$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4c8f1eda-3531-3cf9-b7e3-1127391f3f28.roa File: 4c8f1eda-3531-3cf9-b7e3-1127391f3f28.roa (raw, json) Hash identifier: vP3iUqOAZBEVyRf4FdaltEZLUjfmvQ7VBciDGi8GJDg= Subject key identifier: 4C:4B:AC:CD:4E:36:EC:6B:AF:09:DC:11:DD:CC:12:D8:0E:F7:2A:3B Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F43285848E2D11752D20CAC79683ADC00 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4c8f1eda-3531-3cf9-b7e3-1127391f3f28.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 54032 IP address blocks: 72.233.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:17:52:d2:0c:ac:79:68:3a:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=03d1f277-eea0-472e-aa48-ce650ec7160e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a4:d1:ba:74:8a:e6:bd:eb:87:34:27:92:cc: 26:30:f0:35:f7:f5:55:c6:6a:c8:db:36:02:50:67: e0:2d:05:f9:4b:52:a3:03:c6:0a:bd:a0:bf:42:c7: 1c:d5:eb:1e:75:0e:82:93:aa:f1:a4:e9:ab:b9:64: de:b8:57:df:a4:0c:b2:82:40:3a:81:b6:aa:18:7c: 01:72:c9:89:0f:00:9e:43:4e:21:87:61:fb:1e:2f: 4f:74:9e:7c:d4:ee:86:b7:3f:34:fa:c1:55:87:78: 5f:16:36:02:7f:fa:9e:fa:5d:9d:23:37:75:40:f7: 55:06:34:82:58:55:18:d4:88:2d:f1:65:0d:cb:98: 21:98:49:97:e7:a7:44:8a:a8:bd:06:76:c9:90:9b: cf:ff:1e:6b:f3:e7:fc:81:3a:8c:31:a2:60:9d:b1: 4e:c8:c8:bc:7a:24:97:f5:ad:3c:af:8b:45:54:f9: 30:47:f0:d7:56:a7:ba:69:7b:f1:1e:1e:f4:ea:f0: 33:ef:7b:3c:f7:64:e0:84:8d:b9:dd:71:7e:1d:6b: 30:72:46:db:9a:aa:a5:5a:f1:4d:d1:8e:2a:72:bb: 78:c1:e7:a7:32:11:12:67:8c:73:69:51:39:da:c7: 5b:b8:ba:06:0c:15:5e:4c:9e:56:1b:66:e4:fd:93: 7c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4B:AC:CD:4E:36:EC:6B:AF:09:DC:11:DD:CC:12:D8:0E:F7:2A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4c8f1eda-3531-3cf9-b7e3-1127391f3f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:15:56:a0:46:56:6a:08:cd:b5:eb:82:0f:66:69:cc:03:4f: e3:41:25:b2:d5:2b:3c:94:9c:7b:3f:49:20:05:eb:f6:50:aa: ed:d1:7d:af:55:a0:83:ee:cd:cf:65:bc:81:ee:62:c0:69:20: 03:60:21:d8:67:c0:25:d9:57:0f:dc:44:a9:06:f5:2f:5a:8f: f4:cc:56:67:e2:d7:6a:99:e0:74:89:ea:07:58:91:48:e0:0b: d9:d8:6b:7f:e0:b3:31:57:32:33:92:f4:9d:66:60:44:87:9a: 75:31:1f:91:07:3e:00:d6:ab:39:10:44:c7:35:6b:2c:11:61: 81:44:97:7a:80:47:88:dd:85:e9:b3:45:8b:60:3f:66:40:92: 2e:47:20:34:ec:af:6f:7a:99:64:4f:75:08:3e:f6:a5:06:42: 32:fd:e4:58:71:88:47:bc:a2:44:aa:7f:b4:9d:b9:b9:36:70: 15:eb:86:29:15:18:f2:d6:a8:50:cb:c9:e8:69:75:d3:0b:7e: 2f:ea:ae:f9:18:dd:4c:bc:b6:fa:96:21:b1:ae:25:23:d6:11: 9e:1a:05:13:42:1b:13:7a:e0:f8:62:57:f3:76:d5:6d:cd:58: 6e:85:45:59:41:80:e7:62:1c:f7:4f:03:2a:43:11:e2:21:09: 60:a4:aa:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0RdS0gyseWg63AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk MDNkMWYyNzctZWVhMC00NzJlLWFhNDgtY2U2NTBlYzcxNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKTRunSK5r3rhzQnkswmMPA19/VVxmrI2zYC UGfgLQX5S1KjA8YKvaC/Qscc1esedQ6Ck6rxpOmruWTeuFffpAyygkA6gbaqGHwB csmJDwCeQ04hh2H7Hi9PdJ581O6Gtz80+sFVh3hfFjYCf/qe+l2dIzd1QPdVBjSC WFUY1Igt8WUNy5ghmEmX56dEiqi9BnbJkJvP/x5r8+f8gTqMMaJgnbFOyMi8eiSX 9a08r4tFVPkwR/DXVqe6aXvxHh706vAz73s892TghI253XF+HWswckbbmqqlWvFN 0Y4qcrt4weenMhESZ4xzaVE52sdbuLoGDBVeTJ5WG2bk/ZN8AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExLrM1ONuxrrwncEd3MEtgO9yo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNGM4ZjFlZGEtMzUzMS0z Y2Y5LWI3ZTMtMTEyNzM5MWYzZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSOmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAVVqBGVmoIzbXrgg9macwDT+NBJbLVKzyUnHs/SSAF6/ZQqu3Rfa9V oIPuzc9lvIHuYsBpIANgIdhnwCXZVw/cRKkG9S9aj/TMVmfi12qZ4HSJ6gdYkUjg C9nYa3/gszFXMjOS9J1mYESHmnUxH5EHPgDWqzkQRMc1aywRYYFEl3qAR4jdhemz RYtgP2ZAki5HIDTsr296mWRPdQg+9qUGQjL95FhxiEe8okSqf7Sdubk2cBXrhikV GPLWqFDLyehpddMLfi/qrvkY3Uy8tvqWIbGuJSPWEZ4aBRNCGxN64PhiV/N21W3N WG6FRVlBgOdiHPdPAypDEeIhCWCkqrA= -----END CERTIFICATE-----Generated at Sat Apr 12 01:59:54 2025 by rpki-client