$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/12bdae9b-92c6-30b3-b3cf-cfac2791a664.roa File: 12bdae9b-92c6-30b3-b3cf-cfac2791a664.roa (raw, json) Hash identifier: KQuRtsp6OPf7SdiZRH/QrP5ZW/1S3evQVEPvkiWaTYk= Subject key identifier: 87:CD:32:0E:F0:89:77:3A:A5:CE:E4:18:A7:D8:DE:76:6C:43:E5:93 Certificate issuer: /CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Certificate serial: 010D0C9F43285848A830A6793AF31B4A1FC12B00 Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/12bdae9b-92c6-30b3-b3cf-cfac2791a664.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 22926 IP address blocks: 72.14.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a6:79:3a:f3:1b:4a:1f:c1:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=9fcc5776-249c-4d8f-bdc2-98ce86fcf65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:09:6c:1c:25:69:fd:16:e0:26:da:45:c2: aa:4f:ce:d6:15:5f:33:96:bc:55:9a:7a:71:b6:c6: da:69:6e:3d:43:6f:0f:50:13:ee:fa:97:e3:e5:b7: 9e:e6:2a:c5:40:99:ff:75:c2:40:2f:ff:e1:17:93: 53:92:7d:1f:03:7f:36:46:f0:31:05:5f:93:bc:fe: c6:86:16:aa:a8:ec:b8:6f:87:1f:c2:b2:5c:28:91: f9:d2:c0:89:da:83:c3:67:5a:06:86:22:41:c4:1a: d0:90:ff:d2:61:e2:f6:69:d0:c2:51:f2:12:96:1e: 84:7e:75:c4:5f:37:bc:02:cf:43:75:de:05:50:24: 09:19:c8:a9:61:64:80:1a:28:e7:8f:d2:85:c2:19: 75:07:54:65:c4:e5:6f:4d:7f:48:ab:37:62:91:97: d9:a7:3a:70:08:24:36:73:54:a5:6b:37:a8:9a:2e: 27:d1:85:a4:e6:59:6d:49:36:6d:5e:ee:04:18:c3: 70:52:89:89:bc:8c:78:1a:cd:49:9f:b0:72:13:7a: 2e:bc:35:c5:cf:4c:be:21:45:22:5a:dc:59:02:f9: 6a:20:f2:a7:7b:d7:1d:a9:f1:3f:6b:21:a1:01:cb: d0:16:27:d5:37:bb:dc:ac:4e:b3:7e:61:51:45:c8: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:32:0E:F0:89:77:3A:A5:CE:E4:18:A7:D8:DE:76:6C:43:E5:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/12bdae9b-92c6-30b3-b3cf-cfac2791a664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl X509v3 Authority Key Identifier: keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer sbgp-ipAddrBlock: critical IPv4: 72.14.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a8:35:d5:4a:0a:21:03:24:e0:15:72:6f:34:a8:ad:87:21: 94:56:98:42:29:eb:10:fe:bd:08:ac:3d:a3:30:28:37:11:e4: 42:d3:cb:d4:e7:4e:e1:1a:f1:db:85:49:35:57:56:dd:3f:47: 6c:dc:e9:81:db:12:20:35:1a:47:2a:67:79:80:cd:f6:dd:ba: 6a:d5:ec:7c:03:a6:46:c3:2a:6a:88:ee:5a:39:42:7f:9f:cc: ee:e1:88:1c:c2:f8:e5:35:bb:81:a0:54:6f:02:81:6a:50:ee: 44:8c:4d:14:8b:ff:24:93:11:b5:c9:33:1f:48:af:41:16:d4: 2a:de:9a:8a:db:9a:ff:01:e6:7d:74:c8:6a:a7:e1:2d:2a:dc: 0a:f6:f6:55:a3:f1:fd:31:eb:56:6c:3a:58:03:ab:8c:3e:7e: 74:db:0b:65:cf:5f:c2:5b:f0:0b:6e:cd:8e:18:89:73:f1:af: 5a:b4:9f:70:f8:63:fe:1b:db:9f:29:d6:be:b1:2c:ea:2d:6d: be:c9:28:8a:51:49:4e:a1:95:33:e2:93:ba:b3:6c:0a:e6:ef: 23:7c:70:41:e9:b1:d0:7a:cb:6b:31:49:f6:f3:72:78:49:9f: b2:81:dd:c4:8d:f2:ce:d7:25:5e:31:ad:03:39:d3:d2:e5:44: 77:5d:fa:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKZ5OvMbSh/BKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJl YjQ4MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk OWZjYzU3NzYtMjQ5Yy00ZDhmLWJkYzItOThjZTg2ZmNmNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy4JbBwlaf0W4CbaRcKqT87WFV8zlrxVmnpx tsbaaW49Q28PUBPu+pfj5bee5irFQJn/dcJAL//hF5NTkn0fA382RvAxBV+TvP7G hhaqqOy4b4cfwrJcKJH50sCJ2oPDZ1oGhiJBxBrQkP/SYeL2adDCUfISlh6EfnXE Xze8As9Ddd4FUCQJGcipYWSAGijnj9KFwhl1B1RlxOVvTX9IqzdikZfZpzpwCCQ2 c1Slazeomi4n0YWk5lltSTZtXu4EGMNwUomJvIx4Gs1Jn7ByE3ouvDXFz0y+IUUi WtxZAvlqIPKne9cdqfE/ayGhAcvQFifVN7vcrE6zfmFRRcinxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfNMg7wiXc6pc7kGKfY3nZsQ+WTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0 ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvMTJiZGFlOWItOTJjNi0z MGIzLWIzY2YtY2ZhYzI3OTFhNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDE4NGU0NzEtMDgwYS00ZTU0LWJm OTQtNjBkZDBjOGJlYjQ4L2QxODRlNDcxLTA4MGEtNGU1NC1iZjk0LTYwZGQwYzhi ZWI0OC5jcmwwHwYDVR0jBBgwFoAUgirGXwV3ltYS+ySG5nLGEqW2QVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRk MGM4YmViNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSA4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOoNdVKCiEDJOAVcm80qK2HIZRWmEIp6xD+vQisPaMwKDcR5ELTy9Tn TuEa8duFSTVXVt0/R2zc6YHbEiA1GkcqZ3mAzfbdumrV7HwDpkbDKmqI7lo5Qn+f zO7hiBzC+OU1u4GgVG8CgWpQ7kSMTRSL/ySTEbXJMx9Ir0EW1Cremorbmv8B5n10 yGqn4S0q3Ar29lWj8f0x61ZsOlgDq4w+fnTbC2XPX8Jb8AtuzY4YiXPxr1q0n3D4 Y/4b258p1r6xLOotbb7JKIpRSU6hlTPik7qzbArm7yN8cEHpsdB6y2sxSfbzcnhJ n7KB3cSN8s7XJV4xrQM509LlRHdd+s4= -----END CERTIFICATE-----Generated at Sat Apr 12 02:16:02 2025 by rpki-client