$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/d3047cac-f2f4-32be-99dc-172f87e65ca7.roa File: d3047cac-f2f4-32be-99dc-172f87e65ca7.roa (raw, json) Hash identifier: 22WpLQJNhfd1ZX8F2eHdVNO2+4X8v20VD0bZ4Lc8m4I= Subject key identifier: EE:34:FD:D8:60:85:61:F7:9A:CE:51:BA:27:7F:DF:1A:26:98:9A:EA Certificate issuer: /CN=42a6a92d-cd75-4125-b537-c87919ad3f73 Certificate serial: 010D0C9F4328584976A98F41C4882CBFC9A03C80 Authority key identifier: 8C:94:14:C3:3F:03:44:25:C8:60:7A:5E:08:AC:01:C6:4C:FE:C7:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/d3047cac-f2f4-32be-99dc-172f87e65ca7.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 46573 IP address blocks: 72.19.12.0/24 maxlen: 24 72.19.13.0/24 maxlen: 24 72.19.14.0/24 maxlen: 24 72.19.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:8f:41:c4:88:2c:bf:c9:a0:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42a6a92d-cd75-4125-b537-c87919ad3f73 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=15dfe2dd-4c75-4a02-90b4-6784053df51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5c:ec:45:55:d0:c0:8b:e7:4e:21:e7:58:07: e8:83:1e:9c:da:5f:ed:d1:94:5c:b8:7f:98:56:b3: 51:91:8e:89:d6:be:80:bd:7e:3f:0b:ca:90:ab:89: 84:f1:05:69:38:c6:ef:0c:b8:45:37:c4:58:17:e6: 43:3a:9e:9a:20:e4:67:5d:99:34:d0:4e:c5:2e:3c: f5:0f:0f:f5:cc:6f:e2:0c:2a:d5:c3:00:a1:0d:68: b9:1c:3f:b2:7b:7e:bb:ff:64:39:ca:3e:e5:a2:23: de:6e:aa:ba:e0:90:ef:c8:4a:fa:50:8e:24:61:f8: ff:a0:e6:41:87:57:13:10:8d:c1:66:97:ab:2f:9e: f0:ed:91:05:d8:8a:4c:b8:eb:75:47:f7:43:79:d4: 2d:42:5c:4c:d7:d1:d1:e7:12:4c:07:ba:9f:3b:86: da:3c:80:be:61:f8:45:71:ac:7d:9d:9c:76:45:ea: 77:07:10:f1:58:e1:b6:dd:32:bb:c8:01:95:51:84: a5:df:a1:73:86:de:2f:a6:4e:7d:4b:05:1f:e3:1a: 1e:25:1f:1b:e7:45:92:f9:7f:75:02:de:af:ed:73: 69:d4:11:63:41:fe:2d:0b:85:6c:b0:8e:e6:6d:0a: 67:63:55:3d:45:b5:97:5d:27:04:08:d6:a0:51:d0: 80:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:34:FD:D8:60:85:61:F7:9A:CE:51:BA:27:7F:DF:1A:26:98:9A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/d3047cac-f2f4-32be-99dc-172f87e65ca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.crl X509v3 Authority Key Identifier: keyid:8C:94:14:C3:3F:03:44:25:C8:60:7A:5E:08:AC:01:C6:4C:FE:C7:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer sbgp-ipAddrBlock: critical IPv4: 72.19.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:98:89:8d:7b:31:4a:bd:03:04:2d:31:2b:be:df:ed:e1:c8: f3:43:e9:73:44:15:03:27:d9:72:74:4f:0c:f7:12:34:0d:62: 54:11:57:f7:7a:0d:24:1d:bd:36:0a:06:ec:be:8d:ce:fb:62: 99:b8:af:e1:e0:a7:d7:67:53:46:43:c5:cf:40:44:5a:ba:31: 23:5f:bc:16:20:42:00:7f:5b:6f:cc:44:43:90:68:26:ac:2c: bd:18:3e:e5:ef:4c:3e:8f:3a:26:e9:2c:90:94:9e:e3:a0:17: a3:65:54:6b:5c:8b:f6:41:07:cf:9b:cb:91:c3:12:f5:5e:d7: cd:c4:79:f4:c9:c5:38:5b:17:a5:47:7b:40:b1:18:31:7a:66: 61:cc:01:df:0c:2d:dd:18:f1:2e:8b:83:7f:bd:14:c1:fc:3a: 8a:62:10:eb:78:d7:67:40:37:7f:37:c6:d5:da:b6:df:53:e5: c8:a3:73:32:6c:d1:16:a9:69:1b:47:a5:4a:1b:40:50:07:48: e3:37:33:8f:4e:db:65:05:34:ca:43:3f:64:89:6d:7f:d7:ea: 5c:0d:00:83:c1:c2:1d:45:9c:66:d3:33:47:21:24:20:9e:d8: a8:c0:cb:84:06:5f:be:6e:2f:da:6d:62:a4:8c:e9:10:69:1a: 9d:59:a6:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qY9BxIgsv8mgPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJhNmE5MmQtY2Q3NS00MTI1LWI1MzctYzg3OTE5YWQz ZjczMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk MTVkZmUyZGQtNGM3NS00YTAyLTkwYjQtNjc4NDA1M2RmNTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplzsRVXQwIvnTiHnWAfogx6c2l/t0ZRcuH+Y VrNRkY6J1r6AvX4/C8qQq4mE8QVpOMbvDLhFN8RYF+ZDOp6aIORnXZk00E7FLjz1 Dw/1zG/iDCrVwwChDWi5HD+ye367/2Q5yj7loiPebqq64JDvyEr6UI4kYfj/oOZB h1cTEI3BZperL57w7ZEF2IpMuOt1R/dDedQtQlxM19HR5xJMB7qfO4baPIC+YfhF cax9nZx2Rep3BxDxWOG23TK7yAGVUYSl36Fzht4vpk59SwUf4xoeJR8b50WS+X91 At6v7XNp1BFjQf4tC4VssI7mbQpnY1U9RbWXXScECNagUdCAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO40/dhghWH3ms5Ruid/3xommJrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80MmE2 YTkyZC1jZDc1LTQxMjUtYjUzNy1jODc5MTlhZDNmNzMvZDMwNDdjYWMtZjJmNC0z MmJlLTk5ZGMtMTcyZjg3ZTY1Y2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDJhNmE5MmQtY2Q3NS00MTI1LWI1 MzctYzg3OTE5YWQzZjczLzQyYTZhOTJkLWNkNzUtNDEyNS1iNTM3LWM4NzkxOWFk M2Y3My5jcmwwHwYDVR0jBBgwFoAUjJQUwz8DRCXIYHpeCKwBxkz+x+4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80MmE2YTkyZC1jZDc1LTQxMjUtYjUzNy1jODc5 MTlhZDNmNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiYiY17MUq9AwQtMSu+3+3hyPND6XNEFQMn2XJ0Twz3EjQNYlQRV/d6 DSQdvTYKBuy+jc77Ypm4r+Hgp9dnU0ZDxc9ARFq6MSNfvBYgQgB/W2/MREOQaCas LL0YPuXvTD6POibpLJCUnuOgF6NlVGtci/ZBB8+by5HDEvVe183EefTJxThbF6VH e0CxGDF6ZmHMAd8MLd0Y8S6Lg3+9FMH8OopiEOt412dAN383xtXatt9T5cijczJs 0RapaRtHpUobQFAHSOM3M49O22UFNMpDP2SJbX/X6lwNAIPBwh1FnGbTM0chJCCe 2KjAy4QGX75uL9ptYqSM6RBpGp1Zpto= -----END CERTIFICATE-----Generated at Wed Apr 9 19:45:53 2025 by rpki-client