$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/77202f3b-37e1-3746-93ec-d99bf6f5ad33.roa File: 77202f3b-37e1-3746-93ec-d99bf6f5ad33.roa (raw, json) Hash identifier: bzX6yhzS97V9C0JaUO7Co5bwtGAL5ZEwBTuz11sL34w= Subject key identifier: 9E:E6:3D:C8:18:B3:7A:F4:0B:CB:21:A4:9C:04:86:CF:E0:13:32:68 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584890D8DA65F9CA8D128D8B0900 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/77202f3b-37e1-3746-93ec-d99bf6f5ad33.roa Signing time: Thu 16 Jan 2025 17:20:13 +0000 ROA not before: Thu 16 Jan 2025 17:20:13 +0000 ROA not after: Wed 16 Apr 2025 16:20:13 +0000 asID: 4766 IP address blocks: 72.9.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Mar 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:d8:da:65:f9:ca:8d:12:8d:8b:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jan 16 17:20:13 2025 GMT Not After : Apr 16 16:20:13 2025 GMT Subject: CN=5d3e7324-5783-4620-8756-feeaad1f55d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:06:f1:c1:ca:6d:3f:ac:4c:6d:d8:a0:0f: dc:67:84:d0:27:41:c8:df:56:33:e2:93:f3:22:1d: c4:66:30:83:0f:35:4d:91:99:2f:12:19:0f:08:c3: 8a:e9:a3:5c:62:6d:5b:94:78:8c:4c:c9:7f:88:32: 51:34:93:13:17:a8:fe:08:d9:93:1f:7c:45:e6:4e: eb:c1:b6:e1:c5:1d:80:68:e0:76:fd:a5:a6:f1:30: 41:86:47:1c:da:1b:2b:30:b5:43:e8:82:69:9b:67: 49:78:88:eb:09:a7:77:b1:59:c6:e5:97:8b:8b:af: 1c:08:43:81:b9:74:30:21:89:ae:4c:ce:3a:ba:e3: ef:7f:de:11:4a:3b:3b:9c:93:39:17:57:12:08:11: 1e:f7:bd:cb:83:30:c5:6c:72:d6:35:bb:d1:3e:de: 0e:48:22:36:5a:d4:d3:c0:a0:20:88:b4:fc:0f:df: ae:1c:1e:f3:1b:36:d3:41:5a:9e:6b:ed:44:8d:c4: 08:da:8b:ca:9b:08:4a:18:03:2f:7d:91:bd:fc:bb: b2:5b:20:03:1f:8c:9e:e0:d2:03:88:a2:b1:a1:bb: 0b:f5:7a:e6:49:e1:01:2a:9d:bf:cc:45:54:b9:66: 21:2a:a9:d8:87:bf:46:4d:63:16:7c:21:2f:a7:1e: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E6:3D:C8:18:B3:7A:F4:0B:CB:21:A4:9C:04:86:CF:E0:13:32:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/77202f3b-37e1-3746-93ec-d99bf6f5ad33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4e:2d:55:e0:5f:31:c1:1a:e6:b5:ad:09:8a:f8:30:af:b3: 47:de:c0:11:9e:bb:78:5c:96:ae:1d:c0:4e:9a:f3:07:f4:d4: a5:b9:af:4a:3f:ad:0c:7f:e4:de:3b:b8:2f:9a:16:f7:f5:6f: d3:f7:0a:ad:33:68:8b:f2:d2:86:cd:44:98:16:10:f1:a9:88: f8:ed:43:a7:e6:80:a1:92:6e:07:d5:78:1f:00:9c:f8:97:e8: 9a:41:26:5d:d2:6a:a4:80:cb:21:a9:33:8f:e3:ec:10:32:30: d5:bb:55:c9:93:b5:08:27:12:9e:0a:4c:3e:f4:57:f6:74:d1: f8:29:f3:64:61:9b:e1:77:e4:3a:f5:2b:03:57:d5:6c:79:1a: c9:5f:2f:e0:ef:f6:6d:9e:31:d4:72:75:25:e6:ea:3f:a7:a6: b0:12:8b:1a:3f:da:78:2c:44:0e:49:f8:ac:8d:a8:da:63:82: a7:7c:19:b0:24:00:19:de:72:c5:8d:cc:22:cd:4e:3c:1b:39: 3d:97:e7:07:2f:f6:66:a2:21:49:5f:73:c4:b4:06:79:68:50: 75:d1:9a:37:87:f2:11:32:67:66:f1:c5:c4:21:b9:33:69:b7: 17:60:9a:e3:4d:13:da:83:19:43:6a:d6:0b:5f:ee:6b:ca:f3: 1c:1c:0d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQ2Npl+cqNEo2LCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDExNjE3MjAxM1oXDTI1MDQxNjE2MjAxM1owLzEtMCsGA1UEAxMk NWQzZTczMjQtNTc4My00NjIwLTg3NTYtZmVlYWFkMWY1NWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HQG8cHKbT+sTG3YoA/cZ4TQJ0HI31Yz4pPz Ih3EZjCDDzVNkZkvEhkPCMOK6aNcYm1blHiMTMl/iDJRNJMTF6j+CNmTH3xF5k7r wbbhxR2AaOB2/aWm8TBBhkcc2hsrMLVD6IJpm2dJeIjrCad3sVnG5ZeLi68cCEOB uXQwIYmuTM46uuPvf94RSjs7nJM5F1cSCBEe973LgzDFbHLWNbvRPt4OSCI2WtTT wKAgiLT8D9+uHB7zGzbTQVqea+1EjcQI2ovKmwhKGAMvfZG9/LuyWyADH4ye4NID iKKxobsL9XrmSeEBKp2/zEVUuWYhKqnYh79GTWMWfCEvpx5hUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7mPcgYs3r0C8shpJwEhs/gEzJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvNzcyMDJmM2ItMzdlMS0z NzQ2LTkzZWMtZDk5YmY2ZjVhZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5OLVXgXzHBGua1rQmK+DCvs0fewBGeu3hclq4dwE6a8wf01KW5r0o/ rQx/5N47uC+aFvf1b9P3Cq0zaIvy0obNRJgWEPGpiPjtQ6fmgKGSbgfVeB8AnPiX 6JpBJl3SaqSAyyGpM4/j7BAyMNW7VcmTtQgnEp4KTD70V/Z00fgp82Rhm+F35Dr1 KwNX1Wx5GslfL+Dv9m2eMdRydSXm6j+nprASixo/2ngsRA5J+KyNqNpjgqd8GbAk ABnecsWNzCLNTjwbOT2X5wcv9maiIUlfc8S0BnloUHXRmjeH8hEyZ2bxxcQhuTNp txdgmuNNE9qDGUNq1gtf7mvK8xwcDeM= -----END CERTIFICATE-----Generated at Thu Mar 13 06:49:21 2025 by rpki-client