$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cb55698-6b11-3a9b-92a7-4b3c895aadaf.roa File: 9cb55698-6b11-3a9b-92a7-4b3c895aadaf.roa (raw, json) Hash identifier: YOKlHyV9+Uq6lyjW6UzZ7QULrawHTzX/XUQxVY3XcZ8= Subject key identifier: 6D:CB:03:6D:D3:82:C3:81:F3:04:F0:ED:7D:59:D9:05:21:EC:C3:94 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B1F627A5AE074D2236367080 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cb55698-6b11-3a9b-92a7-4b3c895aadaf.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 14663 IP address blocks: 72.25.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:27:a5:ae:07:4d:22:36:36:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=130bd4a4-cac5-43f5-8774-cdb77d5e6507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b4:4b:50:9c:e5:d5:84:8d:b6:9c:1f:3e:30: 16:84:f2:43:72:f5:5d:64:05:3a:95:ea:8a:5e:61: 7e:19:50:8f:00:31:ef:dc:87:35:0c:a9:4c:9b:6f: 17:cd:36:e5:44:26:00:a0:00:8e:3f:65:cb:98:be: ab:72:8c:7c:23:fb:ba:2b:73:5e:d3:38:65:bb:7b: a8:9a:bf:68:95:52:5b:82:4c:f5:7d:82:52:77:65: d9:24:8c:6b:b0:fc:e4:b0:6c:b8:c8:f7:d1:2b:da: ff:ab:06:85:f0:ac:e8:16:53:d4:7a:bd:46:d4:7b: 14:bb:c1:e1:af:1a:c5:7b:d0:cf:c7:08:98:0a:95: 6a:13:bf:34:12:dc:a2:8e:9d:4e:b3:cb:4a:1d:30: ca:0e:12:69:3b:6e:d6:74:76:2e:67:69:c8:ef:9f: f2:ce:1e:9a:88:5c:0b:2e:19:19:e8:44:67:72:c2: 56:ca:6f:e9:5d:ae:d3:b0:31:f5:a5:73:2b:24:eb: 6f:8c:57:f5:0e:b4:80:f6:52:0d:be:a2:2e:9a:08: 86:cf:4a:34:93:d2:0d:c3:5a:54:c4:26:b3:72:66: 4d:ca:50:48:ed:dc:f3:90:16:17:85:9c:30:00:af: 78:07:4f:33:45:db:63:11:e7:08:e4:73:95:18:ac: 01:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CB:03:6D:D3:82:C3:81:F3:04:F0:ED:7D:59:D9:05:21:EC:C3:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cb55698-6b11-3a9b-92a7-4b3c895aadaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 72.25.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:4d:fc:d5:37:6d:59:67:56:81:bb:75:66:26:9f:ec:b9:ba: e8:14:d6:ce:80:f8:c7:f7:95:35:25:b1:85:ff:77:29:21:58: f3:80:e3:cd:f8:b1:6c:9f:86:d5:07:88:41:aa:e6:09:9b:7d: 68:36:a6:65:c0:ef:14:77:df:ac:85:78:52:57:59:20:82:39: 12:6d:f7:ae:e1:a9:15:2a:9c:2f:0b:9a:56:34:a0:d9:ee:75: 07:83:29:64:23:a4:34:f4:e8:9e:95:84:00:20:aa:99:cc:8b: 41:fd:7e:cc:1f:a1:bf:fa:a5:44:24:bf:6a:54:25:b7:f6:54: 18:b3:8b:56:ff:6e:ba:c4:60:59:5f:28:b9:9b:a5:90:f0:9e: 58:d2:03:02:df:2e:c8:f9:77:e2:b7:fe:31:f4:b1:93:d2:87: 79:15:50:02:46:f7:d5:f4:05:9e:20:39:d6:bf:41:45:2e:db: b7:cd:5d:d7:1e:34:d0:0f:eb:9f:0d:9c:23:6d:aa:73:8b:97: 8a:5e:65:02:ee:57:cf:53:7c:51:72:bf:af:c8:67:8d:8a:45: 99:77:0a:45:85:5c:8a:e4:0f:6f:e2:d6:e6:b3:e8:eb:bc:a2: e5:1f:93:b0:b3:db:db:d9:13:e4:9d:98:58:a1:81:b3:ef:76: 1a:79:43:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9ielrgdNIjY2cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk MTMwYmQ0YTQtY2FjNS00M2Y1LTg3NzQtY2RiNzdkNWU2NTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbRLUJzl1YSNtpwfPjAWhPJDcvVdZAU6leqK XmF+GVCPADHv3Ic1DKlMm28XzTblRCYAoACOP2XLmL6rcox8I/u6K3Ne0zhlu3uo mr9olVJbgkz1fYJSd2XZJIxrsPzksGy4yPfRK9r/qwaF8KzoFlPUer1G1HsUu8Hh rxrFe9DPxwiYCpVqE780Etyijp1Os8tKHTDKDhJpO27WdHYuZ2nI75/yzh6aiFwL LhkZ6ERncsJWym/pXa7TsDH1pXMrJOtvjFf1DrSA9lINvqIumgiGz0o0k9INw1pU xCazcmZNylBI7dzzkBYXhZwwAK94B08zRdtjEecI5HOVGKwBBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3LA23TgsOB8wTw7X1Z2QUh7MOUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWNiNTU2OTgtNmIxMS0z YTliLTkyYTctNGIzYzg5NWFhZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5N/NU3bVlnVoG7dWYmn+y5uugU1s6A+Mf3lTUlsYX/dykhWPOA4834 sWyfhtUHiEGq5gmbfWg2pmXA7xR336yFeFJXWSCCORJt967hqRUqnC8LmlY0oNnu dQeDKWQjpDT06J6VhAAgqpnMi0H9fswfob/6pUQkv2pUJbf2VBizi1b/brrEYFlf KLmbpZDwnljSAwLfLsj5d+K3/jH0sZPSh3kVUAJG99X0BZ4gOda/QUUu27fNXdce NNAP658NnCNtqnOLl4peZQLuV89TfFFyv6/IZ42KRZl3CkWFXIrkD2/i1uaz6Ou8 ouUfk7Cz29vZE+SdmFihgbPvdhp5Q6Y= -----END CERTIFICATE-----Generated at Wed Feb 19 20:33:11 2025 by rpki-client