$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/31c8bc35-faa3-3035-9823-b218dbe0b84a.roa File: 31c8bc35-faa3-3035-9823-b218dbe0b84a.roa (raw, json) Hash identifier: YodtfP0deGfqsMYfHe2eJafNclmQwryfsQ6f/Czdlro= Subject key identifier: DB:55:F7:F5:EE:94:7F:CA:5B:79:1D:04:48:D4:56:BF:CB:43:DA:BF Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F43285849C4D4BFE7175F926325D54740 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/31c8bc35-faa3-3035-9823-b218dbe0b84a.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 54032 IP address blocks: 72.233.142.0/24 maxlen: 24 72.233.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:bf:e7:17:5f:92:63:25:d5:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=9cd50736-cb80-46a7-8233-00da3022346f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:fa:8e:1f:10:81:2f:83:88:08:ea:29:ad: f2:97:22:d3:34:db:76:36:ca:3e:27:b0:55:eb:5c: 2a:2a:3a:dc:f7:b0:ba:7a:ce:51:94:cd:cc:96:b8: d2:5f:e4:44:8a:39:2d:13:07:1a:da:16:7d:69:ae: d4:00:4f:ca:9b:de:ae:7f:5a:69:29:bc:2d:f3:f1: 76:b4:e3:89:bd:38:5d:a8:6b:ee:20:f1:83:8b:6c: db:6a:c0:8f:f8:34:38:b3:62:c1:34:98:46:0b:47: 29:3b:e2:9a:dc:17:1c:b2:60:61:9e:24:5c:3f:27: 90:ad:90:66:cc:03:87:a8:43:7e:5d:e2:46:18:be: 49:41:21:9f:0b:ea:0c:16:3b:d9:92:78:f9:bc:fa: b7:09:f0:82:ac:e9:2c:84:bd:09:24:b1:1b:1e:f9: e6:e7:6c:0d:ea:16:40:b1:d2:cd:95:04:c2:3a:bb: 84:30:fe:a4:2c:16:ce:da:16:f6:a7:f1:75:9b:4c: 56:04:9d:a9:74:2e:2a:29:ad:f8:8a:52:8b:ba:94: 1d:30:ba:cb:46:b4:c8:4c:25:f4:c8:58:fc:b1:ae: 56:44:26:45:ad:67:59:c8:ec:d8:18:87:b5:db:0c: 20:bd:c2:8d:9b:76:50:79:df:3a:ab:4c:6f:67:24: 3e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:55:F7:F5:EE:94:7F:CA:5B:79:1D:04:48:D4:56:BF:CB:43:DA:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/31c8bc35-faa3-3035-9823-b218dbe0b84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ce:08:c5:df:fa:24:99:ba:1e:27:84:b0:42:f1:5f:03:1f: 4c:1e:ad:82:03:a6:dd:36:fe:f3:51:a9:9e:be:d5:85:36:2e: 32:0e:87:ac:a5:38:dc:86:49:1d:bd:b4:e7:cf:c0:73:89:bb: ab:84:d7:26:7c:34:f7:14:f5:91:ad:11:94:d3:8b:a2:e2:e5: 03:e9:11:67:a6:d7:47:13:24:79:3c:1b:90:9c:d1:7c:13:37: 9f:b3:27:90:0c:cc:89:40:3f:a2:58:a2:2b:9d:b2:41:e1:7d: 35:9c:bd:67:9d:c1:ce:7f:b1:de:16:e4:1f:47:df:a0:b8:37: 73:80:6e:a2:fb:37:74:69:52:e9:ea:13:e2:c8:d2:61:69:94: c6:eb:75:67:21:eb:b4:a4:03:7a:08:51:f9:8a:0c:d5:ef:d0: 85:13:87:8c:38:02:09:03:9f:ef:e2:8a:15:28:59:c1:6a:fa: eb:ca:6e:07:a4:07:07:8e:37:47:18:7b:e1:63:f9:16:5a:14: 2a:2b:2c:41:c0:73:d8:d8:f0:15:12:ff:90:cc:a5:68:cb:a4: 91:b5:d4:99:66:b7:86:3f:ad:d7:9c:f8:f8:0a:6c:43:93:2c: e1:9e:92:c7:4d:4e:b7:9b:fc:27:46:83:0a:c5:21:1b:65:91: 10:c6:59:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1L/nF1+SYyXVR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk OWNkNTA3MzYtY2I4MC00NmE3LTgyMzMtMDBkYTMwMjIzNDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/f6jh8QgS+DiAjqKa3ylyLTNNt2Nso+J7BV 61wqKjrc97C6es5RlM3MlrjSX+REijktEwca2hZ9aa7UAE/Km96uf1ppKbwt8/F2 tOOJvThdqGvuIPGDi2zbasCP+DQ4s2LBNJhGC0cpO+Ka3BccsmBhniRcPyeQrZBm zAOHqEN+XeJGGL5JQSGfC+oMFjvZknj5vPq3CfCCrOkshL0JJLEbHvnm52wN6hZA sdLNlQTCOruEMP6kLBbO2hb2p/F1m0xWBJ2pdC4qKa34ilKLupQdMLrLRrTITCX0 yFj8sa5WRCZFrWdZyOzYGIe12wwgvcKNm3ZQed86q0xvZyQ+kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtV9/XulH/KW3kdBEjUVr/LQ9q/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMzFjOGJjMzUtZmFhMy0z MDM1LTk4MjMtYjIxOGRiZTBiODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSOmOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/OCMXf+iSZuh4nhLBC8V8DH0werYIDpt02/vNRqZ6+1YU2LjIOh6yl ONyGSR29tOfPwHOJu6uE1yZ8NPcU9ZGtEZTTi6Li5QPpEWem10cTJHk8G5Cc0XwT N5+zJ5AMzIlAP6JYoiudskHhfTWcvWedwc5/sd4W5B9H36C4N3OAbqL7N3RpUunq E+LI0mFplMbrdWch67SkA3oIUfmKDNXv0IUTh4w4AgkDn+/iihUoWcFq+uvKbgek BweON0cYe+Fj+RZaFCorLEHAc9jY8BUS/5DMpWjLpJG11Jlmt4Y/rdec+PgKbEOT LOGeksdNTreb/CdGgwrFIRtlkRDGWcI= -----END CERTIFICATE-----Generated at Tue Jun 3 04:49:15 2025 by rpki-client