$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/fc7437a2-442a-31c1-9f06-b2c943af5caf.roa File: fc7437a2-442a-31c1-9f06-b2c943af5caf.roa (raw, json) Hash identifier: QrgASgEN0GG6deAzl5gp2jGQVXW1a0LWOrCe6OosJxA= Subject key identifier: 11:49:6C:3F:97:0B:13:CE:B7:7A:A3:20:07:6F:75:E2:24:FD:3A:DF Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Certificate serial: 010D0C9F4328584902EC17D2AD7AF288D1E03940 Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/fc7437a2-442a-31c1-9f06-b2c943af5caf.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 395425 IP address blocks: 72.42.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:17:d2:ad:7a:f2:88:d1:e0:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=0266986d-d439-4c0e-a91a-a7b0ba2cf4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e3:64:e4:c4:9e:ef:8c:5d:eb:cf:4b:4f:a1: 38:f9:95:75:d4:a0:77:05:de:af:a7:b3:2c:ec:d0: f0:3c:b0:86:d4:3e:b8:52:33:e9:4c:bc:d4:86:52: 4a:94:44:19:02:b7:a8:d7:15:79:76:c5:60:e1:0a: 71:18:71:02:4c:ac:d2:50:a4:1e:d6:8d:c2:e8:57: d5:a2:13:46:aa:e8:c1:42:c9:03:f7:30:6e:57:20: be:47:a0:b6:04:84:fd:f6:02:15:45:5c:74:8d:d0: 56:f5:ed:f9:79:52:eb:32:78:8e:e4:12:d7:5a:a3: d1:ce:11:87:75:80:13:36:fc:1a:8f:43:f7:36:ea: 5c:1c:76:d9:1f:49:e8:e2:2f:ba:a8:8c:15:be:33: eb:2a:e4:83:b4:68:a3:60:89:23:4f:a3:26:09:74: 51:11:ab:4a:be:93:53:6d:76:96:b3:cc:73:14:9e: 85:95:79:06:2c:98:1b:6d:14:35:7f:f8:38:3a:65: b8:cc:d0:a3:db:97:e5:06:90:a2:ba:9b:f1:b9:63: 89:41:97:86:9e:a9:f6:43:4e:8b:c8:d4:49:7b:1e: c1:4c:87:4e:d6:cb:48:a5:ef:c3:ee:4a:d2:e4:44: f4:76:fd:ae:cd:76:c5:6c:b3:fb:7a:21:5f:70:f7: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:49:6C:3F:97:0B:13:CE:B7:7A:A3:20:07:6F:75:E2:24:FD:3A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/fc7437a2-442a-31c1-9f06-b2c943af5caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl X509v3 Authority Key Identifier: keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer sbgp-ipAddrBlock: critical IPv4: 72.42.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:31:93:2e:be:e2:0d:e2:f9:53:1e:69:86:20:25:b5:f5:f3: 11:6c:f6:bd:cc:be:5e:24:6f:79:d2:a0:7d:9e:e6:19:0d:63: 2f:13:23:93:45:50:59:00:34:0d:2b:70:2a:c4:9e:60:20:f8: e7:dd:6f:77:f1:82:b7:3c:8a:c8:55:c1:1b:16:33:76:18:b2: 7e:14:11:18:f7:dd:70:ec:54:bf:cc:08:2e:12:66:d9:8b:46: df:99:95:02:fd:9d:c4:3e:15:f2:8a:e0:d8:c2:5e:6a:79:11: 82:51:49:95:32:57:7d:d5:98:58:08:59:2e:8d:f2:03:98:dc: 39:ed:f2:7e:1e:5d:79:7c:32:56:94:83:fb:f3:b3:26:84:04: 2d:e9:a0:cc:10:3b:74:6f:f6:fd:8f:83:29:12:08:7e:0c:96: fd:a3:09:4f:e7:b4:14:ad:44:02:49:2f:81:72:58:c5:8e:97: bf:56:33:18:a5:7e:6a:0f:83:a0:18:5d:05:88:74:e5:09:88: d7:c1:b9:8f:56:80:6f:9d:e6:79:f0:cc:ad:01:3b:1f:4e:b5: 56:32:d3:e5:78:ba:92:c7:c9:f4:7d:e9:1d:23:9d:43:3d:07: dd:88:c0:b9:63:87:1b:cb:3f:7e:d3:57:24:1f:b8:34:92:19: 95:5e:ab:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BfSrXryiNHgOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJl OTg0MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MDI2Njk4NmQtZDQzOS00YzBlLWE5MWEtYTdiMGJhMmNmNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuNk5MSe74xd689LT6E4+ZV11KB3Bd6vp7Ms 7NDwPLCG1D64UjPpTLzUhlJKlEQZAreo1xV5dsVg4QpxGHECTKzSUKQe1o3C6FfV ohNGqujBQskD9zBuVyC+R6C2BIT99gIVRVx0jdBW9e35eVLrMniO5BLXWqPRzhGH dYATNvwaj0P3NupcHHbZH0no4i+6qIwVvjPrKuSDtGijYIkjT6MmCXRREatKvpNT bXaWs8xzFJ6FlXkGLJgbbRQ1f/g4OmW4zNCj25flBpCiupvxuWOJQZeGnqn2Q06L yNRJex7BTIdO1stIpe/D7krS5ET0dv2uzXbFbLP7eiFfcPeJowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFJbD+XCxPOt3qjIAdvdeIk/TrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5 N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvZmM3NDM3YTItNDQyYS0z MWMxLTlmMDYtYjJjOTQzYWY1Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWM2OTdjOWQtMzI1YS00NjBmLWFi MmYtOGNmNzFiMWJlOTg0L2VjNjk3YzlkLTMyNWEtNDYwZi1hYjJmLThjZjcxYjFi ZTk4NC5jcmwwHwYDVR0jBBgwFoAUEjvZdTKrj92cHFYpzjLx33slhhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3 MWIxYmU5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCrhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0xky6+4g3i+VMeaYYgJbX18xFs9r3Mvl4kb3nSoH2e5hkNYy8TI5NF UFkANA0rcCrEnmAg+Ofdb3fxgrc8ishVwRsWM3YYsn4UERj33XDsVL/MCC4SZtmL Rt+ZlQL9ncQ+FfKK4NjCXmp5EYJRSZUyV33VmFgIWS6N8gOY3Dnt8n4eXXl8MlaU g/vzsyaEBC3poMwQO3Rv9v2PgykSCH4Mlv2jCU/ntBStRAJJL4FyWMWOl79WMxil fmoPg6AYXQWIdOUJiNfBuY9WgG+d5nnwzK0BOx9OtVYy0+V4upLHyfR96R0jnUM9 B92IwLljhxvLP37TVyQfuDSSGZVeq1c= -----END CERTIFICATE-----Generated at Sun Apr 6 09:35:23 2025 by rpki-client