$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa File: ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa (raw, json) Hash identifier: tpxMo+u2AShTHKUzVZdWRyxbta3cPDd5TvRdCJepu3s= Subject key identifier: 39:CB:C0:89:BF:F8:46:4E:8B:65:24:C6:44:4A:9F:E3:41:11:E3:7D Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584950F965C4C880B97FA92FDC00 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 21559 IP address blocks: 72.46.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:65:c4:c8:80:b9:7f:a9:2f:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=b9e0767e-7159-46b7-b56e-2bd9d21b78e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:40:52:78:b1:6a:b9:cf:dd:d3:31:b0:2f:36: 6d:4b:b8:63:da:58:dc:01:a0:7b:ec:d9:86:8d:42: ca:c5:ed:da:9f:7e:13:eb:ac:53:b1:45:89:b9:a6: d2:15:a5:06:7b:a2:4c:b6:74:38:e8:5f:de:e1:9d: dd:9e:f8:dd:4b:14:49:fd:97:b8:3a:99:43:02:b4: 4b:ad:84:1c:c0:0e:cd:8c:96:f0:11:0b:49:cf:ef: 44:b5:4a:85:a0:3c:93:80:f0:17:38:d8:72:46:61: 74:97:dd:b7:50:b5:93:12:20:80:eb:46:66:8b:a0: a7:28:82:ac:db:be:42:4b:de:5f:d5:5f:9f:94:28: d4:7c:0f:5c:fd:cd:fc:94:6c:3d:f4:6a:84:86:c7: 34:f6:5d:b1:73:b6:86:a3:25:cd:bb:e9:c7:76:5f: af:07:b8:81:14:a5:66:62:d3:21:d7:96:47:13:ba: eb:89:fb:0e:0d:6c:38:ab:66:dc:97:d2:77:60:25: e1:90:b7:b7:f6:dd:20:4c:f3:61:51:61:7d:89:1e: ca:24:29:70:dd:57:de:db:1c:ee:e9:e8:9d:72:59: 6f:a1:8d:d6:33:0e:4c:2a:6f:b2:5a:09:01:67:88: ff:72:2f:67:b1:09:6d:e5:ec:b9:79:6e:5c:a9:dc: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CB:C0:89:BF:F8:46:4E:8B:65:24:C6:44:4A:9F:E3:41:11:E3:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 72.46.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:04:42:99:5d:22:a6:74:05:24:72:30:fa:80:b0:c0:16:d8: bf:fd:c7:77:d8:dd:fc:7b:c0:12:48:0b:b2:02:0f:d5:1e:63: be:79:34:7d:9d:70:fd:64:3b:59:fd:a6:0c:6e:4b:9a:18:d2: fd:ac:b7:e1:57:00:dc:2a:98:40:30:25:68:f2:64:b7:29:3f: cb:7e:19:de:9c:08:aa:2f:22:32:73:30:81:4f:c1:82:a4:f6: 4f:03:53:4d:85:82:cb:7e:bd:d4:2b:fa:ef:06:42:c9:69:c2: 0a:36:fd:53:95:42:d3:7b:33:97:58:84:67:b8:d5:11:5b:f0: 47:14:ee:cd:62:9f:ae:ee:e5:e2:13:8f:55:34:cd:01:04:29: ed:db:a2:f0:b5:72:7c:be:29:07:24:13:d9:e6:cf:43:0a:05: bf:1a:ff:0b:84:7d:94:88:1a:80:4c:c6:0e:29:6a:24:dc:d7: f9:7d:d9:0b:f5:b4:aa:4a:1e:dc:d4:d5:83:61:0c:18:41:c3: f0:f9:dd:53:17:51:da:f2:ca:53:af:a5:68:62:e5:67:73:ed: bc:5b:ec:0a:9b:5f:67:e6:3b:c0:9f:20:a7:17:0a:91:0d:4a: a6:41:2b:a0:b9:08:99:ad:22:82:fe:22:1d:4d:56:54:6a:16: 13:fc:d1:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WXEyIC5f6kv3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk YjllMDc2N2UtNzE1OS00NmI3LWI1NmUtMmJkOWQyMWI3OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEBSeLFquc/d0zGwLzZtS7hj2ljcAaB77NmG jULKxe3an34T66xTsUWJuabSFaUGe6JMtnQ46F/e4Z3dnvjdSxRJ/Ze4OplDArRL rYQcwA7NjJbwEQtJz+9EtUqFoDyTgPAXONhyRmF0l923ULWTEiCA60Zmi6CnKIKs 275CS95f1V+flCjUfA9c/c38lGw99GqEhsc09l2xc7aGoyXNu+nHdl+vB7iBFKVm YtMh15ZHE7rrifsODWw4q2bcl9J3YCXhkLe39t0gTPNhUWF9iR7KJClw3Vfe2xzu 6eidcllvoY3WMw5MKm+yWgkBZ4j/ci9nsQlt5ey5eW5cqdx4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnLwIm/+EZOi2UkxkRKn+NBEeN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZWY0NWYxM2ItMzk0OS0z YTQwLThiYzMtNmEwNDM0NGMwMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASC6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUEQpldIqZ0BSRyMPqAsMAW2L/9x3fY3fx7wBJIC7ICD9UeY755NH2d cP1kO1n9pgxuS5oY0v2st+FXANwqmEAwJWjyZLcpP8t+Gd6cCKovIjJzMIFPwYKk 9k8DU02Fgst+vdQr+u8GQslpwgo2/VOVQtN7M5dYhGe41RFb8EcU7s1in67u5eIT j1U0zQEEKe3bovC1cny+KQckE9nmz0MKBb8a/wuEfZSIGoBMxg4paiTc1/l92Qv1 tKpKHtzU1YNhDBhBw/D53VMXUdryylOvpWhi5Wdz7bxb7AqbX2fmO8CfIKcXCpEN SqZBK6C5CJmtIoL+Ih1NVlRqFhP80ZQ= -----END CERTIFICATE-----Generated at Sat Apr 12 12:52:45 2025 by rpki-client