$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a7078f8-48e1-3134-bd8c-f38486949922.roa File: 5a7078f8-48e1-3134-bd8c-f38486949922.roa (raw, json) Hash identifier: siuphB5ZcM/us5Qd5qkdvlGVkGI78HoktbUsBUQsBXg= Subject key identifier: 71:D6:D2:8F:95:C2:5D:9F:13:47:C3:71:30:0F:3C:05:A5:D6:5F:0A Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848E2D1C4EAAA686589C589BC80 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a7078f8-48e1-3134-bd8c-f38486949922.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 11427 IP address blocks: 72.133.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:c4:ea:aa:68:65:89:c5:89:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=fed170a2-23f9-4fa0-bf7e-97ed830483c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:c2:cc:8a:0f:d3:72:4d:db:c1:bc:38:ed: f4:40:56:d5:7c:3b:61:75:e5:6a:3f:e8:31:f3:80: 6c:5e:a6:11:0e:3a:b5:c8:e5:5f:7f:67:9f:18:15: d3:20:7b:dd:ce:66:bc:d5:4f:00:f9:93:4e:59:7d: 4b:89:df:75:27:74:58:c7:9f:99:65:4c:5e:7b:14: 7b:81:29:a8:31:cf:a4:48:f5:58:f1:96:5d:f4:7c: a6:9f:44:21:12:6b:80:b4:7c:d0:a0:ab:25:9e:85: 88:0c:48:60:17:6c:f6:98:e5:ef:44:e8:57:a5:48: 2d:41:bd:6e:83:f1:1b:76:88:20:ff:2b:4e:55:76: a3:00:3a:fa:6d:ef:f7:6e:b1:66:dd:1f:c3:ad:ec: 30:f9:ee:28:52:5a:b9:7e:07:e3:d5:fa:92:44:f3: 97:1a:1b:f7:c9:4a:a0:2f:e4:2a:46:83:a7:a8:c7: 65:d4:4c:46:b1:ce:1e:54:97:ac:56:e7:cf:f3:31: 69:e3:e0:b3:99:f4:3c:10:22:dc:b7:2e:38:fc:57: 79:e6:72:38:45:e3:2f:ad:17:3d:a9:02:01:ba:0d: cf:02:e3:ad:08:02:eb:b8:c1:ec:37:d5:f5:1a:ef: 88:12:b8:f1:dd:8c:79:06:23:12:7a:eb:6b:2f:e2: d5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D6:D2:8F:95:C2:5D:9F:13:47:C3:71:30:0F:3C:05:A5:D6:5F:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a7078f8-48e1-3134-bd8c-f38486949922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 72.133.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:54:7f:29:9f:65:f4:5f:83:48:01:cc:96:ae:d7:62:3d:8c: a0:15:d5:1a:b8:51:b3:cf:99:52:70:25:0c:25:e5:37:40:d0: cf:c0:63:2c:0a:09:e2:4b:c3:6e:98:61:9a:b6:66:a3:88:8d: 4b:ad:50:0d:c7:75:3c:d5:d2:32:ab:5d:82:8a:ba:74:a0:f0: a8:69:07:7e:48:88:52:b5:71:11:3e:cc:8d:49:f7:7b:b9:49: 67:54:a0:18:76:7f:1e:e9:48:41:f3:02:e2:30:d2:44:9a:8b: cd:34:9a:8e:c0:44:f0:c3:e5:8c:6e:e0:95:fa:f7:67:02:18: 39:88:05:ed:15:5a:0c:41:e4:55:c1:d8:af:66:0b:52:8f:6b: 2f:a8:64:b1:db:34:60:3c:6b:07:42:ea:d8:6a:6f:16:53:f4: 87:dd:2f:f9:b8:18:91:44:3f:db:7a:74:df:93:84:3d:68:7c: fc:df:51:b7:58:dd:b7:63:94:67:bf:44:0b:bb:9d:2d:cd:66: 83:e5:c1:56:d3:fe:08:e2:c8:48:43:49:5f:b4:24:fc:96:12: 48:50:a5:33:30:16:af:1b:c7:0b:53:17:b6:76:54:fa:d8:ce: 5e:28:aa:b7:b7:16:a3:59:27:f2:77:c3:34:83:c0:4e:5f:8a: e4:6b:66:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0cTqqmhlicWJvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZmVkMTcwYTItMjNmOS00ZmEwLWJmN2UtOTdlZDgzMDQ4M2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaHCzIoP03JN28G8OO30QFbVfDthdeVqP+gx 84BsXqYRDjq1yOVff2efGBXTIHvdzma81U8A+ZNOWX1Lid91J3RYx5+ZZUxeexR7 gSmoMc+kSPVY8ZZd9Hymn0QhEmuAtHzQoKslnoWIDEhgF2z2mOXvROhXpUgtQb1u g/Ebdogg/ytOVXajADr6be/3brFm3R/Dreww+e4oUlq5fgfj1fqSRPOXGhv3yUqg L+QqRoOnqMdl1ExGsc4eVJesVufP8zFp4+CzmfQ8ECLcty44/Fd55nI4ReMvrRc9 qQIBug3PAuOtCALruMHsN9X1Gu+IErjx3Yx5BiMSeutrL+LVbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHW0o+Vwl2fE0fDcTAPPAWl1l8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNWE3MDc4ZjgtNDhlMS0z MTM0LWJkOGMtZjM4NDg2OTQ5OTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESIXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtUfymfZfRfg0gBzJau12I9jKAV1Rq4UbPPmVJwJQwl5TdA0M/AYywK CeJLw26YYZq2ZqOIjUutUA3HdTzV0jKrXYKKunSg8KhpB35IiFK1cRE+zI1J93u5 SWdUoBh2fx7pSEHzAuIw0kSai800mo7ARPDD5Yxu4JX692cCGDmIBe0VWgxB5FXB 2K9mC1KPay+oZLHbNGA8awdC6thqbxZT9IfdL/m4GJFEP9t6dN+ThD1ofPzfUbdY 3bdjlGe/RAu7nS3NZoPlwVbT/gjiyEhDSV+0JPyWEkhQpTMwFq8bxwtTF7Z2VPrY zl4oqre3FqNZJ/J3wzSDwE5fiuRrZvU= -----END CERTIFICATE-----Generated at Sun Apr 6 12:48:00 2025 by rpki-client