$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa File: 7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa (raw, json) Hash identifier: YZdg25ZTQLFa9SA2ME3exCDryLdRsyOL2Tnbr7yLmek= Subject key identifier: 10:B1:EE:F3:DA:D4:9C:DB:A4:6A:C7:6F:84:6B:0F:BC:80:EB:AA:54 Certificate issuer: /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Certificate serial: 010D0C9F432858495ABEE4F9132562E4F9939980 Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 33501 IP address blocks: 72.250.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e4:f9:13:25:62:e4:f9:93:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=4ea54e00-c6ef-4a6c-8de4-1b336a01d7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:28:2a:56:4f:e7:a5:ca:f0:41:0b:02:29: f1:e5:2f:58:26:04:88:a8:29:79:8b:69:75:c6:9e: 30:0e:fa:38:93:3b:41:c0:f9:83:91:05:c8:82:f9: a2:96:1b:a3:6b:18:a5:51:95:6b:f0:a3:38:d7:a7: 4e:d4:89:c7:2b:e5:04:1f:3c:f9:a1:8f:14:a1:51: 30:ad:9c:21:20:e8:23:fa:4e:d0:31:fd:cb:79:6b: 57:73:23:c5:66:11:91:77:58:08:3e:e8:7e:f1:df: af:9e:f4:ce:8a:2a:6e:48:cb:24:4d:3f:ff:79:c5: 74:38:b0:9e:92:32:c6:8f:b1:8e:e9:f8:94:6d:ba: 7e:7f:ed:43:94:be:a5:34:d3:72:cf:64:28:1c:52: 21:ec:73:8e:7a:d6:cb:77:ce:eb:42:18:3c:0c:8e: 42:30:fe:d0:68:b6:b5:37:ee:37:8d:6a:e0:ce:28: e6:c5:3d:91:ad:e1:36:74:b2:31:72:bb:17:3c:e5: f8:9f:ef:b8:6b:88:d2:1b:13:d2:f4:e7:0a:dd:cb: 41:8d:2b:db:45:90:37:6a:8b:24:70:29:ba:6f:be: 72:19:d6:bb:0a:1d:cb:dd:96:27:5a:ac:3e:dd:82: e1:1c:9b:0c:36:8c:c4:b9:ae:d8:f6:ec:2d:a0:8f: a9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B1:EE:F3:DA:D4:9C:DB:A4:6A:C7:6F:84:6B:0F:BC:80:EB:AA:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl X509v3 Authority Key Identifier: keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer sbgp-ipAddrBlock: critical IPv4: 72.250.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:0d:11:b8:99:6b:90:6a:8a:a5:59:41:e1:81:14:22:67:e5: 2d:53:1d:57:fe:15:0c:8d:37:e2:c1:97:22:65:f1:d0:21:35: 2a:d9:31:5c:1b:03:40:aa:f7:c9:51:26:34:7b:00:14:49:99: 71:49:48:ec:08:4a:f3:89:4a:b6:0c:bf:bf:27:65:b7:a3:98: 93:09:d9:b0:6b:5a:c1:f8:d0:c1:a6:bd:67:23:2c:19:59:e2: cc:ed:e1:07:57:e5:b2:cb:15:95:7d:9a:91:07:6c:27:39:27: 21:6e:47:8e:54:a2:77:b8:4d:fe:e8:f8:4e:75:dd:22:7d:dc: 26:80:2d:fd:5c:ee:ca:f9:db:32:de:08:f6:b5:76:c4:b5:64: e2:28:49:b2:9e:97:51:0f:2c:db:43:46:18:c0:ed:5d:a3:b5: 5c:0f:6b:5a:3f:f7:ff:b4:77:20:e5:84:88:01:0b:20:a0:f9: cb:2d:e9:91:0d:57:6c:37:73:d2:9d:b9:b2:31:19:86:d0:ad: d4:c7:a3:b5:d0:0a:4a:12:6e:d0:56:90:b3:33:70:4e:f6:f7: 20:d4:18:9c:4f:45:c6:09:90:35:4d:ab:d6:a9:50:d3:b4:8a: bc:a9:8e:10:eb:4f:92:8a:11:a2:ed:13:76:b4:9f:5c:c6:3a: 86:a3:23:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuT5EyVi5PmTmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkzYmY3NzItYjFjMi00ZjJmLTk3NmMtNTI4YjZmMWQ4 ZTE2MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NGVhNTRlMDAtYzZlZi00YTZjLThkZTQtMWIzMzZhMDFkN2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqkoKlZP56XK8EELAinx5S9YJgSIqCl5i2l1 xp4wDvo4kztBwPmDkQXIgvmilhujaxilUZVr8KM416dO1InHK+UEHzz5oY8UoVEw rZwhIOgj+k7QMf3LeWtXcyPFZhGRd1gIPuh+8d+vnvTOiipuSMskTT//ecV0OLCe kjLGj7GO6fiUbbp+f+1DlL6lNNNyz2QoHFIh7HOOetbLd87rQhg8DI5CMP7QaLa1 N+43jWrgzijmxT2RreE2dLIxcrsXPOX4n++4a4jSGxPS9OcK3ctBjSvbRZA3aosk cCm6b75yGda7Ch3L3ZYnWqw+3YLhHJsMNozEua7Y9uwtoI+pFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCx7vPa1JzbpGrHb4RrD7yA66pUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OTNi Zjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYxZDhlMTYvN2M5M2UzZjMtYTEyOS0z M2E4LWJiNTQtNGJkMmFiZTZmZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjkzYmY3NzItYjFjMi00ZjJmLTk3 NmMtNTI4YjZmMWQ4ZTE2LzY5M2JmNzcyLWIxYzItNGYyZi05NzZjLTUyOGI2ZjFk OGUxNi5jcmwwHwYDVR0jBBgwFoAUBDuRJkNa5T25ITW/GMY20NqdQacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01Mjhi NmYxZDhlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgNEbiZa5BqiqVZQeGBFCJn5S1THVf+FQyNN+LBlyJl8dAhNSrZMVwb A0Cq98lRJjR7ABRJmXFJSOwISvOJSrYMv78nZbejmJMJ2bBrWsH40MGmvWcjLBlZ 4szt4QdX5bLLFZV9mpEHbCc5JyFuR45Uone4Tf7o+E513SJ93CaALf1c7sr52zLe CPa1dsS1ZOIoSbKel1EPLNtDRhjA7V2jtVwPa1o/9/+0dyDlhIgBCyCg+cst6ZEN V2w3c9KdubIxGYbQrdTHo7XQCkoSbtBWkLMzcE729yDUGJxPRcYJkDVNq9apUNO0 irypjhDrT5KKEaLtE3a0n1zGOoajI6k= -----END CERTIFICATE-----Generated at Sat Apr 12 13:54:32 2025 by rpki-client