$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa File: 2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa (raw, json) Hash identifier: WG+CiniipMxGoVsyHa6aHQijECMzMpNZbUjj8bSIW1o= Subject key identifier: A9:03:90:31:D0:51:9D:C0:A5:8A:9D:43:56:BF:C2:5E:86:A4:B5:7D Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F43285848BBBB72ED1125FA438D2F0820 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 394437 IP address blocks: 72.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:72:ed:11:25:fa:43:8d:2f:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=803b6fdc-72bb-4d25-bd66-de4026d01855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:39:b1:48:24:76:2b:b6:0b:a1:97:84:b1: 42:79:aa:8e:55:fc:a1:56:2b:c6:4e:47:a2:8c:56: cb:4d:99:0f:45:53:3f:55:26:5d:c1:dd:01:b4:a3: 82:90:4d:b3:fc:54:72:55:4f:d6:ef:02:80:e5:82: 15:6e:84:ca:60:41:b1:09:3e:27:3a:79:da:4e:f7: 0c:da:bc:e0:5c:ba:7d:47:86:ca:f6:ad:6d:ff:49: 44:29:33:6e:bd:71:c7:f9:af:03:af:ce:16:eb:40: 9d:89:91:4c:72:32:27:02:83:3d:93:cb:0b:be:9e: 8b:d8:c5:f5:e9:af:32:6b:fa:7b:5b:b3:7b:85:38: 7c:5a:ab:25:6a:33:85:70:a5:a8:fc:06:8b:58:37: e6:82:aa:37:68:57:6e:76:1e:31:c4:b4:e8:d2:fa: d4:4f:ca:f2:aa:6c:0d:bc:e1:f7:0f:4f:b6:f2:03: 0e:e9:10:c9:df:4c:c6:10:56:e2:cf:04:78:76:e9: 6f:eb:af:4d:26:fb:d5:22:4f:68:2f:ed:15:4b:74: b7:f9:22:dc:90:bc:f5:55:bd:1f:7c:6b:16:9a:cb: af:73:50:5b:e7:b9:3e:f5:1a:34:97:98:5f:26:71: 49:a8:d6:cc:09:6b:30:08:32:a5:fd:ad:fd:f8:d8: fd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:03:90:31:D0:51:9D:C0:A5:8A:9D:43:56:BF:C2:5E:86:A4:B5:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:27:26:3b:d1:27:32:d0:7c:cb:c4:98:79:46:32:20:8c:2f: ed:4b:2e:42:33:88:9d:dd:d6:f3:df:d8:7c:a5:d2:48:d4:65: c9:f8:99:91:39:27:f9:d2:20:82:db:f7:d4:22:50:e2:0c:ff: 27:aa:51:9d:16:bf:2a:cc:91:36:6f:6e:e9:16:0a:f8:3e:72: f4:89:fc:3a:21:b8:dd:4c:93:a6:ca:5a:88:6c:5b:d0:00:02: 52:ae:c1:e1:e3:28:43:08:4b:1d:62:8c:5f:eb:27:53:38:bd: d2:6a:43:0f:0c:3d:14:d6:af:16:6c:ea:9f:12:11:d1:e7:b8: c7:5b:86:c3:dc:26:56:f2:63:60:1a:17:c0:06:9f:37:36:0a: 63:e4:a8:a3:b9:8d:00:b2:35:51:9f:58:bb:03:64:6e:94:ac: 71:1e:83:41:5c:2d:96:50:70:9c:d5:41:72:04:b0:36:9c:14: 4e:34:27:f3:e3:7d:0a:0d:7a:67:23:7c:53:eb:5b:49:27:75: 00:99:c0:f8:a9:9a:9c:85:94:c7:bc:13:fb:38:ba:5e:9e:bc: ca:27:18:8e:da:c9:3b:72:ca:b4:98:a8:69:7d:eb:92:7e:00: c0:1e:5a:e3:9e:b6:7a:ff:64:e3:c4:0e:53:b9:92:3d:bf:00: 91:54:ed:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3LtESX6Q40vCCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ODAzYjZmZGMtNzJiYi00ZDI1LWJkNjYtZGU0MDI2ZDAxODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLk5sUgkdiu2C6GXhLFCeaqOVfyhVivGTkei jFbLTZkPRVM/VSZdwd0BtKOCkE2z/FRyVU/W7wKA5YIVboTKYEGxCT4nOnnaTvcM 2rzgXLp9R4bK9q1t/0lEKTNuvXHH+a8Dr84W60CdiZFMcjInAoM9k8sLvp6L2MX1 6a8ya/p7W7N7hTh8WqslajOFcKWo/AaLWDfmgqo3aFdudh4xxLTo0vrUT8ryqmwN vOH3D0+28gMO6RDJ30zGEFbizwR4dulv669NJvvVIk9oL+0VS3S3+SLckLz1Vb0f fGsWmsuvc1Bb57k+9Ro0l5hfJnFJqNbMCWswCDKl/a39+Nj9DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkDkDHQUZ3ApYqdQ1a/wl6GpLV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMjMyMGRmMGEtYmExYS0z ODBjLWJlMGYtZDhlM2M3Zjk3M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4nJjvRJzLQfMvEmHlGMiCML+1LLkIziJ3d1vPf2Hyl0kjUZcn4mZE5 J/nSIILb99QiUOIM/yeqUZ0WvyrMkTZvbukWCvg+cvSJ/DohuN1Mk6bKWohsW9AA AlKuweHjKEMISx1ijF/rJ1M4vdJqQw8MPRTWrxZs6p8SEdHnuMdbhsPcJlbyY2Aa F8AGnzc2CmPkqKO5jQCyNVGfWLsDZG6UrHEeg0FcLZZQcJzVQXIEsDacFE40J/Pj fQoNemcjfFPrW0kndQCZwPipmpyFlMe8E/s4ul6evMonGI7ayTtyyrSYqGl965J+ AMAeWuOetnr/ZOPEDlO5kj2/AJFU7Wg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:22 2025 by rpki-client