$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa File: 3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa (raw, json) Hash identifier: boj4HwoXTMjzfFwkVwgOBQ4DJZJeeYwqfQlrnfWZegA= Subject key identifier: 75:A6:BC:C0:72:89:DD:4E:47:7E:D1:C1:AA:10:4E:33:CE:AF:EC:78 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F98AAD90EB19C9B299C00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 33363 IP address blocks: 72.31.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:98:aa:d9:0e:b1:9c:9b:29:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=5856beda-c6d0-4838-933e-43bff9831c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:08:09:db:24:d8:d1:b8:7a:89:9b:bf:4d:3b: 86:e8:50:d1:22:8e:01:a1:ea:10:84:07:5e:a2:87: 51:51:b8:ab:7d:03:00:82:cf:aa:d4:a8:f5:78:33: e2:fb:16:8f:c9:19:d8:93:bf:46:75:4e:93:b5:74: 2c:78:16:bb:36:ea:ed:4d:2f:fd:55:ba:20:46:55: 4b:22:07:82:df:4d:96:25:f8:81:bb:7a:70:33:c7: dc:e5:bc:6c:bb:23:0f:10:9b:b1:94:c7:18:08:92: f8:8e:e0:ef:75:22:c9:71:3f:2e:91:3d:43:8c:e5: 20:d8:d6:c3:7e:89:f7:1c:24:d3:6e:d5:e6:d2:56: 26:f5:5e:e2:42:2a:89:1d:fb:db:6d:3f:f4:d1:08: 19:2f:4e:06:b7:5d:39:89:b7:ea:bc:b7:36:cb:f2: 3b:e3:93:89:99:68:11:a2:2c:df:8b:4d:8b:51:04: 74:c3:83:c3:3a:b2:de:0d:88:90:c3:d2:2a:c5:5c: 81:e0:f0:88:a4:16:cc:de:f9:5c:90:5c:4a:be:37: b7:b0:a3:52:08:2f:5d:89:ec:93:36:28:d9:be:df: 4e:ad:28:84:80:30:07:4d:f3:cf:e5:54:2a:60:ee: bf:69:bc:a2:80:4f:fe:c7:07:16:20:45:aa:21:ab: 8f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A6:BC:C0:72:89:DD:4E:47:7E:D1:C1:AA:10:4E:33:CE:AF:EC:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:66:cc:4e:7e:b2:b5:7f:8a:c8:de:d9:a3:97:dc:ed:72:56: ea:96:8d:44:a4:b7:a5:a5:23:a1:4d:8f:ec:5f:98:55:d3:3c: 4c:95:ca:1a:d8:3d:39:8b:9c:bf:4d:95:da:02:1e:16:27:dd: ef:66:b5:f8:2d:b6:69:c7:c7:cc:c4:8c:51:b0:1c:3c:d5:86: c5:f8:82:0e:0c:9e:98:7e:21:a0:be:7c:6d:54:0e:18:3f:b1: ee:a5:98:e4:81:44:ef:49:69:9d:06:52:6a:f6:01:1f:69:9a: 4b:f7:2b:11:89:1e:67:ed:e9:37:eb:94:e6:ad:bb:b5:d3:c9: c2:6b:d2:0a:a2:e0:e0:df:4d:e4:40:de:67:24:33:83:4f:6e: 87:42:87:54:0a:55:64:c1:64:87:8d:ee:6b:11:fd:e6:60:7c: d6:06:ee:f6:2c:af:5b:62:7a:59:f5:12:c9:e9:1e:5c:6a:c3: 65:a1:37:84:f8:42:c9:96:a2:c2:2b:d8:be:ec:fb:6b:a6:b9: 5b:f8:1f:d4:87:ed:91:67:07:e2:84:be:58:8a:b5:4c:73:da: 80:ee:26:2f:57:76:d8:ea:3a:49:21:f9:c1:92:a1:c0:33:96: 31:83:d2:9e:f5:6e:01:a7:75:03:69:75:32:b9:a3:59:d2:fc: 95:4a:0b:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5iq2Q6xnJspnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NTg1NmJlZGEtYzZkMC00ODM4LTkzM2UtNDNiZmY5ODMxYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiggJ2yTY0bh6iZu/TTuG6FDRIo4BoeoQhAde oodRUbirfQMAgs+q1Kj1eDPi+xaPyRnYk79GdU6TtXQseBa7NurtTS/9VbogRlVL IgeC302WJfiBu3pwM8fc5bxsuyMPEJuxlMcYCJL4juDvdSLJcT8ukT1DjOUg2NbD fon3HCTTbtXm0lYm9V7iQiqJHfvbbT/00QgZL04Gt105ibfqvLc2y/I745OJmWgR oizfi02LUQR0w4PDOrLeDYiQw9IqxVyB4PCIpBbM3vlckFxKvje3sKNSCC9dieyT NijZvt9OrSiEgDAHTfPP5VQqYO6/abyigE/+xwcWIEWqIauP3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWmvMByid1OR37RwaoQTjPOr+x4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvM2QwYzA4Y2MtNjA1YS0z ZjhlLThlMDktZmE1ZmRhOGY1NDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSB/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9mzE5+srV/isje2aOX3O1yVuqWjUSkt6WlI6FNj+xfmFXTPEyVyhrY PTmLnL9NldoCHhYn3e9mtfgttmnHx8zEjFGwHDzVhsX4gg4Mnph+IaC+fG1UDhg/ se6lmOSBRO9JaZ0GUmr2AR9pmkv3KxGJHmft6TfrlOatu7XTycJr0gqi4ODfTeRA 3mckM4NPbodCh1QKVWTBZIeN7msR/eZgfNYG7vYsr1tieln1EsnpHlxqw2WhN4T4 QsmWosIr2L7s+2umuVv4H9SH7ZFnB+KEvliKtUxz2oDuJi9XdtjqOkkh+cGSocAz ljGD0p71bgGndQNpdTK5o1nS/JVKC0Q= -----END CERTIFICATE-----Generated at Wed Jun 4 10:35:43 2025 by rpki-client