$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa File: e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa (raw, json) Hash identifier: yviY+1fpgCkHr8MPirQX9jAjzxkXPx99e5v5bvQqh50= Subject key identifier: AB:29:FE:FA:3E:2A:13:A3:CE:BB:09:96:49:9F:DB:CC:76:B8:9A:C6 Certificate issuer: /CN=b794e507-3ed1-4151-855d-6305696fcb0c Certificate serial: 010D0C9F43285848854B49F526C0FBC945665140 Authority key identifier: D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 26464 IP address blocks: 72.2.112.0/20 maxlen: 20 72.2.112.0/21 maxlen: 21 72.2.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:49:f5:26:c0:fb:c9:45:66:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b794e507-3ed1-4151-855d-6305696fcb0c Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=36b9b585-04d6-42f5-8fb7-86c4f481db14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:dd:cc:a7:01:2a:1f:87:f5:1a:5b:5b:33: 9b:68:fb:e5:df:6c:be:4c:72:fc:a9:fc:85:47:12: 7d:ed:aa:e8:14:e0:25:38:b3:aa:34:21:62:35:35: 1b:2f:a9:64:06:85:40:c8:a3:1a:a4:ec:af:5e:29: 8f:9e:09:7c:55:4e:92:ed:f2:35:85:53:bd:98:a1: b6:c7:e8:47:f9:27:f0:ed:d3:95:55:fd:0f:c1:64: 4e:75:c8:3d:0e:de:f3:35:cd:bc:66:f9:ce:48:ec: 6d:1a:1e:14:b8:3e:1f:97:9f:ea:9f:3a:38:61:61: bb:91:9c:9e:0d:63:3c:0a:c8:5b:81:4e:6c:a0:3d: a4:b2:ea:39:2e:fb:1d:41:82:4a:00:0e:49:57:08: f9:8e:e1:25:5f:52:b0:f6:d6:fc:e5:c7:f0:5c:f2: 54:1f:82:e0:bb:bd:cf:51:da:78:72:86:e8:06:2c: 84:f9:a9:82:e2:c3:8a:3e:c8:1d:42:e1:27:f0:fd: 74:2b:6d:93:cd:56:6a:12:09:10:53:24:c3:ea:f5: ec:c2:74:08:62:82:e1:7b:70:44:8b:78:d4:d4:7f: ba:c7:42:6f:98:be:79:a6:1c:0e:3f:f4:9b:17:7f: c9:73:f4:f7:e2:7d:18:8d:25:85:a5:23:f2:93:c8: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:29:FE:FA:3E:2A:13:A3:CE:BB:09:96:49:9F:DB:CC:76:B8:9A:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl X509v3 Authority Key Identifier: keyid:D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer sbgp-ipAddrBlock: critical IPv4: 72.2.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d8:bb:4f:e6:32:94:93:7a:38:65:03:f0:93:a8:c9:86:84: 9f:a7:1d:24:76:3a:77:10:33:b1:7f:ef:20:86:21:50:0f:74: 41:03:b9:d5:49:73:a3:71:d3:a4:b1:d9:62:b7:b6:a9:d4:35: 30:a0:a9:1b:c5:53:83:92:54:de:16:dd:64:59:aa:3e:61:b5: 4f:41:47:27:26:5f:56:0d:d9:b7:2b:70:30:76:00:ea:5f:17: 87:41:47:b5:4e:1c:db:d1:de:52:06:7a:fe:ce:7b:ea:a0:0f: 89:9f:e7:3c:1b:7f:46:0e:87:83:47:e3:94:ec:c5:f5:91:85: 4f:0f:a6:db:5f:1c:fa:9c:61:67:4e:d5:0b:26:0f:78:47:58: 4a:09:d3:e8:63:af:9e:de:ed:82:02:c2:c0:dd:4b:48:f8:ec: 36:a2:3b:59:87:74:e3:08:56:8c:06:24:85:ea:4a:ae:f9:64: 02:f3:dc:2a:ef:1b:19:33:e4:ab:55:7d:3b:71:c9:a3:e1:05: 9e:61:b1:de:83:74:80:7d:ea:0e:1f:68:8e:ca:75:c4:22:77: 9d:2f:73:db:e8:71:d8:80:63:d4:b9:9b:40:52:ac:e4:76:19: c6:a5:72:e0:04:0a:fe:88:b3:8a:b3:64:ff:58:e0:d7:85:70: 25:0c:ac:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0n1JsD7yUVmUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc5NGU1MDctM2VkMS00MTUxLTg1NWQtNjMwNTY5NmZj YjBjMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk MzZiOWI1ODUtMDRkNi00MmY1LThmYjctODZjNGY0ODFkYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj/dzKcBKh+H9RpbWzObaPvl32y+THL8qfyF RxJ97aroFOAlOLOqNCFiNTUbL6lkBoVAyKMapOyvXimPngl8VU6S7fI1hVO9mKG2 x+hH+Sfw7dOVVf0PwWROdcg9Dt7zNc28ZvnOSOxtGh4UuD4fl5/qnzo4YWG7kZye DWM8CshbgU5soD2ksuo5LvsdQYJKAA5JVwj5juElX1Kw9tb85cfwXPJUH4Lgu73P Udp4coboBiyE+amC4sOKPsgdQuEn8P10K22TzVZqEgkQUyTD6vXswnQIYoLhe3BE i3jU1H+6x0JvmL55phwOP/SbF3/Jc/T34n0YjSWFpSPyk8ivAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsp/vo+KhOjzrsJlkmf28x2uJrGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzk0 ZTUwNy0zZWQxLTQxNTEtODU1ZC02MzA1Njk2ZmNiMGMvZThmY2QwOTgtNDJkZS0z MjRlLWI0ZDMtMTZmYzBjYzc2NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc5NGU1MDctM2VkMS00MTUxLTg1 NWQtNjMwNTY5NmZjYjBjL2I3OTRlNTA3LTNlZDEtNDE1MS04NTVkLTYzMDU2OTZm Y2IwYy5jcmwwHwYDVR0jBBgwFoAU0Wc+CZb5OgotlSi+dXKdFTgc8JAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzk0ZTUwNy0zZWQxLTQxNTEtODU1ZC02MzA1 Njk2ZmNiMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTYu0/mMpSTejhlA/CTqMmGhJ+nHSR2OncQM7F/7yCGIVAPdEEDudVJ c6Nx06Sx2WK3tqnUNTCgqRvFU4OSVN4W3WRZqj5htU9BRycmX1YN2bcrcDB2AOpf F4dBR7VOHNvR3lIGev7Oe+qgD4mf5zwbf0YOh4NH45TsxfWRhU8PpttfHPqcYWdO 1QsmD3hHWEoJ0+hjr57e7YICwsDdS0j47DaiO1mHdOMIVowGJIXqSq75ZALz3Crv Gxkz5KtVfTtxyaPhBZ5hsd6DdIB96g4faI7KdcQid50vc9vocdiAY9S5m0BSrOR2 GcalcuAECv6Is4qzZP9Y4NeFcCUMrDQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:37 2025 by rpki-client