$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/afc3a8a9-0b9c-3dfd-8b01-4e21f9382c1f.roa File: afc3a8a9-0b9c-3dfd-8b01-4e21f9382c1f.roa (raw, json) Hash identifier: ATBrpvKcFxecds8GaLlT1a0EYVJakPnxpXG1M8YMOQE= Subject key identifier: 66:76:ED:81:FC:2A:79:91:3E:0B:28:66:86:4A:CF:C6:2F:0C:B2:41 Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F4328584905B6B79E71DCF1F9CA3B0B00 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/afc3a8a9-0b9c-3dfd-8b01-4e21f9382c1f.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 21743 IP address blocks: 172.111.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b7:9e:71:dc:f1:f9:ca:3b:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=4ffe4947-b93a-4779-9bb1-79191160512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4d:cd:b4:2b:73:23:e3:08:b5:ae:1a:48:53: 10:c6:d4:5c:c3:fe:82:a2:c8:16:05:44:c4:ff:0a: f9:4d:54:b7:fa:a6:d8:aa:ab:96:4c:b6:aa:af:13: 75:7d:75:7f:a7:18:06:eb:3b:79:50:7c:94:91:d7: da:65:48:8e:03:73:bb:c5:1b:47:5c:f6:65:c4:3b: a1:0c:69:67:74:ab:55:83:f8:ef:9a:be:69:a3:5b: 03:68:39:39:5e:13:d0:fc:1b:96:16:20:ba:63:30: db:f1:cc:30:2c:97:7f:bd:d8:88:31:fd:71:b9:cd: 57:23:c4:1c:3e:31:eb:2b:fb:fc:0a:66:0e:28:3b: 03:6f:83:b1:ef:0f:71:a6:f1:df:4b:15:f6:04:e6: 0f:02:d2:11:a1:ea:14:4a:85:6b:f9:d9:86:62:9e: 61:de:bc:52:9f:44:ff:25:ef:05:50:cc:65:a5:a8: 87:33:2c:93:e4:37:61:59:95:fa:a6:72:06:11:2d: 1c:a9:f5:4b:2e:0a:fc:9c:bc:f8:9d:78:13:c3:66: ea:56:2f:d7:f9:db:49:8c:fe:72:ef:b4:8f:0a:a3: bc:17:8e:06:8c:17:49:24:54:7a:11:0d:97:8d:56: 9f:6c:2f:06:e4:da:0a:25:ab:8c:7a:87:08:57:92: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:76:ED:81:FC:2A:79:91:3E:0B:28:66:86:4A:CF:C6:2F:0C:B2:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/afc3a8a9-0b9c-3dfd-8b01-4e21f9382c1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:38:09:32:42:ed:e2:c3:33:07:ce:a6:56:66:e8:1b:86:31: ff:12:0c:b1:f9:fc:ed:3e:7b:cc:fe:bd:63:1d:57:cd:6c:01: 84:48:25:60:e2:d1:15:e7:e8:52:1b:06:b8:b1:c6:22:f0:63: ec:dd:6f:31:86:1c:66:85:dd:c3:bc:bc:cd:5e:44:b3:93:52: 55:7b:33:03:ed:08:20:97:96:73:57:17:80:64:ec:a8:e1:f5: ce:eb:af:a2:13:a8:be:61:f1:79:15:69:9b:1d:ed:e2:be:7a: 0c:bb:c7:ff:28:ba:b7:3c:31:c8:93:81:a4:f7:a6:71:2f:a8: ff:56:5f:a7:bc:84:a3:13:b6:bd:f9:ce:e2:09:f0:eb:3c:93: 48:b9:b4:4e:f9:25:72:a5:1c:90:48:c9:f6:1d:95:13:3f:bc: 06:94:5d:59:e2:db:25:79:92:41:e5:7a:56:64:de:1d:da:01: 92:99:72:4e:09:35:6a:36:0a:17:b5:6b:9b:84:95:78:07:80: 2f:29:4c:f3:be:ff:f2:eb:4a:f0:77:c2:fa:49:38:c6:1b:b2: 14:1c:c5:44:2a:ce:b7:11:37:9a:38:08:28:bf:53:ab:e7:5c: 89:36:e6:6d:3d:a2:ff:04:d9:c4:b4:26:cf:e4:73:75:a8:99: 82:b1:9d:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtreecdzx+co7CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NGZmZTQ5NDctYjkzYS00Nzc5LTliYjEtNzkxOTExNjA1MTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA403NtCtzI+MIta4aSFMQxtRcw/6CosgWBUTE /wr5TVS3+qbYqquWTLaqrxN1fXV/pxgG6zt5UHyUkdfaZUiOA3O7xRtHXPZlxDuh DGlndKtVg/jvmr5po1sDaDk5XhPQ/BuWFiC6YzDb8cwwLJd/vdiIMf1xuc1XI8Qc PjHrK/v8CmYOKDsDb4Ox7w9xpvHfSxX2BOYPAtIRoeoUSoVr+dmGYp5h3rxSn0T/ Je8FUMxlpaiHMyyT5DdhWZX6pnIGES0cqfVLLgr8nLz4nXgTw2bqVi/X+dtJjP5y 77SPCqO8F44GjBdJJFR6EQ2XjVafbC8G5NoKJauMeocIV5K51wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZ27YH8KnmRPgsoZoZKz8YvDLJBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvYWZjM2E4YTktMGI5Yy0z ZGZkLThiMDEtNGUyMWY5MzgyYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG87MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM4CTJC7eLDMwfOplZm6BuGMf8SDLH5/O0+e8z+vWMdV81sAYRIJWDi 0RXn6FIbBrixxiLwY+zdbzGGHGaF3cO8vM1eRLOTUlV7MwPtCCCXlnNXF4Bk7Kjh 9c7rr6ITqL5h8XkVaZsd7eK+egy7x/8ourc8MciTgaT3pnEvqP9WX6e8hKMTtr35 zuIJ8Os8k0i5tE75JXKlHJBIyfYdlRM/vAaUXVni2yV5kkHlelZk3h3aAZKZck4J NWo2Che1a5uElXgHgC8pTPO+//LrSvB3wvpJOMYbshQcxUQqzrcRN5o4CCi/U6vn XIk25m09ov8E2cS0Js/kc3WomYKxnY8= -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:22 2025 by rpki-client