$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ba139a42-0271-30dc-abba-a92f7c8b5200.roa File: ba139a42-0271-30dc-abba-a92f7c8b5200.roa (raw, json) Hash identifier: 3S92QXKV2Z6NQFORSuqrEPq1aoSLRNV35wRKo9/ZlO4= Subject key identifier: 17:48:5F:CC:4C:F9:F4:3E:01:74:A0:C6:0E:2B:64:A6:7C:19:B5:99 Certificate issuer: /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5 Certificate serial: 010D0C9F43285848A1360C3103D0F7A2ADDFC140 Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ba139a42-0271-30dc-abba-a92f7c8b5200.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 399122 IP address blocks: 72.172.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:0c:31:03:d0:f7:a2:ad:df:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=e9dea155-269f-40e2-81cd-1d9bed8f86ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:16:3c:b2:49:58:c2:40:bb:5d:40:f9:0b: b7:0e:61:7d:26:54:73:b2:16:2b:d7:69:4e:3a:ec: b7:12:87:fd:7c:90:ab:1d:a0:e6:6a:95:e6:fb:73: ab:53:3b:e8:72:37:9a:84:07:2d:5e:d6:0b:af:45: 8a:c7:bd:b2:67:a5:14:91:c9:31:fd:ce:34:c5:8c: 5e:c7:44:8e:a8:04:fe:31:26:ec:d0:45:09:72:23: 56:fe:bb:f7:72:83:34:a6:75:66:78:74:a0:16:46: 5c:87:52:ea:c6:ae:63:b5:84:5f:f1:90:c8:50:df: e4:db:ba:8a:09:0a:c8:ac:09:df:85:49:8c:2b:d5: e9:c3:48:32:1f:11:b4:e3:67:7a:f8:72:02:ea:70: 1c:b8:87:bc:c2:65:bb:2c:31:19:9f:59:d0:8e:6b: a5:90:dd:66:62:e0:6b:82:c7:37:84:9b:43:c2:c0: b1:39:da:71:04:fc:d9:d6:8f:40:ac:03:76:7f:78: 6d:97:8a:d9:a6:a2:06:3d:45:69:5d:b7:c8:d7:e5: 79:90:67:87:f4:9a:e9:61:95:24:39:19:78:99:da: 48:de:32:47:d7:de:f4:e5:60:1f:31:8c:f6:7b:e0: bd:58:eb:d4:ee:72:61:dd:e7:a1:b6:c3:0e:f2:62: 4e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:48:5F:CC:4C:F9:F4:3E:01:74:A0:C6:0E:2B:64:A6:7C:19:B5:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ba139a42-0271-30dc-abba-a92f7c8b5200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl X509v3 Authority Key Identifier: keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer sbgp-ipAddrBlock: critical IPv4: 72.172.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:96:d6:98:71:aa:53:b5:7e:90:19:4c:a2:c1:6e:d7:58:03: d8:0c:1a:50:1f:85:38:e5:3c:b6:b9:b6:7d:eb:9e:2a:0e:86: a8:b9:bd:19:1b:94:3c:73:e7:a7:73:64:e3:20:1a:fe:2f:bc: 59:2d:1a:7f:1a:21:be:d1:69:6f:7c:0b:5b:9f:8f:ee:d7:c9: 56:0c:1d:05:ae:4b:5d:2b:d8:fe:af:9d:15:be:d7:01:52:52: 86:bf:8a:03:69:45:db:f7:c2:13:38:cb:41:31:62:e7:39:8a: 53:f5:c8:e5:11:97:2b:4f:10:94:62:39:2a:53:2e:31:de:c5: ed:bd:97:4c:e0:f1:15:f3:9f:51:65:6e:d4:68:84:54:99:c8: 15:a5:01:11:29:61:ff:76:60:bb:55:8b:43:b8:ab:ff:50:7a: 65:67:76:20:fb:78:c0:20:2e:2e:20:b8:f3:c8:3b:e2:9d:1f: 10:fe:8a:fd:52:56:70:f8:a7:ba:4c:01:a5:f8:dc:26:fe:77: 9c:2b:10:95:3b:e0:a1:fe:db:6f:0a:1a:15:62:a1:51:e9:95: 33:1a:d4:8a:61:eb:ed:2e:98:c8:39:40:af:b7:6c:88:05:d0: e1:36:1d:5e:ed:92:25:12:5f:30:eb:72:21:69:6e:b2:6b:ca: 98:9a:d9:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNgwxA9D3oq3fwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyNjE4NzgtNWVmNC00Zjk5LThkMDktYjZkMjQ5MzQ0 NGM1MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZTlkZWExNTUtMjY5Zi00MGUyLTgxY2QtMWQ5YmVkOGY4NmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0kWPLJJWMJAu11A+Qu3DmF9JlRzshYr12lO Ouy3Eof9fJCrHaDmapXm+3OrUzvocjeahActXtYLr0WKx72yZ6UUkckx/c40xYxe x0SOqAT+MSbs0EUJciNW/rv3coM0pnVmeHSgFkZch1Lqxq5jtYRf8ZDIUN/k27qK CQrIrAnfhUmMK9Xpw0gyHxG042d6+HIC6nAcuIe8wmW7LDEZn1nQjmulkN1mYuBr gsc3hJtDwsCxOdpxBPzZ1o9ArAN2f3htl4rZpqIGPUVpXbfI1+V5kGeH9JrpYZUk ORl4mdpI3jJH19705WAfMYz2e+C9WOvU7nJh3eehtsMO8mJO6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdIX8xM+fQ+AXSgxg4rZKZ8GbWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2 MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQyNDkzNDQ0YzUvYmExMzlhNDItMDI3MS0z MGRjLWFiYmEtYTkyZjdjOGI1MjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTYyNjE4NzgtNWVmNC00Zjk5LThk MDktYjZkMjQ5MzQ0NGM1L2E2MjYxODc4LTVlZjQtNGY5OS04ZDA5LWI2ZDI0OTM0 NDRjNS5jcmwwHwYDVR0jBBgwFoAU5DgAsivRHURmtzlG/z1FUty+3BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQy NDkzNDQ0YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASKxLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmW1phxqlO1fpAZTKLBbtdYA9gMGlAfhTjlPLa5tn3rnioOhqi5vRkb lDxz56dzZOMgGv4vvFktGn8aIb7RaW98C1ufj+7XyVYMHQWuS10r2P6vnRW+1wFS Uoa/igNpRdv3whM4y0ExYuc5ilP1yOURlytPEJRiOSpTLjHexe29l0zg8RXzn1Fl btRohFSZyBWlAREpYf92YLtVi0O4q/9QemVndiD7eMAgLi4guPPIO+KdHxD+iv1S VnD4p7pMAaX43Cb+d5wrEJU74KH+228KGhVioVHplTMa1Iph6+0umMg5QK+3bIgF 0OE2HV7tkiUSXzDrciFpbrJrypia2dg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:26 2025 by rpki-client