$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/b76220b4-2974-3e26-adfe-1897e4b5b302.roa File: b76220b4-2974-3e26-adfe-1897e4b5b302.roa (raw, json) Hash identifier: CDtxRxlMor5YO1nfnuUHra4DVBJob81HlD0YWBX4P8A= Subject key identifier: EF:F4:7B:DB:7D:49:5A:28:26:FE:64:C0:96:4E:63:E7:EE:3C:A4:28 Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F4328584902EBFE8D445B828F98F8E100 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/b76220b4-2974-3e26-adfe-1897e4b5b302.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 36100 IP address blocks: 72.10.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:fe:8d:44:5b:82:8f:98:f8:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=86608c6c-49ec-4e8a-bf35-06654d521970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:c7:00:1a:76:0c:53:1e:bc:1d:e2:ac:e5: 57:68:53:28:15:7b:c7:e7:20:c1:37:eb:c0:5c:14: b7:44:eb:5a:b4:7c:24:61:fe:fd:52:80:8a:11:03: 16:bf:d2:22:e6:de:c4:ac:a9:83:11:df:df:d9:db: f7:54:8c:58:9f:7d:13:60:a5:35:ec:e6:46:10:75: b9:d1:78:b0:30:0a:4f:6a:f7:68:5c:20:63:13:2b: 7a:e7:ad:b1:7e:5e:e3:3f:b3:ff:58:61:eb:7a:b0: 8a:44:19:0d:86:d5:88:f5:d9:d0:c2:76:87:76:ef: 65:22:bf:81:89:f5:df:7e:c6:dc:d3:2e:5b:51:56: fa:44:05:2a:3b:fa:20:c6:82:af:c4:0f:e8:b4:2c: 49:0e:f0:16:72:dd:ae:7d:fe:a5:8e:92:90:92:d2: 76:f1:6f:6a:77:3d:36:b8:29:d4:f7:35:b8:4e:51: 5a:4b:3b:3b:20:9b:1c:89:75:5e:57:fc:b4:87:e1: 0d:12:3a:79:f9:5a:89:72:2d:08:e6:d1:63:17:3a: 89:28:9d:fe:74:80:54:f4:1f:5c:54:50:51:53:67: 76:ec:9b:d3:7e:e6:6b:23:e0:30:c1:45:60:cd:fe: e1:eb:53:2c:88:98:e2:52:ae:6b:67:e5:ac:3f:57: d2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F4:7B:DB:7D:49:5A:28:26:FE:64:C0:96:4E:63:E7:EE:3C:A4:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/b76220b4-2974-3e26-adfe-1897e4b5b302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 72.10.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:fd:d0:20:92:8a:96:3e:4e:d7:c8:5e:c1:f2:6e:f0:89:6b: f4:2a:91:68:6d:fc:54:fb:07:c7:a4:be:35:26:34:0a:21:cf: 61:14:dc:12:8c:f5:8a:13:0f:4d:fe:47:dc:4b:71:c1:f4:80: 9a:09:3a:aa:d6:d2:30:e2:c1:05:79:9c:3e:58:32:5f:af:9a: 51:e4:f5:cc:ca:2e:42:a9:64:45:bd:76:a2:cb:f7:27:75:cd: f6:4f:fb:11:2c:6b:04:43:b5:8c:6f:47:69:24:84:c0:71:c4: f0:de:a8:47:6f:10:3d:22:86:be:77:f8:e6:ef:19:d5:c5:56: f3:62:82:d4:97:55:f6:f6:86:da:f5:bf:4f:58:43:be:6b:78: a0:2e:de:ff:3d:12:14:a9:cc:77:ed:2d:43:bd:85:c7:39:95: b0:13:b3:8d:2a:05:32:ee:0e:f4:0f:7d:1e:22:40:4f:81:95: 36:08:10:4b:34:ea:30:e5:d1:7d:88:eb:6f:71:4d:a3:ef:09: 04:68:8c:54:ca:2c:55:c1:0c:33:9d:ff:2b:f8:5b:04:b4:b8: ed:4b:87:82:3b:53:39:87:ff:10:f0:e2:78:ef:44:d2:35:c2: a7:77:f6:6a:3a:65:13:9f:d2:f2:41:04:d4:18:f0:94:d8:9a: 52:f9:b9:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/6NRFuCj5j44QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ODY2MDhjNmMtNDllYy00ZThhLWJmMzUtMDY2NTRkNTIxOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhLHABp2DFMevB3irOVXaFMoFXvH5yDBN+vA XBS3ROtatHwkYf79UoCKEQMWv9Ii5t7ErKmDEd/f2dv3VIxYn30TYKU17OZGEHW5 0XiwMApPavdoXCBjEyt6562xfl7jP7P/WGHrerCKRBkNhtWI9dnQwnaHdu9lIr+B ifXffsbc0y5bUVb6RAUqO/ogxoKvxA/otCxJDvAWct2uff6ljpKQktJ28W9qdz02 uCnU9zW4TlFaSzs7IJsciXVeV/y0h+ENEjp5+VqJci0I5tFjFzqJKJ3+dIBU9B9c VFBRU2d27JvTfuZrI+AwwUVgzf7h61MsiJjiUq5rZ+WsP1fSGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/0e9t9SVooJv5kwJZOY+fuPKQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvYjc2MjIwYjQtMjk3NC0z ZTI2LWFkZmUtMTg5N2U0YjViMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSArEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/90CCSipY+TtfIXsHybvCJa/QqkWht/FT7B8ekvjUmNAohz2EU3BKM 9YoTD03+R9xLccH0gJoJOqrW0jDiwQV5nD5YMl+vmlHk9czKLkKpZEW9dqLL9yd1 zfZP+xEsawRDtYxvR2kkhMBxxPDeqEdvED0ihr53+ObvGdXFVvNigtSXVfb2htr1 v09YQ75reKAu3v89EhSpzHftLUO9hcc5lbATs40qBTLuDvQPfR4iQE+BlTYIEEs0 6jDl0X2I629xTaPvCQRojFTKLFXBDDOd/yv4WwS0uO1Lh4I7UzmH/xDw4njvRNI1 wqd39mo6ZROf0vJBBNQY8JTYmlL5uR8= -----END CERTIFICATE-----Generated at Fri Mar 14 13:28:32 2025 by rpki-client