$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/b76220b4-2974-3e26-adfe-1897e4b5b302.roa File: b76220b4-2974-3e26-adfe-1897e4b5b302.roa (raw, json) Hash identifier: RsXGnzlJjIuPUPzA7wRP6BN5gEY3dt1YmZvytv+EmyU= Subject key identifier: 22:5C:F8:30:18:BA:A6:4B:18:27:30:19:70:05:AB:B8:2A:59:18:06 Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F43285849E22518B7E2F857E1F58D7DC0 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/b76220b4-2974-3e26-adfe-1897e4b5b302.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 36100 IP address blocks: 72.10.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:18:b7:e2:f8:57:e1:f5:8d:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=3fabc888-feed-4dc9-9f20-0ce08644f42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:29:9c:d5:12:be:c3:b9:8b:71:a0:b9:32:d8: 64:ed:89:3a:71:d9:cc:16:6d:0a:94:0f:9e:cc:af: d7:b3:27:2b:29:22:4c:e5:6b:ae:d3:d0:05:b0:8c: 3d:60:61:8a:d9:00:fa:49:3d:89:c4:97:70:64:25: e2:e3:2c:1f:73:61:59:4c:c6:63:85:5b:6a:bb:92: fd:9b:a3:48:f4:27:42:58:53:ac:bd:05:a0:32:b9: 73:df:75:41:77:79:81:06:7e:40:fc:67:57:a4:db: 58:fc:5b:b8:cf:b5:0a:c0:db:6a:57:14:7d:c6:3f: b0:12:85:f2:04:94:d8:40:bf:56:35:87:b3:39:34: a0:05:88:06:db:a9:d2:ad:cf:b9:ff:88:5f:a3:c2: c7:6c:2d:b0:9d:cb:ea:be:69:5a:56:8a:0a:cb:c2: 75:53:f7:88:43:8c:72:4b:42:18:fc:80:56:f0:a1: 61:87:25:c5:40:05:cb:16:b5:89:ce:65:b4:01:7d: 77:a2:e5:41:03:da:23:4e:f7:a9:dd:94:ea:17:03: bb:fe:49:6f:59:6a:5d:6c:08:ac:f1:ef:bd:3a:a0: 54:bd:1d:da:c0:f2:97:78:c9:85:71:53:97:17:5e: 02:9f:55:ce:0a:73:d3:1e:0a:e3:f6:7c:12:77:bb: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5C:F8:30:18:BA:A6:4B:18:27:30:19:70:05:AB:B8:2A:59:18:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/b76220b4-2974-3e26-adfe-1897e4b5b302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 72.10.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:55:a8:82:fe:12:0f:31:23:e2:23:4f:e4:4b:db:2e:82:d5: fd:c3:90:a6:0d:a3:89:f0:52:4d:73:19:d4:95:2e:f2:69:f7: b6:1b:f5:80:2b:51:28:4d:31:54:fa:48:85:c9:be:47:36:9c: 48:18:81:1e:8c:35:ea:2a:34:97:7c:03:ca:83:4a:1e:74:6c: d1:4a:ff:c9:89:60:18:84:bd:5f:8d:a9:7f:9a:4b:16:24:dd: d8:bc:37:8c:a9:01:c9:a3:94:fe:ab:d0:66:d7:6f:1f:7f:89: 70:ac:c0:5f:a4:47:05:3a:4b:25:b6:ab:dd:85:88:67:63:7c: 10:a8:31:35:c6:72:f8:0f:74:0a:68:1d:1e:95:46:9f:c7:4a: c9:72:a8:99:fe:7c:91:f9:40:76:7d:4b:22:ed:75:47:bb:99: 7c:1e:38:bc:01:cc:82:31:c1:cd:17:df:83:a6:00:dd:2e:36: 5f:9b:78:11:64:80:20:65:d7:2e:8a:d0:77:1c:3b:ba:ed:13: ac:73:8b:69:1a:27:5c:2e:5f:c2:92:ef:32:31:10:55:ae:bd: 30:42:8b:b5:3c:6b:f2:e9:c4:df:56:0d:d3:f4:cc:b2:d6:f8: 3d:7a:05:e5:fe:59:eb:6c:9f:9a:ad:a3:9c:4b:ed:20:cf:d0: 7f:f3:5c:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJRi34vhX4fWNfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk M2ZhYmM4ODgtZmVlZC00ZGM5LTlmMjAtMGNlMDg2NDRmNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgymc1RK+w7mLcaC5Mthk7Yk6cdnMFm0KlA+e zK/XsycrKSJM5Wuu09AFsIw9YGGK2QD6ST2JxJdwZCXi4ywfc2FZTMZjhVtqu5L9 m6NI9CdCWFOsvQWgMrlz33VBd3mBBn5A/GdXpNtY/Fu4z7UKwNtqVxR9xj+wEoXy BJTYQL9WNYezOTSgBYgG26nSrc+5/4hfo8LHbC2wncvqvmlaVooKy8J1U/eIQ4xy S0IY/IBW8KFhhyXFQAXLFrWJzmW0AX13ouVBA9ojTvep3ZTqFwO7/klvWWpdbAis 8e+9OqBUvR3awPKXeMmFcVOXF14Cn1XOCnPTHgrj9nwSd7tqtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJc+DAYuqZLGCcwGXAFq7gqWRgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvYjc2MjIwYjQtMjk3NC0z ZTI2LWFkZmUtMTg5N2U0YjViMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSArEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtVqIL+Eg8xI+IjT+RL2y6C1f3DkKYNo4nwUk1zGdSVLvJp97Yb9YAr UShNMVT6SIXJvkc2nEgYgR6MNeoqNJd8A8qDSh50bNFK/8mJYBiEvV+NqX+aSxYk 3di8N4ypAcmjlP6r0GbXbx9/iXCswF+kRwU6SyW2q92FiGdjfBCoMTXGcvgPdApo HR6VRp/HSslyqJn+fJH5QHZ9SyLtdUe7mXweOLwBzIIxwc0X34OmAN0uNl+beBFk gCBl1y6K0HccO7rtE6xzi2kaJ1wuX8KS7zIxEFWuvTBCi7U8a/LpxN9WDdP0zLLW +D16BeX+Wetsn5qto5xL7SDP0H/zXGo= -----END CERTIFICATE-----Generated at Sat Jun 7 04:04:04 2025 by rpki-client