$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa File: 0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa (raw, json) Hash identifier: IAGL1JwXRCh2FwSJCAv9B+15YhCofCRpvnu9wvd4WHs= Subject key identifier: C5:9C:B7:A9:93:E0:E2:11:1F:D2:79:D7:67:03:A1:67:8E:16:C4:41 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F43285849D85FA0327807778E424D2C80 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 10430 IP address blocks: 72.233.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a0:32:78:07:77:8e:42:4d:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=dd065505-6830-411a-8893-76003843fa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:bd:08:82:06:96:5d:dc:66:bc:e6:93:06: e0:d4:0a:15:4b:bf:a2:45:c5:7e:06:99:1c:8b:4e: 73:1d:90:d2:aa:36:3d:3a:d3:b5:e6:57:02:66:c7: 62:6f:2d:8e:21:ae:48:53:e6:69:9e:11:59:b3:3f: e9:69:60:83:c0:0e:8c:cb:7a:0a:13:d9:8e:c8:9f: b4:6c:a0:fd:bc:a7:33:7c:4a:c9:06:ef:93:1f:75: e4:83:eb:b7:26:bf:c1:b6:6d:dc:f9:f0:f1:06:d6: 5c:91:52:a0:0d:a7:6e:78:e3:d8:ae:cc:f2:8c:b4: ee:07:a6:bf:0a:ca:87:f0:ce:95:69:9f:e5:1b:fc: d5:fd:a0:5d:b6:51:3b:b8:ba:97:a6:cf:65:38:94: 0f:90:cb:48:af:15:84:8a:70:c5:49:80:9e:dc:59: 8f:0e:e5:89:61:65:b4:19:41:d0:28:e4:82:30:40: 80:65:08:9a:92:e3:e6:92:0a:1e:4d:6a:e0:93:cb: 84:60:e5:17:88:de:7a:a2:8b:b2:35:71:8a:e8:f1: 23:98:e6:69:9e:37:f6:80:2e:85:e7:65:3b:03:48: 0c:83:27:55:ae:2f:a8:2c:cf:21:2f:50:e8:d3:d0: b0:a6:0f:e1:b7:64:bb:61:e8:03:87:f4:04:2a:49: cf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9C:B7:A9:93:E0:E2:11:1F:D2:79:D7:67:03:A1:67:8E:16:C4:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:21:8f:04:1f:f1:2c:49:fa:ff:7f:83:42:88:82:52:46:c3: 19:59:6c:4e:3b:05:81:5e:0f:59:ac:b8:75:24:c6:e5:dc:93: 39:e2:d2:9c:d8:b6:9f:dd:cd:38:b3:9a:d0:c2:7f:1c:80:18: 19:a1:34:bf:58:de:40:a8:06:c2:dd:5c:84:62:c7:13:f5:8c: b6:e3:fd:e6:c9:90:00:a2:84:94:86:7d:03:83:19:7b:0a:e5: 5e:5d:72:c9:65:ad:4a:41:d4:c8:16:93:37:73:0c:92:08:79: 78:e3:65:06:78:86:56:64:dd:3f:8b:85:93:d1:92:24:ee:e6: ae:58:d9:c2:20:ff:99:fd:45:60:ec:87:ff:c4:b1:01:cc:02: 5f:9e:72:1d:55:8f:eb:8d:9d:d2:9b:f8:e5:fb:a8:81:48:d4: 4d:97:02:22:97:14:3e:2b:03:5d:ad:0d:75:b5:1d:42:44:66: 2d:24:d1:4a:a3:0e:df:14:89:3a:e0:ec:03:e7:02:12:7b:4b: 43:41:be:68:16:2a:e0:73:8c:06:57:e7:7c:62:db:9d:e3:7b: ec:66:9a:58:00:d2:89:74:05:e8:aa:4c:d4:e8:c6:41:1e:5a: 92:94:e7:6d:c2:f2:fd:7a:af:b2:1e:9d:b0:93:da:18:30:58: 96:c1:68:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6AyeAd3jkJNLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZGQwNjU1MDUtNjgzMC00MTFhLTg4OTMtNzYwMDM4NDNmYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoe9CIIGll3cZrzmkwbg1AoVS7+iRcV+Bpkc i05zHZDSqjY9OtO15lcCZsdiby2OIa5IU+ZpnhFZsz/paWCDwA6My3oKE9mOyJ+0 bKD9vKczfErJBu+TH3Xkg+u3Jr/Btm3c+fDxBtZckVKgDadueOPYrszyjLTuB6a/ CsqH8M6VaZ/lG/zV/aBdtlE7uLqXps9lOJQPkMtIrxWEinDFSYCe3FmPDuWJYWW0 GUHQKOSCMECAZQiakuPmkgoeTWrgk8uEYOUXiN56oouyNXGK6PEjmOZpnjf2gC6F 52U7A0gMgydVri+oLM8hL1Do09Cwpg/ht2S7YegDh/QEKknPvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWct6mT4OIRH9J512cDoWeOFsRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMGFmOWU2YTctZWMyNi0z Yjg4LThmYTQtOGQzMjU0OTg2ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIhjwQf8SxJ+v9/g0KIglJGwxlZbE47BYFeD1msuHUkxuXckzni0pzY tp/dzTizmtDCfxyAGBmhNL9Y3kCoBsLdXIRixxP1jLbj/ebJkACihJSGfQODGXsK 5V5dcsllrUpB1MgWkzdzDJIIeXjjZQZ4hlZk3T+LhZPRkiTu5q5Y2cIg/5n9RWDs h//EsQHMAl+ech1Vj+uNndKb+OX7qIFI1E2XAiKXFD4rA12tDXW1HUJEZi0k0Uqj Dt8UiTrg7APnAhJ7S0NBvmgWKuBzjAZX53xi253je+xmmlgA0ol0BeiqTNToxkEe WpKU523C8v16r7IenbCT2hgwWJbBaAM= -----END CERTIFICATE-----Generated at Tue Jun 3 04:48:39 2025 by rpki-client