$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/60a2e865-c471-3ee9-baed-a9d2115f86f0.roa File: 60a2e865-c471-3ee9-baed-a9d2115f86f0.roa (raw, json) Hash identifier: 8uC9z+sT0liN5qqfv7M+bJjN4iA8pmLFKCyQYWVaFXY= Subject key identifier: FB:3D:47:BA:BE:23:EF:2C:1A:5C:55:A5:7B:8F:C5:84:2E:54:71:2E Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E006660726A173FC52267980 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/60a2e865-c471-3ee9-baed-a9d2115f86f0.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 33363 IP address blocks: 72.31.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:66:07:26:a1:73:fc:52:26:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=f3694d83-dcd4-46d5-ae64-5cd96651eae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d5:29:0d:a3:e7:ce:39:7c:7c:65:c2:2c:4c: 95:35:88:4c:9d:b3:9b:ab:e0:69:6d:a9:b0:d9:5d: 81:4e:aa:ec:39:b3:8f:d3:77:78:92:4f:3b:77:31: ef:71:53:74:f9:68:6e:a6:b6:50:b9:93:3d:a5:df: c7:b0:cd:b2:c2:8a:18:f2:bf:2f:e6:05:0a:aa:99: 49:9d:b2:2e:83:65:af:a1:18:9b:a0:b7:0a:c1:2d: 94:68:8b:c5:75:8d:92:f9:3c:13:7a:ac:29:b8:0e: b8:ed:8a:82:4a:75:e4:ec:9e:28:bd:7d:19:52:87: e0:47:b2:ba:93:51:f8:a2:8f:b7:07:7f:88:fc:d3: 41:20:0e:ae:05:2c:89:f7:2b:b1:d4:f9:09:00:9a: cc:43:40:4f:ff:2d:76:b2:b6:cc:a9:38:4d:af:c7: 89:2a:8a:ec:06:74:da:f3:dc:66:da:38:7b:65:2a: 26:2f:83:80:d3:a6:14:df:2b:52:35:50:f2:8e:72: 78:29:de:ff:2f:ed:f7:2c:14:ad:ad:69:fb:f1:5e: 42:0d:1b:e0:19:26:81:c1:c9:1b:cc:87:8a:db:53: c3:b3:17:b7:56:d5:65:87:0a:c6:c5:cc:35:25:55: a7:d5:73:fe:30:36:33:4f:ec:d0:29:c1:91:1f:17: 73:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3D:47:BA:BE:23:EF:2C:1A:5C:55:A5:7B:8F:C5:84:2E:54:71:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/60a2e865-c471-3ee9-baed-a9d2115f86f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:3e:c4:5d:0c:f1:b4:fc:65:0f:65:e1:f1:23:8b:67:50:29: 69:57:6b:90:15:69:ee:c4:0d:83:a5:19:a6:80:f3:97:55:47: 17:db:e0:b0:ad:d0:53:65:a0:0b:d1:46:b3:da:18:b6:72:fd: 54:4d:88:d4:bf:f9:c4:f1:52:ce:fa:72:32:f7:1c:4d:f7:a4: 62:e3:c3:08:dc:77:92:28:82:36:6a:38:fc:ad:7d:36:6c:22: 1f:98:68:b1:81:8c:e3:9d:7f:a7:cc:6e:05:97:2b:df:31:66: d3:0c:8e:0d:5b:7e:75:b8:4b:eb:ed:39:66:ff:68:7f:ca:aa: f2:e0:e5:cd:bd:c0:ef:42:df:6c:72:a2:c2:f3:ba:e8:9b:62: 8b:12:62:10:d9:b7:b7:17:f2:a4:14:46:ce:43:51:34:bb:c3: 38:68:f5:48:a1:62:b6:9f:44:01:63:08:78:64:c6:21:d1:24: 74:03:30:12:38:b2:50:a3:09:12:22:0b:ca:15:55:3a:01:e7: de:b3:a7:2a:86:56:6d:4d:4c:3d:91:f3:f3:b0:7d:ce:05:66: b0:60:d0:ec:2f:09:4f:93:2b:78:62:33:16:6d:be:8f:e4:34: 69:10:63:f8:75:02:68:93:1e:5a:c7:64:ef:f3:0d:49:c2:6a: 2c:90:33:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBmYHJqFz/FImeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjM2OTRkODMtZGNkNC00NmQ1LWFlNjQtNWNkOTY2NTFlYWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltUpDaPnzjl8fGXCLEyVNYhMnbObq+Bpbamw 2V2BTqrsObOP03d4kk87dzHvcVN0+WhuprZQuZM9pd/HsM2ywooY8r8v5gUKqplJ nbIug2WvoRiboLcKwS2UaIvFdY2S+TwTeqwpuA647YqCSnXk7J4ovX0ZUofgR7K6 k1H4oo+3B3+I/NNBIA6uBSyJ9yux1PkJAJrMQ0BP/y12srbMqThNr8eJKorsBnTa 89xm2jh7ZSomL4OA06YU3ytSNVDyjnJ4Kd7/L+33LBStrWn78V5CDRvgGSaBwckb zIeK21PDsxe3VtVlhwrGxcw1JVWn1XP+MDYzT+zQKcGRHxdzqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPs9R7q+I+8sGlxVpXuPxYQuVHEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNjBhMmU4NjUtYzQ3MS0z ZWU5LWJhZWQtYTlkMjExNWY4NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESB+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo+xF0M8bT8ZQ9l4fEji2dQKWlXa5AVae7EDYOlGaaA85dVRxfb4LCt 0FNloAvRRrPaGLZy/VRNiNS/+cTxUs76cjL3HE33pGLjwwjcd5IogjZqOPytfTZs Ih+YaLGBjOOdf6fMbgWXK98xZtMMjg1bfnW4S+vtOWb/aH/KqvLg5c29wO9C32xy osLzuuibYosSYhDZt7cX8qQURs5DUTS7wzho9UihYrafRAFjCHhkxiHRJHQDMBI4 slCjCRIiC8oVVToB596zpyqGVm1NTD2R8/Owfc4FZrBg0OwvCU+TK3hiMxZtvo/k NGkQY/h1AmiTHlrHZO/zDUnCaiyQMzI= -----END CERTIFICATE-----Generated at Sat Apr 5 03:44:24 2025 by rpki-client