$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/1cebdd97-c4bb-3a5d-8203-c5a235368b55.roa File: 1cebdd97-c4bb-3a5d-8203-c5a235368b55.roa (raw, json) Hash identifier: PaiRs+8VCojgxgPfFiXm6zAPnYOpzPzJxBfB1EclJ0Y= Subject key identifier: A7:1D:31:9F:BA:90:D9:9D:06:AF:97:87:8B:BE:97:BC:A1:F8:F4:18 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F43285849FB855373E51BF3217E6295E0 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/1cebdd97-c4bb-3a5d-8203-c5a235368b55.roa Signing time: Mon 26 May 2025 15:10:21 +0000 ROA not before: Mon 26 May 2025 15:10:21 +0000 ROA not after: Sun 24 Aug 2025 15:10:21 +0000 asID: 23316 IP address blocks: 72.37.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fb:85:53:73:e5:1b:f3:21:7e:62:95:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: May 26 15:10:21 2025 GMT Not After : Aug 24 15:10:21 2025 GMT Subject: CN=88a4f9b2-83cd-4c8a-8ac4-2907c0860e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:bb:8d:cc:cb:7c:68:e7:12:b3:6a:3f:de: 5f:26:d1:89:fa:c7:1b:bf:ca:44:df:df:dc:26:0d: e6:47:dc:02:ca:09:ba:92:cd:21:40:1a:8f:3f:eb: b3:1b:d2:63:6d:ed:51:d6:a7:5c:0d:19:45:a6:d2: ac:a9:3d:57:6b:a6:f8:62:11:d5:7d:72:95:21:3a: cb:67:fb:9b:2b:d6:ed:f6:57:1e:b2:69:4b:b4:6c: 20:a2:de:37:07:7e:c7:c0:a9:30:99:77:0c:2f:e4: 20:41:02:25:ea:25:86:c9:ce:e8:d6:72:e1:65:e1: 3c:c1:42:62:54:c7:0b:16:50:71:02:03:e3:24:87: e4:82:17:18:1f:4f:62:60:59:49:ab:2e:15:51:de: 57:4b:ec:60:66:c8:bc:91:39:da:03:e8:0f:8a:23: e5:4f:95:36:b1:2b:dd:16:e8:56:49:56:38:de:5b: 92:bc:c1:4f:af:b5:5c:65:f1:62:0b:fc:d0:78:b8: 97:6e:8a:b9:93:f3:aa:93:ad:0c:17:42:e7:0a:37: d8:02:cd:30:69:c7:f4:6a:07:5e:b8:f1:92:0b:2e: a2:b3:dc:19:b7:3d:04:a4:3a:07:af:f9:71:ac:f7: 8d:b0:0e:f9:64:fe:c1:00:d1:61:ee:81:c4:fb:a8: cc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1D:31:9F:BA:90:D9:9D:06:AF:97:87:8B:BE:97:BC:A1:F8:F4:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/1cebdd97-c4bb-3a5d-8203-c5a235368b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 72.37.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:1f:c2:dc:2f:d0:b0:25:c4:8e:4e:95:3e:28:cc:82:d1:5c: dc:83:6d:7e:6d:46:e1:91:71:03:5e:94:f6:ea:a1:b3:ba:2b: 79:31:eb:28:35:0f:75:59:d6:5e:70:44:a1:e1:d2:8e:24:18: b6:ee:4b:05:62:d4:23:85:cb:d7:cd:76:14:a5:21:84:ae:0f: 72:9c:dd:f9:32:ea:36:d9:d8:7c:9d:fa:e3:ee:ca:38:68:66: 7a:90:59:a8:f8:a0:86:90:01:c0:54:b8:a1:5b:b6:af:27:bb: f6:4a:40:7d:6a:7d:86:69:88:eb:25:57:92:67:cb:22:d6:4c: 7a:1a:ba:2e:e4:fd:8d:06:4f:53:35:be:f7:82:30:64:aa:50: 3c:d8:5a:ac:74:7e:14:e2:ca:ba:0a:ef:0c:36:63:91:18:01: d2:d9:d6:69:0c:61:ca:c9:cc:68:ac:66:fc:21:a7:10:2c:bc: 75:c5:98:d9:73:83:ba:37:d7:f0:86:5a:10:ed:8d:a6:d8:1a: 1c:c6:2f:9b:3d:87:0e:df:bf:7c:e1:bf:39:cc:30:85:81:04: d4:6b:4b:c4:2a:5b:85:8c:05:54:4c:54:c9:3d:41:ee:cc:7c: 2d:bf:75:fd:22:31:c9:f0:fb:43:82:02:37:f8:f1:38:8e:b0: 5a:b0:c4:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn7hVNz5RvzIX5ileAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MDUyNjE1MTAyMVoXDTI1MDgyNDE1MTAyMVowLzEtMCsGA1UEAxMk ODhhNGY5YjItODNjZC00YzhhLThhYzQtMjkwN2MwODYwZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniq7jczLfGjnErNqP95fJtGJ+scbv8pE39/c Jg3mR9wCygm6ks0hQBqPP+uzG9Jjbe1R1qdcDRlFptKsqT1Xa6b4YhHVfXKVITrL Z/ubK9bt9lcesmlLtGwgot43B37HwKkwmXcML+QgQQIl6iWGyc7o1nLhZeE8wUJi VMcLFlBxAgPjJIfkghcYH09iYFlJqy4VUd5XS+xgZsi8kTnaA+gPiiPlT5U2sSvd FuhWSVY43luSvMFPr7VcZfFiC/zQeLiXboq5k/Oqk60MF0LnCjfYAs0wacf0agde uPGSCy6is9wZtz0EpDoHr/lxrPeNsA75ZP7BANFh7oHE+6jMnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcdMZ+6kNmdBq+Xh4u+l7yh+PQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvMWNlYmRkOTctYzRiYi0z YTVkLTgyMDMtYzVhMjM1MzY4YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCWOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgfwtwv0LAlxI5OlT4ozILRXNyDbX5tRuGRcQNelPbqobO6K3kx6yg1 D3VZ1l5wRKHh0o4kGLbuSwVi1COFy9fNdhSlIYSuD3Kc3fky6jbZ2Hyd+uPuyjho ZnqQWaj4oIaQAcBUuKFbtq8nu/ZKQH1qfYZpiOslV5JnyyLWTHoaui7k/Y0GT1M1 vveCMGSqUDzYWqx0fhTiyroK7ww2Y5EYAdLZ1mkMYcrJzGisZvwhpxAsvHXFmNlz g7o31/CGWhDtjabYGhzGL5s9hw7fv3zhvznMMIWBBNRrS8QqW4WMBVRMVMk9Qe7M fC2/df0iMcnw+0OCAjf48TiOsFqwxGc= -----END CERTIFICATE-----Generated at Sun Jun 8 14:42:05 2025 by rpki-client