$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/ea33c2ef-d71d-3d26-89ed-3fdabf5d01fd.roa File: ea33c2ef-d71d-3d26-89ed-3fdabf5d01fd.roa (raw, json) Hash identifier: 1+HqbjL8EB6AHJ4CQfw8bUTd6rpB3AY4Pqt6z2xHtx0= Subject key identifier: 8F:A1:0D:80:63:65:05:70:10:7E:2F:23:C2:24:E4:A9:11:DA:05:1F Certificate issuer: /CN=fc9e4738-7902-435b-802c-f37dc4b25f95 Certificate serial: 010D0C9F432858489DF2407BECA2CC24B7F93420 Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/ea33c2ef-d71d-3d26-89ed-3fdabf5d01fd.roa Signing time: Tue 21 Jan 2025 09:56:54 +0000 ROA not before: Tue 21 Jan 2025 09:56:54 +0000 ROA not after: Mon 21 Apr 2025 08:56:54 +0000 asID: 6079 IP address blocks: 72.1.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:f2:40:7b:ec:a2:cc:24:b7:f9:34:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95 Validity Not Before: Jan 21 09:56:54 2025 GMT Not After : Apr 21 08:56:54 2025 GMT Subject: CN=a27f4ad1-a783-4050-8289-411864cd62d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:15:ab:9a:92:83:74:6a:8f:24:a2:d5:c8:6f: 59:50:ff:7c:4d:3c:19:43:c6:f8:8a:9d:9c:34:5d: 6e:44:ae:b0:3f:44:e1:7e:20:52:a8:a4:fc:c9:c9: 6b:92:58:1d:1e:34:0f:21:c3:f0:6a:ce:10:2d:f2: 49:86:f4:c4:55:e3:86:80:85:ec:45:02:3a:b3:26: fe:ee:71:4d:62:77:48:a3:4f:9e:a2:5d:fa:e8:ae: 6b:eb:8a:28:04:04:5c:70:80:ed:20:af:04:c6:95: cf:58:8f:35:48:d6:fe:95:b1:57:47:91:7a:81:83: 1b:4a:fa:d3:24:6e:bd:ec:97:59:76:6b:80:84:fe: 18:d6:69:3b:84:20:7d:54:88:93:e0:3f:e5:c2:c7: f0:b5:25:d4:fe:ec:1f:7f:5f:3e:94:29:45:e2:95: 5a:2f:73:21:5d:f6:70:39:98:4f:78:7e:03:3c:16: 13:33:ab:ac:b0:9d:2f:e2:e8:7e:1f:83:6f:cb:a1: 60:ba:24:e5:90:74:f7:56:a1:34:df:84:50:bb:fb: fe:79:70:33:24:97:46:db:58:6e:6b:50:56:ef:23: 31:ba:2f:a6:93:db:f3:27:1a:ce:0c:b2:09:48:19: 40:9a:f4:81:4b:62:4c:95:fa:ee:9d:4e:22:3d:ce: b0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A1:0D:80:63:65:05:70:10:7E:2F:23:C2:24:E4:A9:11:DA:05:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/ea33c2ef-d71d-3d26-89ed-3fdabf5d01fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl X509v3 Authority Key Identifier: keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer sbgp-ipAddrBlock: critical IPv4: 72.1.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:88:4a:f4:07:6c:fa:1f:ac:7e:9c:69:99:c8:2d:cb:51:5f: e1:6c:45:ef:75:0b:e4:3d:d4:cf:b8:b9:53:5c:2b:9c:73:36: 26:58:5f:af:8b:5b:09:ac:1d:b8:21:9a:36:61:c3:aa:e7:5c: ad:ac:a2:96:32:e5:04:86:1d:6b:97:92:e9:e7:e2:2c:71:2d: 4e:0b:f8:a7:17:40:2a:c9:72:55:85:7d:bc:31:af:b4:7e:92: be:54:85:c6:f6:a5:2b:f4:fc:3a:c9:37:d4:99:85:32:3c:9d: a7:5e:0c:2c:ac:05:82:fd:f9:4b:bf:88:34:ba:c3:02:2a:07: 60:96:88:70:57:d7:e7:f4:dd:11:fc:d6:eb:7d:b2:84:b8:b7: e7:1b:0f:89:e9:63:da:ab:37:1b:42:bb:ff:a2:5f:82:ed:e4: 03:ef:62:0a:0d:74:08:af:91:d9:06:bf:e7:54:00:f4:91:31: 32:f5:ee:47:c9:bd:b1:81:05:27:9f:55:68:b0:6e:9b:d4:53: 0b:19:37:74:4f:55:c4:90:88:e7:a2:a1:18:75:a8:54:de:a7: a1:57:7d:b8:d5:c7:aa:1d:65:bb:1e:9c:aa:ce:ed:1f:15:59: eb:14:90:64:47:d4:ac:3d:1b:a0:c7:fd:6b:50:05:03:64:16: ed:5b:83:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEid8kB77KLMJLf5NCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM5ZTQ3MzgtNzkwMi00MzViLTgwMmMtZjM3ZGM0YjI1 Zjk1MB4XDTI1MDEyMTA5NTY1NFoXDTI1MDQyMTA4NTY1NFowLzEtMCsGA1UEAxMk YTI3ZjRhZDEtYTc4My00MDUwLTgyODktNDExODY0Y2Q2MmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hWrmpKDdGqPJKLVyG9ZUP98TTwZQ8b4ip2c NF1uRK6wP0ThfiBSqKT8yclrklgdHjQPIcPwas4QLfJJhvTEVeOGgIXsRQI6syb+ 7nFNYndIo0+eol366K5r64ooBARccIDtIK8ExpXPWI81SNb+lbFXR5F6gYMbSvrT JG697JdZdmuAhP4Y1mk7hCB9VIiT4D/lwsfwtSXU/uwff18+lClF4pVaL3MhXfZw OZhPeH4DPBYTM6ussJ0v4uh+H4Nvy6FguiTlkHT3VqE034RQu/v+eXAzJJdG21hu a1BW7yMxui+mk9vzJxrODLIJSBlAmvSBS2JMlfrunU4iPc6wOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+hDYBjZQVwEH4vI8Ik5KkR2gUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzll NDczOC03OTAyLTQzNWItODAyYy1mMzdkYzRiMjVmOTUvZWEzM2MyZWYtZDcxZC0z ZDI2LTg5ZWQtM2ZkYWJmNWQwMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmM5ZTQ3MzgtNzkwMi00MzViLTgw MmMtZjM3ZGM0YjI1Zjk1L2ZjOWU0NzM4LTc5MDItNDM1Yi04MDJjLWYzN2RjNGIy NWY5NS5jcmwwHwYDVR0jBBgwFoAUNOuS0gTb0TO8bP11PzY75DvgQ74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzllNDczOC03OTAyLTQzNWItODAyYy1mMzdk YzRiMjVmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSISvQHbPofrH6caZnILctRX+FsRe91C+Q91M+4uVNcK5xzNiZYX6+L WwmsHbghmjZhw6rnXK2sopYy5QSGHWuXkunn4ixxLU4L+KcXQCrJclWFfbwxr7R+ kr5Uhcb2pSv0/DrJN9SZhTI8nadeDCysBYL9+Uu/iDS6wwIqB2CWiHBX1+f03RH8 1ut9soS4t+cbD4npY9qrNxtCu/+iX4Lt5APvYgoNdAivkdkGv+dUAPSRMTL17kfJ vbGBBSefVWiwbpvUUwsZN3RPVcSQiOeioRh1qFTep6FXfbjVx6odZbsenKrO7R8V WesUkGRH1Kw9G6DH/WtQBQNkFu1bg18= -----END CERTIFICATE-----Generated at Fri Apr 4 18:52:01 2025 by rpki-client