$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e8cc899-3135-3def-baf7-7434251d5fc8.roa File: 4e8cc899-3135-3def-baf7-7434251d5fc8.roa (raw, json) Hash identifier: z83yIrFp5VaXCOuapaGFlcF6L+idHPTMZt70UadhKBQ= Subject key identifier: 68:6C:34:5F:BC:B9:58:AF:E2:8B:A4:BF:FD:16:F4:E8:65:C4:FD:80 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E00668ADD753FA8C04D3FEE0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e8cc899-3135-3def-baf7-7434251d5fc8.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 33363 IP address blocks: 72.31.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:68:ad:d7:53:fa:8c:04:d3:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=c6e20aa0-5d95-4d27-94b7-cb69ea480021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:f7:17:31:cb:34:3c:c3:61:40:7b:f6:3a: 9d:e5:8f:4c:21:75:a3:70:bd:87:3b:ad:b2:22:b1: a8:8e:f0:e4:29:a9:7e:1f:c7:0a:f3:b1:1c:54:91: 51:bc:c2:08:24:c6:51:a6:df:2b:c1:8a:0f:1f:b5: 16:b7:bd:90:70:3f:04:4a:1c:b0:06:77:5b:6f:55: 7c:fe:68:fb:bc:d6:a2:5a:e7:56:f3:fc:3f:b6:92: 8b:a8:0d:c1:b0:ea:2e:c6:c4:65:0e:8e:f4:58:17: 17:e2:83:87:42:5f:15:41:09:0e:16:b0:64:25:65: 8f:1c:d5:90:2e:e6:d4:98:e2:be:80:a4:fe:08:c5: 1a:bb:48:40:ff:e1:30:b3:8d:71:7d:85:3f:8c:d1: 79:cb:9f:8f:92:a5:a2:d0:03:2f:1b:ee:44:0a:9d: 51:31:60:ea:43:e8:5f:1d:4c:20:53:0f:de:51:bb: a4:c3:7a:ca:26:9e:36:4c:06:94:80:5b:d9:18:0b: 4c:19:92:cf:45:ad:a9:74:48:a4:9b:ae:aa:47:d3: 97:c2:df:20:e0:ad:41:5f:4e:cb:d0:9e:6e:96:a4: 3b:72:38:27:d6:b6:23:ea:f9:08:26:50:cd:43:6f: 67:06:18:d0:c7:b0:9a:76:33:66:02:de:8b:62:70: 2e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6C:34:5F:BC:B9:58:AF:E2:8B:A4:BF:FD:16:F4:E8:65:C4:FD:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e8cc899-3135-3def-baf7-7434251d5fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1b:3c:e3:f1:68:1f:d1:94:b0:3f:1e:02:92:b3:6f:a0:93: 74:f8:8e:15:8e:0f:8b:64:4e:dd:4a:34:30:4c:1e:09:6d:55: 9e:f8:4a:a0:d9:e8:c2:6d:64:a4:44:54:f5:3e:88:f6:96:6d: 0f:8c:e5:2e:a5:0f:20:a3:1a:82:b5:63:ea:d9:d3:a6:00:84: fe:66:ea:59:d5:b3:20:2f:74:7b:56:0e:02:ce:cd:01:ad:29: af:36:0c:3b:43:19:d2:81:21:9b:70:e8:29:b3:4b:34:21:42: 3c:a6:6a:73:5e:53:2d:86:83:9b:86:f4:b5:74:26:34:5a:de: ab:c1:01:1f:0d:16:48:72:f2:c2:2d:62:8e:21:62:ac:e4:9b: 58:14:89:3e:cc:bb:70:11:78:1e:99:fe:c1:9d:6f:4f:e2:d1: 04:30:b4:16:8e:2e:0b:f6:6d:e4:67:fd:32:d2:ad:de:36:1f: 3d:02:6d:99:91:95:0a:03:77:04:65:7b:be:37:94:03:9f:6c: a3:31:70:bc:5a:09:21:af:09:7f:6e:c2:f3:ab:75:79:1a:d8: 5d:73:e0:11:05:90:ff:1c:78:5d:d3:0c:6d:bd:20:68:a9:bb: 28:70:96:98:88:d7:a1:82:24:6f:1d:72:fa:7a:a7:7f:f1:8a: 71:a6:43:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBmit11P6jATT/uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YzZlMjBhYTAtNWQ5NS00ZDI3LTk0YjctY2I2OWVhNDgwMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUD3FzHLNDzDYUB79jqd5Y9MIXWjcL2HO62y IrGojvDkKal+H8cK87EcVJFRvMIIJMZRpt8rwYoPH7UWt72QcD8EShywBndbb1V8 /mj7vNaiWudW8/w/tpKLqA3BsOouxsRlDo70WBcX4oOHQl8VQQkOFrBkJWWPHNWQ LubUmOK+gKT+CMUau0hA/+Ews41xfYU/jNF5y5+PkqWi0AMvG+5ECp1RMWDqQ+hf HUwgUw/eUbukw3rKJp42TAaUgFvZGAtMGZLPRa2pdEikm66qR9OXwt8g4K1BX07L 0J5ulqQ7cjgn1rYj6vkIJlDNQ29nBhjQx7CadjNmAt6LYnAu2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhsNF+8uViv4oukv/0W9OhlxP2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNGU4Y2M4OTktMzEzNS0z ZGVmLWJhZjctNzQzNDI1MWQ1ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSB/0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgbPOPxaB/RlLA/HgKSs2+gk3T4jhWOD4tkTt1KNDBMHgltVZ74SqDZ 6MJtZKREVPU+iPaWbQ+M5S6lDyCjGoK1Y+rZ06YAhP5m6lnVsyAvdHtWDgLOzQGt Ka82DDtDGdKBIZtw6CmzSzQhQjymanNeUy2Gg5uG9LV0JjRa3qvBAR8NFkhy8sIt Yo4hYqzkm1gUiT7Mu3AReB6Z/sGdb0/i0QQwtBaOLgv2beRn/TLSrd42Hz0CbZmR lQoDdwRle743lAOfbKMxcLxaCSGvCX9uwvOrdXka2F1z4BEFkP8ceF3TDG29IGip uyhwlpiI16GCJG8dcvp6p3/xinGmQ8o= -----END CERTIFICATE-----Generated at Sat Apr 5 03:43:00 2025 by rpki-client