$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/cfc9f1a8-51c8-3f5e-9f3c-b7262cc15964.roa File: cfc9f1a8-51c8-3f5e-9f3c-b7262cc15964.roa (raw, json) Hash identifier: YHpv5M+8MybknVHg+Uc2Aex0AZl6AGu79HwwE8gUA4A= Subject key identifier: D4:25:4B:07:A4:0B:CB:8F:91:C7:E1:4B:7C:B3:A0:E9:C7:64:EB:48 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584890D86CEB5A76A002B00EDC80 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/cfc9f1a8-51c8-3f5e-9f3c-b7262cc15964.roa Signing time: Thu 16 Jan 2025 17:19:22 +0000 ROA not before: Thu 16 Jan 2025 17:19:22 +0000 ROA not after: Wed 16 Apr 2025 16:19:22 +0000 asID: 4766 IP address blocks: 72.9.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Mar 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:d8:6c:eb:5a:76:a0:02:b0:0e:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jan 16 17:19:22 2025 GMT Not After : Apr 16 16:19:22 2025 GMT Subject: CN=282c5b8d-acdf-4f97-afb5-5a3588464f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b1:19:ec:81:04:e0:f5:d3:e7:df:3f:40:3d: b3:db:78:d2:b2:a5:4a:8e:ce:f2:b9:98:da:ac:9b: 61:23:c4:06:fc:35:44:7f:4c:50:07:23:91:e0:fb: f9:b9:e7:8a:82:b6:a3:26:7a:58:10:47:99:64:fb: a0:6b:f5:15:c8:1e:57:91:f7:de:2c:8c:ba:94:b8: 7c:23:3e:25:d4:44:93:99:61:c5:ff:c2:0e:85:33: 0d:0b:03:45:55:d0:69:b2:72:58:68:e2:b7:b9:64: 0c:3e:b2:9e:f4:ca:8c:38:62:d5:3a:f3:22:b9:cd: e7:44:eb:55:9a:e4:1a:44:da:4b:52:b0:43:04:b8: 2e:94:4f:91:d2:36:3f:e6:2f:8e:2f:f8:4f:63:ef: 9e:ac:d2:03:19:1a:35:0e:c6:09:62:3f:b8:a7:8d: ee:ad:d3:dd:26:2d:56:6a:dd:8b:31:2e:90:ff:f0: 83:e5:ae:70:e1:17:0d:fc:dd:be:1c:82:29:90:c3: 50:6e:6e:c3:0d:74:90:bd:22:20:9e:39:c2:41:5b: a7:0a:75:87:b4:44:c1:1c:04:c6:f7:d5:b7:48:ec: d2:ad:cf:da:f6:db:77:42:4e:7a:3b:3f:0c:28:fe: dc:61:8d:aa:70:bd:ab:27:73:c9:f5:13:d8:a5:92: 66:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:25:4B:07:A4:0B:CB:8F:91:C7:E1:4B:7C:B3:A0:E9:C7:64:EB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/cfc9f1a8-51c8-3f5e-9f3c-b7262cc15964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:37:c8:e7:b3:ec:f0:62:de:24:d6:0a:a0:f0:03:a0:e1:1e: 7e:e1:35:bd:13:fe:09:43:57:ad:81:24:b1:db:64:a8:d0:1f: 33:e1:b2:55:bd:5b:f8:16:15:e0:97:22:48:a2:50:f5:eb:ba: 73:74:80:40:8a:9e:61:f4:40:c3:e8:80:c7:c1:5c:d7:f0:40: 4a:b9:5c:79:35:07:03:c7:87:47:02:09:57:7c:b5:09:e2:fe: 5f:92:09:2f:a6:9e:b6:50:4b:1c:40:63:c4:96:8f:8e:54:f0: 51:f4:33:07:ef:4c:e2:fd:b5:f8:83:67:86:1a:d5:45:d8:8d: c3:af:1a:a0:50:93:ce:97:1c:20:ad:d0:4c:a0:de:ed:1e:52: 65:32:7c:06:56:15:4e:c1:00:18:34:a3:4e:40:a0:3a:50:59: 9d:2b:aa:a4:2f:16:d3:2c:83:de:40:e0:c1:d4:b8:56:dc:2e: a4:20:8a:99:32:00:db:20:a7:9c:3a:14:79:db:2b:07:cd:0e: 14:52:b9:45:e4:37:9c:cb:53:d8:48:28:3f:a9:71:d3:d8:ad: b5:02:bb:4c:85:0f:65:7d:88:75:27:43:84:b4:60:38:94:59: 9b:ba:37:e9:0c:1f:e3:36:79:3c:61:fc:0a:fe:28:c7:3e:19: c9:17:16:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQ2GzrWnagArAO3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDExNjE3MTkyMloXDTI1MDQxNjE2MTkyMlowLzEtMCsGA1UEAxMk MjgyYzViOGQtYWNkZi00Zjk3LWFmYjUtNWEzNTg4NDY0ZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bEZ7IEE4PXT598/QD2z23jSsqVKjs7yuZja rJthI8QG/DVEf0xQByOR4Pv5ueeKgrajJnpYEEeZZPuga/UVyB5XkffeLIy6lLh8 Iz4l1ESTmWHF/8IOhTMNCwNFVdBpsnJYaOK3uWQMPrKe9MqMOGLVOvMiuc3nROtV muQaRNpLUrBDBLgulE+R0jY/5i+OL/hPY++erNIDGRo1DsYJYj+4p43urdPdJi1W at2LMS6Q//CD5a5w4RcN/N2+HIIpkMNQbm7DDXSQvSIgnjnCQVunCnWHtETBHATG 99W3SOzSrc/a9tt3Qk56Oz8MKP7cYY2qcL2rJ3PJ9RPYpZJmXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQlSwekC8uPkcfhS3yzoOnHZOtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvY2ZjOWYxYTgtNTFjOC0z ZjVlLTlmM2MtYjcyNjJjYzE1OTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM3yOez7PBi3iTWCqDwA6DhHn7hNb0T/glDV62BJLHbZKjQHzPhslW9 W/gWFeCXIkiiUPXrunN0gECKnmH0QMPogMfBXNfwQEq5XHk1BwPHh0cCCVd8tQni /l+SCS+mnrZQSxxAY8SWj45U8FH0MwfvTOL9tfiDZ4Ya1UXYjcOvGqBQk86XHCCt 0Eyg3u0eUmUyfAZWFU7BABg0o05AoDpQWZ0rqqQvFtMsg95A4MHUuFbcLqQgipky ANsgp5w6FHnbKwfNDhRSuUXkN5zLU9hIKD+pcdPYrbUCu0yFD2V9iHUnQ4S0YDiU WZu6N+kMH+M2eTxh/Ar+KMc+GckXFlA= -----END CERTIFICATE-----Generated at Thu Mar 13 06:57:26 2025 by rpki-client