$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/38f83ce5-2988-37ed-a3dd-524801d41b91.roa File: 38f83ce5-2988-37ed-a3dd-524801d41b91.roa (raw, json) Hash identifier: cejo3atzBIiuWdgjIzrefnLQ/Dw0hwWdR9Il3wcIvos= Subject key identifier: 05:35:E0:92:E5:65:C2:8B:E9:4C:E5:00:D9:53:14:55:EF:AE:E1:B5 Certificate issuer: /CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e Certificate serial: 010D0C9F43285849244E820074B25BCC7E2CAA80 Authority key identifier: 7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/38f83ce5-2988-37ed-a3dd-524801d41b91.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 393444 IP address blocks: 72.46.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:82:00:74:b2:5b:cc:7e:2c:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=45c2b0bc-2897-4ecf-bb3f-d024388a1e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:d2:7d:7a:da:2f:ed:03:7b:c7:16:8e:ae: e5:9f:43:39:31:87:ae:1d:d1:62:50:da:2e:f0:b3: 34:4b:eb:d7:ad:ec:23:c1:51:e2:e6:28:a8:a3:0f: c7:dc:b9:bd:2e:06:e0:2b:93:02:46:5b:d0:1d:f4: 6d:e2:a8:fa:2e:05:42:62:85:90:36:ce:92:d8:8b: 05:19:b6:f2:b7:5f:f5:0b:6d:db:81:8d:9e:c4:b8: c6:52:89:3e:57:49:7e:fd:43:52:3b:94:9e:ff:4d: b5:7f:3f:f2:d1:f2:20:f0:9c:92:f2:fc:9a:34:b9: 5c:a8:47:be:76:03:2b:6e:e0:fc:9f:52:bf:fe:ea: 14:85:4d:a0:0e:0d:69:c9:0d:d7:0f:e2:7e:d8:ba: b9:fa:1f:96:70:1a:98:0d:15:8b:56:c1:78:96:05: 39:48:05:52:23:72:9e:e4:0a:68:bb:c5:df:d5:a5: f7:fc:0c:0f:88:67:ff:62:5b:82:dd:7d:26:74:c0: b3:13:a7:a9:19:61:b1:37:f1:5c:fd:6b:fe:5f:98: 3c:c2:7d:37:cc:bd:c0:27:88:3c:35:71:6d:ce:45: b7:7e:02:e9:7c:d9:4d:fd:39:97:38:7b:77:82:b5: db:e5:d1:66:7c:5e:da:bd:9b:dc:98:2d:03:29:07: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:35:E0:92:E5:65:C2:8B:E9:4C:E5:00:D9:53:14:55:EF:AE:E1:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/38f83ce5-2988-37ed-a3dd-524801d41b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.crl X509v3 Authority Key Identifier: keyid:7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer sbgp-ipAddrBlock: critical IPv4: 72.46.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:82:b5:aa:3f:a7:12:0d:d9:aa:35:8f:54:3e:9b:b1:40:80: 38:85:b0:c2:25:f2:b3:a9:97:59:37:2a:a2:31:1e:54:af:84: c9:23:33:d1:e6:64:e2:36:4b:d6:be:9c:3e:63:e2:01:b3:61: 6c:8d:e3:ee:c4:5d:27:f2:3c:4a:19:aa:7c:92:77:cb:ce:e5: 58:8a:95:77:4c:4b:3d:5d:4a:44:a0:7c:3a:be:ab:c6:94:63: 89:f0:f6:2c:e0:f9:c9:e9:15:bd:5e:75:46:a9:8a:7b:cc:42: 77:24:bb:38:3c:6d:e8:8c:52:46:70:1f:e5:1c:6f:69:5f:e5: b6:19:fb:21:39:50:3e:14:e3:4c:4a:cb:84:6d:f8:bd:ec:0e: 3c:44:7e:88:5b:ac:ab:cb:c6:5a:7d:64:61:85:af:f9:da:e7: 56:11:17:84:76:ac:b7:ac:57:cd:52:95:6c:6e:4c:4d:6b:e5: 55:ce:22:b6:fa:3b:d7:36:35:a0:d2:55:b5:71:9d:a7:82:dd: 3c:5c:5e:7e:71:d9:c2:ca:dd:a3:be:5a:a9:e9:ed:2d:0b:1a: 3e:fc:5c:ff:b0:6c:e8:a9:61:d8:ad:6b:6c:2a:6b:04:bd:98: 0e:f5:c1:2b:95:60:fe:58:fe:77:85:b3:89:df:22:85:7f:cb: 51:95:ee:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToIAdLJbzH4sqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNiNzA3YWItYjRhNi00MmRlLWE3YmMtNjExNWNhNGIz YjNlMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NDVjMmIwYmMtMjg5Ny00ZWNmLWJiM2YtZDAyNDM4OGExZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL7SfXraL+0De8cWjq7ln0M5MYeuHdFiUNou 8LM0S+vXrewjwVHi5iioow/H3Lm9LgbgK5MCRlvQHfRt4qj6LgVCYoWQNs6S2IsF Gbbyt1/1C23bgY2exLjGUok+V0l+/UNSO5Se/021fz/y0fIg8JyS8vyaNLlcqEe+ dgMrbuD8n1K//uoUhU2gDg1pyQ3XD+J+2Lq5+h+WcBqYDRWLVsF4lgU5SAVSI3Ke 5Apou8Xf1aX3/AwPiGf/YluC3X0mdMCzE6epGWGxN/Fc/Wv+X5g8wn03zL3AJ4g8 NXFtzkW3fgLpfNlN/TmXOHt3grXb5dFmfF7avZvcmC0DKQf23QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAU14JLlZcKL6UzlANlTFFXvruG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kM2I3 MDdhYi1iNGE2LTQyZGUtYTdiYy02MTE1Y2E0YjNiM2UvMzhmODNjZTUtMjk4OC0z N2VkLWEzZGQtNTI0ODAxZDQxYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDNiNzA3YWItYjRhNi00MmRlLWE3 YmMtNjExNWNhNGIzYjNlL2QzYjcwN2FiLWI0YTYtNDJkZS1hN2JjLTYxMTVjYTRi M2IzZS5jcmwwHwYDVR0jBBgwFoAUfJHGfxtHvmz7MjJQ7wdSafRVrsAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kM2I3MDdhYi1iNGE2LTQyZGUtYTdiYy02MTE1 Y2E0YjNiM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESC5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiCtao/pxIN2ao1j1Q+m7FAgDiFsMIl8rOpl1k3KqIxHlSvhMkjM9Hm ZOI2S9a+nD5j4gGzYWyN4+7EXSfyPEoZqnySd8vO5ViKlXdMSz1dSkSgfDq+q8aU Y4nw9izg+cnpFb1edUapinvMQnckuzg8beiMUkZwH+Ucb2lf5bYZ+yE5UD4U40xK y4Rt+L3sDjxEfohbrKvLxlp9ZGGFr/na51YRF4R2rLesV81SlWxuTE1r5VXOIrb6 O9c2NaDSVbVxnaeC3TxcXn5x2cLK3aO+Wqnp7S0LGj78XP+wbOipYdita2wqawS9 mA71wSuVYP5Y/neFs4nfIoV/y1GV7uM= -----END CERTIFICATE-----Generated at Sat Apr 12 15:37:09 2025 by rpki-client