$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/a1e90506-ecf0-30b9-83c2-34bd6f5317b5.roa File: a1e90506-ecf0-30b9-83c2-34bd6f5317b5.roa (raw, json) Hash identifier: UTCF2mWaNBIrTvTUogn+Zu+DqnhB4vFh5xrJW8kX+98= Subject key identifier: 3E:EB:D5:57:A1:4E:AF:0A:07:74:33:CA:AF:E7:52:3A:E7:7C:30:89 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F43285848F24E7F9120CB123D77AEAF00 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/a1e90506-ecf0-30b9-83c2-34bd6f5317b5.roa Signing time: Thu 20 Feb 2025 15:10:40 +0000 ROA not before: Thu 20 Feb 2025 15:10:40 +0000 ROA not after: Wed 21 May 2025 14:10:40 +0000 asID: 401558 IP address blocks: 72.9.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:4e:7f:91:20:cb:12:3d:77:ae:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Feb 20 15:10:40 2025 GMT Not After : May 21 14:10:40 2025 GMT Subject: CN=a2251d95-2e3d-48ab-b422-e496e0ef93c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1a:8b:cc:b3:ba:2a:8a:13:82:5e:4b:98:cb: 74:08:d0:b6:46:3d:18:a8:7a:30:d7:0c:af:68:cf: ea:8c:1e:94:92:97:73:e9:d9:81:f5:d6:96:09:f4: 72:b6:b1:7a:19:b5:62:a1:de:c8:d0:20:06:b8:0f: f8:45:91:eb:ae:85:c5:cb:6c:76:bf:2d:26:85:94: 1f:42:1b:b7:87:a0:c8:c3:99:c8:5c:7e:73:b0:2b: 52:36:05:13:47:1a:d3:8f:2d:2d:d8:8d:80:4f:31: 3f:68:53:9b:91:82:ba:22:cd:97:b6:5f:97:e2:18: 27:98:67:ef:e8:f0:63:c2:1d:42:fc:b3:d0:94:a6: 4f:37:25:dc:f0:a8:a4:67:c0:45:85:75:e4:48:25: 29:f4:8b:2f:06:18:b0:a9:e5:24:f0:c2:35:89:6c: e1:10:22:6a:d3:e1:b0:cd:22:f5:0f:8a:81:8c:85: 56:8d:1b:23:56:8b:93:67:63:e9:3a:56:05:81:d1: d7:88:40:ce:54:a5:46:f1:0d:f9:73:2a:c4:ec:36: 4f:97:37:43:d9:bf:56:bd:a4:66:bd:b7:54:9e:6d: e3:81:9d:87:24:2c:7e:34:dd:c6:80:3a:e5:82:dd: c6:6c:b8:37:cc:2f:c5:09:4b:31:aa:ce:4b:71:cd: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EB:D5:57:A1:4E:AF:0A:07:74:33:CA:AF:E7:52:3A:E7:7C:30:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/a1e90506-ecf0-30b9-83c2-34bd6f5317b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:81:c0:cc:91:c4:31:59:3c:86:05:92:1b:9e:03:a9:82:f0: f4:ee:b0:5b:12:f2:4c:6e:4c:62:8d:1f:97:6b:40:e2:60:fb: ca:58:55:80:37:ea:93:47:43:0c:ec:6f:d7:a1:a9:d4:1a:d4: 40:aa:11:59:a9:b0:45:5d:31:3b:be:6a:5b:73:0c:95:d0:0b: 11:24:3b:ec:cd:c7:1c:43:95:72:16:1c:67:36:db:b2:60:dc: 8d:2f:95:a6:71:5f:9d:87:f3:16:e5:4e:c7:1f:cc:72:c3:96: 3b:e5:e5:85:5d:79:18:35:7e:b6:8f:8f:e8:95:78:bf:dd:b0: 81:56:56:11:fe:10:b1:cd:c2:37:50:19:f3:85:b6:74:48:ba: ab:ee:66:5d:68:36:a9:e2:1c:da:1f:ce:0a:8d:c7:aa:f4:15: 4c:a1:b3:29:3f:8d:2a:5c:54:a6:6c:ee:a2:c2:c4:56:4d:f2: f4:00:ac:4f:39:1f:cb:fc:51:b7:9c:53:82:ce:7b:96:3b:05: 22:6b:f4:f2:e5:94:fe:f9:64:c2:42:f2:a2:7b:1c:cf:58:48: 1d:1b:40:85:fb:96:48:45:a3:61:ce:d5:cb:63:49:98:28:b9: bf:64:98:96:1f:53:68:ad:cf:4a:aa:47:52:32:a3:55:ca:13: ea:25:a3:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyTn+RIMsSPXeurwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDIyMDE1MTA0MFoXDTI1MDUyMTE0MTA0MFowLzEtMCsGA1UEAxMk YTIyNTFkOTUtMmUzZC00OGFiLWI0MjItZTQ5NmUwZWY5M2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRqLzLO6KooTgl5LmMt0CNC2Rj0YqHow1wyv aM/qjB6Ukpdz6dmB9daWCfRytrF6GbViod7I0CAGuA/4RZHrroXFy2x2vy0mhZQf Qhu3h6DIw5nIXH5zsCtSNgUTRxrTjy0t2I2ATzE/aFObkYK6Is2Xtl+X4hgnmGfv 6PBjwh1C/LPQlKZPNyXc8KikZ8BFhXXkSCUp9IsvBhiwqeUk8MI1iWzhECJq0+Gw zSL1D4qBjIVWjRsjVouTZ2PpOlYFgdHXiEDOVKVG8Q35cyrE7DZPlzdD2b9WvaRm vbdUnm3jgZ2HJCx+NN3GgDrlgt3GbLg3zC/FCUsxqs5Lcc2PqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7r1VehTq8KB3Qzyq/nUjrnfDCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYTFlOTA1MDYtZWNmMC0z MGI5LTgzYzItMzRiZDZmNTMxN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeBwMyRxDFZPIYFkhueA6mC8PTusFsS8kxuTGKNH5drQOJg+8pYVYA3 6pNHQwzsb9ehqdQa1ECqEVmpsEVdMTu+altzDJXQCxEkO+zNxxxDlXIWHGc227Jg 3I0vlaZxX52H8xblTscfzHLDljvl5YVdeRg1fraPj+iVeL/dsIFWVhH+ELHNwjdQ GfOFtnRIuqvuZl1oNqniHNofzgqNx6r0FUyhsyk/jSpcVKZs7qLCxFZN8vQArE85 H8v8UbecU4LOe5Y7BSJr9PLllP75ZMJC8qJ7HM9YSB0bQIX7lkhFo2HO1ctjSZgo ub9kmJYfU2itz0qqR1Iyo1XKE+olo1k= -----END CERTIFICATE-----Generated at Sat Mar 15 04:10:46 2025 by rpki-client