$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa File: 0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa (raw, json) Hash identifier: sAwHnRh7981qsxp45Yfa+aGEcO6QbWgY/e0Ze2ptuz0= Subject key identifier: DA:DB:8E:7A:CB:44:6F:9A:A5:42:1F:3E:CA:CF:3A:8C:EF:E2:EB:E3 Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F4328584902EBFE9CF4B64DD411A9BB40 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 36100 IP address blocks: 72.10.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:fe:9c:f4:b6:4d:d4:11:a9:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=03158783-2792-435e-bfe5-efa8fa6e3832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:5a:b6:48:34:8d:86:12:fd:a8:b4:8d:18: c3:64:af:e7:d0:26:14:26:b3:30:8b:83:a1:1f:fd: d2:a9:d9:c1:50:f7:6d:8b:30:ca:3e:50:81:ab:80: 71:00:aa:c7:3e:16:79:0a:e0:92:73:13:ea:f8:0a: 76:f4:a5:63:62:7b:0a:82:1e:e3:c2:0b:42:b9:b5: ea:60:6e:41:3f:33:52:f5:60:38:cb:11:bb:e2:0f: a2:3a:8f:7b:2b:80:1d:15:be:d6:8d:48:4b:ce:8c: c4:06:65:0c:9f:54:51:14:80:06:1c:43:a8:36:dd: 71:4f:13:f1:fa:7d:80:0d:4d:74:14:78:a5:6b:21: b3:8b:f9:fb:16:08:68:cb:5a:a6:e3:20:69:7d:1c: 82:83:75:3f:d9:42:c1:c9:99:7a:3f:6b:07:b0:48: f3:8a:70:04:92:ec:e6:e5:72:28:bc:76:a2:eb:ee: ab:5d:e8:96:29:e7:1d:f5:3a:74:96:c9:2e:d3:46: d5:04:e9:fa:21:06:79:5c:ab:b3:3b:05:99:bf:12: 86:ef:0c:4e:cd:1b:c9:83:54:30:6d:25:d1:26:6a: f6:1d:49:8e:1d:1b:bb:e1:c6:b2:d3:43:27:02:a1: 1a:25:b7:6a:18:72:4f:59:5c:14:fd:44:d8:c9:19: 2c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DB:8E:7A:CB:44:6F:9A:A5:42:1F:3E:CA:CF:3A:8C:EF:E2:EB:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 72.10.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:90:57:77:e8:f8:a5:70:aa:85:44:26:c0:cf:0a:ea:8f:aa: d6:08:07:03:0d:05:5e:bd:5d:29:08:53:cc:b1:56:0c:e1:92: d2:e1:cf:8e:7c:94:3a:7c:47:43:39:d5:08:9b:5b:58:58:f9: 84:9d:f0:08:0a:7b:3e:5c:54:56:e4:fe:87:95:57:22:b1:9d: af:33:bb:3a:ce:cd:fd:1a:b3:cd:e9:1e:f2:5b:c0:8a:3e:f6: 8a:38:dd:31:6d:e4:ae:cd:88:c4:f3:ff:d6:cd:63:97:32:53: 18:47:60:1b:52:4e:98:86:2f:b6:3d:64:2b:9e:3a:6d:1b:26: 17:9d:e7:08:8a:bd:03:6d:23:6b:4f:c6:40:5d:5f:65:70:a1: 88:07:f9:0c:c0:f3:da:3b:0d:ed:69:68:9f:be:16:e6:0b:5a: d1:df:03:fe:d3:06:d1:b6:ca:7c:bd:6b:c1:84:a5:e5:b6:2b: e7:46:1d:51:81:45:14:1a:0b:1f:15:d5:ed:51:ea:1c:28:dc: c3:c5:fa:e6:a8:b7:aa:f2:f0:e9:ec:91:f8:5e:83:8f:60:41: 2c:61:f7:14:7c:97:32:f2:24:c6:6e:92:35:db:7d:44:4f:ca: 89:ff:e5:0b:cc:0a:0e:25:8f:e0:36:98:f9:61:6f:33:0f:59: d4:83:85:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/6c9LZN1BGpu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MDMxNTg3ODMtMjc5Mi00MzVlLWJmZTUtZWZhOGZhNmUzODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulZatkg0jYYS/ai0jRjDZK/n0CYUJrMwi4Oh H/3SqdnBUPdtizDKPlCBq4BxAKrHPhZ5CuCScxPq+Ap29KVjYnsKgh7jwgtCubXq YG5BPzNS9WA4yxG74g+iOo97K4AdFb7WjUhLzozEBmUMn1RRFIAGHEOoNt1xTxPx +n2ADU10FHilayGzi/n7Fghoy1qm4yBpfRyCg3U/2ULByZl6P2sHsEjzinAEkuzm 5XIovHai6+6rXeiWKecd9Tp0lsku00bVBOn6IQZ5XKuzOwWZvxKG7wxOzRvJg1Qw bSXRJmr2HUmOHRu74cay00MnAqEaJbdqGHJPWVwU/UTYyRksOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrbjnrLRG+apUIfPsrPOozv4uvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvMGU4OWJkYmEtMDljNC0z ZjliLTlmNTUtNDkyY2EyOTFhYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSArMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCQV3fo+KVwqoVEJsDPCuqPqtYIBwMNBV69XSkIU8yxVgzhktLhz458 lDp8R0M51QibW1hY+YSd8AgKez5cVFbk/oeVVyKxna8zuzrOzf0as83pHvJbwIo+ 9oo43TFt5K7NiMTz/9bNY5cyUxhHYBtSTpiGL7Y9ZCueOm0bJhed5wiKvQNtI2tP xkBdX2VwoYgH+QzA89o7De1paJ++FuYLWtHfA/7TBtG2yny9a8GEpeW2K+dGHVGB RRQaCx8V1e1R6hwo3MPF+uaot6ry8Onskfheg49gQSxh9xR8lzLyJMZukjXbfURP yon/5QvMCg4lj+A2mPlhbzMPWdSDhbs= -----END CERTIFICATE-----Generated at Fri Mar 14 10:53:46 2025 by rpki-client