$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa File: af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa (raw, json) Hash identifier: Gfkr/SrfZZBaMOkLB9v3DP42JdjeeAVyKPazt5DCCoo= Subject key identifier: E8:24:29:F0:66:78:08:46:8A:27:26:8A:B3:D4:CA:24:EC:21:13:F3 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F43285849C904E93708D9598293F2D700 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 54032 IP address blocks: 72.233.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:e9:37:08:d9:59:82:93:f2:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=3d064508-5c64-47a3-9825-299b784a65eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e2:3d:8c:42:be:70:93:41:ac:8b:c9:aa:27: fb:2d:2e:74:3a:f3:13:4d:e8:e6:3c:a2:67:95:c7: 3c:f3:c5:62:63:df:97:87:da:6a:5b:65:f5:92:17: 76:49:bf:9c:4b:3b:06:7f:88:4e:84:e5:2a:05:eb: 07:71:2e:2b:ce:8a:64:58:3c:90:c3:9b:36:1b:c5: ff:11:3c:1b:69:a0:66:b0:65:a7:58:51:b4:d4:1c: 7e:f3:07:82:42:6b:1e:d9:97:b3:95:23:8e:d1:07: 2e:2f:04:c8:35:8f:bd:c0:48:8a:50:c7:f7:c0:72: 44:06:29:b7:22:ff:cb:62:18:09:a5:de:f5:fc:cd: 27:08:59:d9:c9:81:34:49:0f:a3:22:b7:cf:d6:71: 97:fc:79:e6:c8:28:47:8b:37:be:43:89:ff:26:13: 79:3c:15:71:54:d4:64:e2:f6:10:5f:81:4f:67:51: f9:76:6b:0a:ca:1d:dc:25:6c:e4:21:10:81:f5:4f: a3:30:e4:79:2d:2b:48:08:6f:f0:e2:01:aa:e9:c7: 1f:b9:b7:c1:9c:1f:1d:ba:ed:18:eb:8a:38:86:f5: 2b:ae:57:d8:dd:93:b2:e7:b7:01:0d:cd:87:44:fd: 4b:59:56:f9:1a:4b:d8:c0:0c:ef:6f:91:22:cc:8b: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:24:29:F0:66:78:08:46:8A:27:26:8A:B3:D4:CA:24:EC:21:13:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b4:b3:39:8e:4d:16:91:46:c2:fd:63:fe:e1:e3:a9:78:58: 37:74:71:58:b4:89:c2:55:c1:f6:c4:d1:9c:48:49:94:20:9c: 25:ea:cb:74:57:c1:a0:63:ad:e1:5c:70:cb:28:1d:56:73:43: e3:55:75:d3:79:94:e6:00:f5:31:eb:75:21:de:cb:72:37:71: 76:a4:f4:c3:7b:c1:1e:8c:5c:22:2d:d3:37:10:79:00:d5:3b: 5b:1c:f5:93:42:a0:5f:20:15:39:a7:ef:7e:10:60:66:ee:2e: 1c:93:4d:b2:77:fd:0f:a0:4e:e0:52:20:e7:f8:9b:c6:4c:57: ee:04:a5:b9:02:33:84:ab:9e:01:13:8d:0a:f9:02:23:c4:11: d4:b5:f6:56:b6:4f:8c:eb:3b:26:c7:27:4c:90:90:36:3b:bd: 8e:2d:28:54:52:5e:0e:e5:20:2f:53:9e:aa:19:13:73:60:46: 51:68:2a:51:7e:f9:58:43:5a:57:8d:77:00:b5:e9:ec:70:f1: 73:57:54:57:7a:f9:d2:4b:5c:a9:c2:16:d9:a4:57:d7:69:f8: 95:4a:17:b1:86:b8:e4:34:f2:53:a2:8a:af:36:ab:62:23:86: 5a:1c:9c:60:cb:29:01:40:fa:d1:9a:27:ff:aa:ff:dc:4a:c1: 2a:1f:5f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBOk3CNlZgpPy1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk M2QwNjQ1MDgtNWM2NC00N2EzLTk4MjUtMjk5Yjc4NGE2NWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneI9jEK+cJNBrIvJqif7LS50OvMTTejmPKJn lcc888ViY9+Xh9pqW2X1khd2Sb+cSzsGf4hOhOUqBesHcS4rzopkWDyQw5s2G8X/ ETwbaaBmsGWnWFG01Bx+8weCQmse2ZezlSOO0QcuLwTINY+9wEiKUMf3wHJEBim3 Iv/LYhgJpd71/M0nCFnZyYE0SQ+jIrfP1nGX/HnmyChHize+Q4n/JhN5PBVxVNRk 4vYQX4FPZ1H5dmsKyh3cJWzkIRCB9U+jMOR5LStICG/w4gGq6ccfubfBnB8duu0Y 64o4hvUrrlfY3ZOy57cBDc2HRP1LWVb5GkvYwAzvb5EizIvANwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgkKfBmeAhGiicmirPUyiTsIRPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvYWY0YTcwZWQtNDk3OC0z N2FjLTliYzYtYTNjN2JlYTI0MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSOmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH60szmOTRaRRsL9Y/7h46l4WDd0cVi0icJVwfbE0ZxISZQgnCXqy3RX waBjreFccMsoHVZzQ+NVddN5lOYA9THrdSHey3I3cXak9MN7wR6MXCIt0zcQeQDV O1sc9ZNCoF8gFTmn734QYGbuLhyTTbJ3/Q+gTuBSIOf4m8ZMV+4EpbkCM4SrngET jQr5AiPEEdS19la2T4zrOybHJ0yQkDY7vY4tKFRSXg7lIC9TnqoZE3NgRlFoKlF+ +VhDWleNdwC16exw8XNXVFd6+dJLXKnCFtmkV9dp+JVKF7GGuOQ08lOiiq82q2Ij hlocnGDLKQFA+tGaJ/+q/9xKwSofX8k= -----END CERTIFICATE-----Generated at Tue Jun 3 04:46:36 2025 by rpki-client