$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa File: 67ed9f3f-8163-30ed-adda-fa473db6d09a.roa (raw, json) Hash identifier: +GwM6G40xWqqTx/rxMem4gQm4likAkUHva1Wk89Jjtw= Subject key identifier: 4F:87:CA:50:26:F8:B2:3D:9A:44:08:90:01:83:0B:A3:C3:22:98:7B Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F43285848BBBB73867E7AFED09657C7C0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 394437 IP address blocks: 72.20.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:73:86:7e:7a:fe:d0:96:57:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=0566bade-6f20-4dbd-b2dd-ff1bc5b3ca20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:05:ea:0c:b7:f3:3c:de:2c:76:b4:23:60: 1a:95:9e:91:69:43:d1:50:2b:1f:b3:7a:92:3d:e5: f5:da:43:9f:54:8b:5f:9f:9e:6d:fe:37:6b:ba:7e: de:c4:cd:e4:a3:90:fb:50:ef:f1:39:84:69:b6:e8: dd:be:59:25:a3:f0:f5:98:81:b5:49:ad:55:10:a2: 50:48:05:73:30:31:8a:83:c3:bb:58:90:22:47:65: db:25:d0:db:df:65:fb:c1:af:fd:67:c7:51:f2:0c: b0:db:65:bf:11:74:02:2f:96:84:69:84:57:76:8f: 2d:9f:0c:b8:f4:1b:b9:90:2c:a8:dc:15:8a:c7:35: 87:1c:66:73:91:96:17:04:25:e5:f9:c1:cb:fa:7a: 75:57:d5:0a:dd:49:1f:42:a4:17:72:0f:0c:46:2f: 27:c7:93:7a:10:6a:9c:09:1f:90:e6:2e:c2:ea:98: 65:98:7a:81:5c:77:9f:97:28:b2:5e:e0:66:cf:c6: 7a:5c:49:87:11:bc:1f:94:ed:c0:93:63:ea:94:48: 1a:68:39:2a:56:94:f9:1e:e4:b2:43:78:61:72:79: ad:4f:9d:d9:48:64:6c:e0:95:ed:cd:f2:4c:eb:67: 0b:6b:20:02:37:9a:26:46:6a:1a:c3:65:30:93:95: 27:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:87:CA:50:26:F8:B2:3D:9A:44:08:90:01:83:0B:A3:C3:22:98:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f7:36:67:7c:a2:6b:51:a4:37:8f:4f:37:f1:30:18:75:ba: 7f:fe:00:e3:d9:e0:08:78:6a:fb:80:39:b3:40:fe:fc:4f:ad: 55:68:1b:8b:92:77:c4:98:24:ca:d4:da:5f:8d:14:6e:d1:b4: 9d:1b:72:cf:bf:4f:8c:b9:3d:24:ad:56:60:93:64:21:3b:83: b7:54:13:07:95:ce:60:2b:1b:18:ca:7d:dc:24:c6:72:82:be: ef:d3:6a:b6:de:a3:a8:7e:5b:67:86:42:79:28:74:1b:59:e3: a9:5b:ab:b5:fe:e4:fb:63:b4:81:a5:09:f8:fe:11:53:a5:fc: 20:11:7b:f6:ba:c9:5c:7e:8f:8d:a3:af:0a:23:a7:01:d6:70: 9b:8b:f0:95:2a:be:89:87:ce:34:d4:60:cc:89:2d:3e:b8:f6: bf:9f:d2:61:f1:4a:45:73:77:6b:bc:4d:36:4e:84:b8:00:a5: fb:3b:a7:0b:28:0b:2c:cd:9d:9c:02:15:5a:c5:6d:35:9b:c6: 2e:36:20:4e:03:95:5b:aa:3e:c5:31:c5:d5:ea:cc:ee:0b:a3: d5:6e:e8:83:ae:b0:ff:88:6e:8d:52:24:64:0d:17:c7:9c:bc: ff:a3:18:81:ce:3f:ef:96:da:03:04:bb:97:a2:75:2c:ae:76: 0c:f4:66:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3OGfnr+0JZXx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MDU2NmJhZGUtNmYyMC00ZGJkLWIyZGQtZmYxYmM1YjNjYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ4F6gy38zzeLHa0I2AalZ6RaUPRUCsfs3qS PeX12kOfVItfn55t/jdrun7exM3ko5D7UO/xOYRptujdvlklo/D1mIG1Sa1VEKJQ SAVzMDGKg8O7WJAiR2XbJdDb32X7wa/9Z8dR8gyw22W/EXQCL5aEaYRXdo8tnwy4 9Bu5kCyo3BWKxzWHHGZzkZYXBCXl+cHL+np1V9UK3UkfQqQXcg8MRi8nx5N6EGqc CR+Q5i7C6phlmHqBXHeflyiyXuBmz8Z6XEmHEbwflO3Ak2PqlEgaaDkqVpT5HuSy Q3hhcnmtT53ZSGRs4JXtzfJM62cLayACN5omRmoaw2Uwk5UnaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+HylAm+LI9mkQIkAGDC6PDIph7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNjdlZDlmM2YtODE2My0z MGVkLWFkZGEtZmE0NzNkYjZkMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/3Nmd8omtRpDePTzfxMBh1un/+AOPZ4Ah4avuAObNA/vxPrVVoG4uS d8SYJMrU2l+NFG7RtJ0bcs+/T4y5PSStVmCTZCE7g7dUEweVzmArGxjKfdwkxnKC vu/Tarbeo6h+W2eGQnkodBtZ46lbq7X+5PtjtIGlCfj+EVOl/CARe/a6yVx+j42j rwojpwHWcJuL8JUqvomHzjTUYMyJLT649r+f0mHxSkVzd2u8TTZOhLgApfs7pwso CyzNnZwCFVrFbTWbxi42IE4DlVuqPsUxxdXqzO4Lo9Vu6IOusP+Ibo1SJGQNF8ec vP+jGIHOP++W2gMEu5eidSyudgz0ZsM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:16:51 2025 by rpki-client