$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/221b863e-bb93-3694-b0bd-7f093740bf43.roa File: 221b863e-bb93-3694-b0bd-7f093740bf43.roa (raw, json) Hash identifier: l9qY33ZBQEgyG0J5Cb+eTVVqZsqy8ARsSvDxLtjnwLg= Subject key identifier: 70:13:3C:90:23:14:DB:66:FD:1F:22:47:61:BA:FC:05:A6:60:74:E3 Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Certificate serial: 010D0C9F432858497DF49E94A4146476DF0E7660 Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/221b863e-bb93-3694-b0bd-7f093740bf43.roa Signing time: Fri 11 Apr 2025 15:42:45 +0000 ROA not before: Fri 11 Apr 2025 15:42:45 +0000 ROA not after: Thu 10 Jul 2025 15:42:45 +0000 asID: 6079 IP address blocks: 72.1.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:f4:9e:94:a4:14:64:76:df:0e:76:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Validity Not Before: Apr 11 15:42:45 2025 GMT Not After : Jul 10 15:42:45 2025 GMT Subject: CN=9c389e5f-90fe-47bd-bf1e-747d676a9304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e3:05:aa:b8:85:a1:ea:43:e2:93:79:6a:59: df:c8:36:fb:e0:83:70:20:d4:92:37:f6:db:78:ad: a0:d5:47:35:87:da:2a:b4:f6:f0:81:c4:8e:79:ba: e7:1c:25:15:6b:a1:3d:0e:0b:15:e1:d1:22:91:88: c9:7e:a8:ce:ef:65:00:49:fb:5c:ee:a6:f2:56:e0: 55:f1:1f:f8:03:80:07:40:4e:9d:0d:ad:11:04:1a: f1:7f:23:f2:86:41:a2:04:b8:47:e7:c4:89:ab:76: e0:cb:40:58:6c:8e:33:95:14:d6:3f:65:12:90:2e: 0f:3e:6b:e6:c6:e6:be:7b:55:6a:1b:72:93:d0:38: 1e:99:9c:d8:2c:88:26:db:a6:e8:e2:c0:ca:69:91: 13:8e:f6:a5:2b:3d:49:ed:0d:ae:f8:3b:5a:01:53: 50:a0:3f:52:46:5c:30:6f:f8:36:8a:75:02:60:ff: a3:89:dc:eb:0e:d8:80:a9:82:62:1f:1b:99:34:9b: 64:01:41:b7:98:cb:08:25:27:12:4f:55:33:dc:6a: ab:82:fe:24:2c:b2:d3:fa:ee:73:e3:46:06:08:0c: 2f:0a:4a:6d:a7:32:e8:d4:d3:b4:a3:50:75:28:90: 58:e2:99:a0:2e:c5:68:98:ec:ac:5e:f6:e3:f0:91: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:13:3C:90:23:14:DB:66:FD:1F:22:47:61:BA:FC:05:A6:60:74:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/221b863e-bb93-3694-b0bd-7f093740bf43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl X509v3 Authority Key Identifier: keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer sbgp-ipAddrBlock: critical IPv4: 72.1.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8b:68:e1:75:03:a0:95:37:77:d1:5f:89:21:13:9a:38:e6: 2e:d9:b8:e8:e1:4d:0c:48:9c:3f:a6:80:bf:3a:30:5b:d1:d2: 38:02:41:69:06:fe:67:a8:1b:69:c8:dd:29:25:4f:4d:68:11: 40:ae:89:51:97:9e:f3:7a:b1:ae:2d:9e:4a:54:6f:ef:62:ad: 02:2c:0f:09:ed:05:4d:a4:00:ab:41:b5:88:b6:65:9e:03:8e: ee:db:03:b3:7e:0c:31:32:65:99:cb:e7:af:73:34:cc:e7:9a: a3:c9:29:71:b4:a0:42:be:ab:94:e0:0c:f9:19:f2:2c:69:1b: 02:8d:2a:e6:c5:70:47:ff:ca:72:5e:c4:c4:60:17:94:b8:e3: 08:f8:75:84:f0:60:56:88:31:43:92:bc:df:55:63:52:31:c7: 0f:3b:7d:ad:c2:04:00:05:57:c9:ca:54:7f:fb:3c:19:0b:46: 23:c6:7d:e3:a8:f1:93:c2:cf:a4:b7:12:f7:4a:8e:86:46:28: 8c:2b:e9:6d:db:24:2f:24:19:c1:1a:05:0a:da:f0:3c:30:21: 28:df:a0:44:e0:7b:f5:69:dc:ee:d1:d1:a6:6c:a0:d3:f2:55: c9:53:8b:13:ef:df:b7:22:3e:62:7a:3c:34:fa:a2:d4:74:11: 63:f9:05:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl99J6UpBRkdt8OdmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNTkwZTgtMzBjNS00OTk3LWJiZjMtZjJmZTEwYTI5 ZTg3MB4XDTI1MDQxMTE1NDI0NVoXDTI1MDcxMDE1NDI0NVowLzEtMCsGA1UEAxMk OWMzODllNWYtOTBmZS00N2JkLWJmMWUtNzQ3ZDY3NmE5MzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieMFqriFoepD4pN5alnfyDb74INwINSSN/bb eK2g1Uc1h9oqtPbwgcSOebrnHCUVa6E9DgsV4dEikYjJfqjO72UASftc7qbyVuBV 8R/4A4AHQE6dDa0RBBrxfyPyhkGiBLhH58SJq3bgy0BYbI4zlRTWP2USkC4PPmvm xua+e1VqG3KT0DgemZzYLIgm26bo4sDKaZETjvalKz1J7Q2u+DtaAVNQoD9SRlww b/g2inUCYP+jidzrDtiAqYJiHxuZNJtkAUG3mMsIJScST1Uz3Gqrgv4kLLLT+u5z 40YGCAwvCkptpzLo1NO0o1B1KJBY4pmgLsVomOysXvbj8JEohQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHATPJAjFNtm/R8iR2G6/AWmYHTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1 OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZlMTBhMjllODcvMjIxYjg2M2UtYmI5My0z Njk0LWIwYmQtN2YwOTM3NDBiZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNiNTkwZTgtMzBjNS00OTk3LWJi ZjMtZjJmZTEwYTI5ZTg3LzIzYjU5MGU4LTMwYzUtNDk5Ny1iYmYzLWYyZmUxMGEy OWU4Ny5jcmwwHwYDVR0jBBgwFoAUcy1hwgTHlLBjGpuuELFhCs6jUygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZl MTBhMjllODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqLaOF1A6CVN3fRX4khE5o45i7ZuOjhTQxInD+mgL86MFvR0jgCQWkG /meoG2nI3SklT01oEUCuiVGXnvN6sa4tnkpUb+9irQIsDwntBU2kAKtBtYi2ZZ4D ju7bA7N+DDEyZZnL569zNMznmqPJKXG0oEK+q5TgDPkZ8ixpGwKNKubFcEf/ynJe xMRgF5S44wj4dYTwYFaIMUOSvN9VY1Ixxw87fa3CBAAFV8nKVH/7PBkLRiPGfeOo 8ZPCz6S3EvdKjoZGKIwr6W3bJC8kGcEaBQra8DwwISjfoETge/Vp3O7R0aZsoNPy VclTixPv37ciPmJ6PDT6otR0EWP5BSo= -----END CERTIFICATE-----Generated at Tue Apr 15 11:56:50 2025 by rpki-client