02:db:cf:b3:b8:60:2d:be:be: bc:d9:ae:75:4d:e7:e8:50:90:bc:d3:86:89:1b:5e: 07:cd:39:4c:81:36:ee:f1:f9:8a:97:63:36:38:a5: f5:43:4c:8c:7d:ce:31:e0:e7:f2:77:41:45:dc:09: ac:2d:5e:85:2b:8f:d5:68:96:56:80:1c:99:83:31: ad:e5:be:95:ec:21:88:0e:a5:cd:6b:c3:d2:d5:af: ca:9d:77:fc:5c:4b:17:d8:69:06:30:35:58:d1:b3: c5:40:50:78:14:67:89:75:01:99:f3:15:4f:63:62: 44:d0:39:68:83:ac:ea:50:1a:3d:64:0a:00:b7:a7: 9e:4b:ef:0b:06:48:23:6b:84:d1:ad:a0:93:18:92: 7a:a3:59:da:31:72:a5:0c:e5:60:9c:13:3d:24:d6: d6:ec:7d:b4:4a:8d:f9:e3:ae:77:ff:8f:a7:c0:a6: fa:4b:bd:2f:c0:ba:10:54:85:e3:d7:f2:02:f1:89: 78:5b:2a:a1:da:13:41:08:a0:72:96:01:96:bc:e8: 5e:dd:d3:33:6f:7d:c6:5a:ab:18:0e:85:81:5d:7a: 04:45:e3:b7:21:b0:1c:21:3a:bf:ee:94:1b:22:65: dd:74:4b:92:09:b7:99:95:10:3b:39:77:26:27:64: b0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E2:36:00:54:43:1F:3A:21:C3:31:E2:35:60:09:EF:E8:DF:9C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/694332a3-7a56-39e6-aeb3-45e55815e400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl X509v3 Authority Key Identifier: keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer sbgp-ipAddrBlock: critical IPv4: 72.42.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:21:6a:43:fe:74:1e:af:14:07:a6:9b:bb:79:00:5e:30:f1: e2:b3:14:51:cd:44:bc:3e:0f:66:cf:64:ae:b7:18:e5:dc:5f: 81:b5:4f:db:ad:6d:0b:e0:04:a9:db:c0:99:d7:5b:14:df:6e: 4c:6e:0d:a3:6f:6e:88:8a:01:d9:bd:db:67:84:87:66:a9:c8: 39:3a:ab:f4:21:39:ca:e2:b2:72:3a:cd:e3:51:1f:b7:ea:e4: b1:af:1f:15:fb:c2:0e:3e:71:06:4e:be:c1:2b:9c:dd:7c:d0: 8b:97:68:6e:51:ff:aa:33:e3:e0:13:7b:4e:47:78:c8:32:12: 97:db:06:dc:27:56:13:6a:cd:8a:70:8d:b8:bb:eb:d0:00:ec: 8e:4d:5c:3f:b4:b0:32:c8:c3:68:ef:23:c4:ab:79:73:84:be: 43:61:20:81:9b:a9:5c:ca:59:5f:d7:af:1c:32:8b:12:54:b0: 7c:7d:3d:81:77:b6:32:d2:5c:2c:e7:67:92:1d:0e:45:87:86: df:9e:3c:3d:ce:bb:00:22:f1:2b:a8:61:8f:5e:ea:f8:40:a0: a7:42:5b:0f:bb:81:0f:98:22:ee:b6:15:02:79:c6:74:45:55: d4:f2:57:08:a3:0c:4b:3e:a6:c3:4d:41:ca:8e:3d:69:50:dc: e6:56:fa:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BhB0YtIvhiChAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJl OTg0MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk M2ExYzMxNzQtODMyYi00OTEyLWExY2ItYzFkZjQ3MjVhMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNaIzqoC28+zuGAtvr682a51TefoUJC804aJ G14HzTlMgTbu8fmKl2M2OKX1Q0yMfc4x4Ofyd0FF3AmsLV6FK4/VaJZWgByZgzGt 5b6V7CGIDqXNa8PS1a/KnXf8XEsX2GkGMDVY0bPFQFB4FGeJdQGZ8xVPY2JE0Dlo g6zqUBo9ZAoAt6eeS+8LBkgja4TRraCTGJJ6o1naMXKlDOVgnBM9JNbW7H20So35 4653/4+nwKb6S70vwLoQVIXj1/IC8Yl4Wyqh2hNBCKBylgGWvOhe3dMzb33GWqsY DoWBXXoEReO3IbAcITq/7pQbImXddEuSCbeZlRA7OXcmJ2SwMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbiNgBUQx86IcMx4jVgCe/o35yVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5 N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvNjk0MzMyYTMtN2E1Ni0z OWU2LWFlYjMtNDVlNTU4MTVlNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWM2OTdjOWQtMzI1YS00NjBmLWFi MmYtOGNmNzFiMWJlOTg0L2VjNjk3YzlkLTMyNWEtNDYwZi1hYjJmLThjZjcxYjFi ZTk4NC5jcmwwHwYDVR0jBBgwFoAUEjvZdTKrj92cHFYpzjLx33slhhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3 MWIxYmU5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCrmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAhakP+dB6vFAemm7t5AF4w8eKzFFHNRLw+D2bPZK63GOXcX4G1T9ut bQvgBKnbwJnXWxTfbkxuDaNvboiKAdm922eEh2apyDk6q/QhOcrisnI6zeNRH7fq 5LGvHxX7wg4+cQZOvsErnN180IuXaG5R/6oz4+ATe05HeMgyEpfbBtwnVhNqzYpw jbi769AA7I5NXD+0sDLIw2jvI8SreXOEvkNhIIGbqVzKWV/XrxwyixJUsHx9PYF3 tjLSXCznZ5IdDkWHht+ePD3OuwAi8SuoYY9e6vhAoKdCWw+7gQ+YIu62FQJ5xnRF VdTyVwijDEs+psNNQcqOPWlQ3OZW+pI= -----END CERTIFICATE-----Generated at Tue Apr 8 23:39:01 2025 by rpki-client