$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/3245ca37-0734-301d-b450-94f643a39c6a.roa File: 3245ca37-0734-301d-b450-94f643a39c6a.roa (raw, json) Hash identifier: Ps3FXg77G/YijFJhZz65SmLaxucMJ2ywlOvUMeW+m7c= Subject key identifier: 13:D3:AF:63:BC:4F:F1:18:E9:35:D1:CD:1E:FB:E0:9F:86:E0:65:9A Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Certificate serial: 010D0C9F432858497DF540FAED45DAFC1AE21340 Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/3245ca37-0734-301d-b450-94f643a39c6a.roa Signing time: Fri 11 Apr 2025 15:44:01 +0000 ROA not before: Fri 11 Apr 2025 15:44:01 +0000 ROA not after: Thu 10 Jul 2025 15:44:01 +0000 asID: 7018 IP address blocks: 72.1.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:f5:40:fa:ed:45:da:fc:1a:e2:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Validity Not Before: Apr 11 15:44:01 2025 GMT Not After : Jul 10 15:44:01 2025 GMT Subject: CN=98e6915d-1903-412f-97d4-9035dee0ce63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d4:0e:e9:34:d6:07:81:d9:b4:57:8f:72:65: ee:27:58:0b:f9:48:27:1b:09:f4:98:32:5d:08:d0: f4:d7:7e:b9:81:ba:ba:23:df:db:da:75:54:60:7d: 43:88:89:5a:19:3d:5f:a7:39:8e:c6:64:f8:07:ea: 56:43:2c:14:78:bb:09:43:df:55:f0:df:8b:18:14: 58:0e:d0:e0:61:8c:14:8f:21:b2:ad:f9:09:b0:78: 6e:ff:9c:19:02:9c:c1:62:43:23:39:ad:78:c5:10: 06:10:cd:f7:ff:af:f7:24:8a:3c:06:19:2c:cf:50: bd:f3:f5:75:f9:bd:65:20:45:31:98:d9:b4:6f:2f: fe:3f:95:e7:8a:d0:57:17:e3:64:f3:c8:d8:c2:97: 35:7a:d1:d8:cf:76:cc:81:e8:7b:a2:3c:14:f4:6a: 29:9d:6b:c6:4d:ad:78:ba:73:43:e9:35:bd:9e:6a: ae:94:f5:00:ed:60:a7:d5:ab:c7:c3:82:ae:aa:af: 09:ac:70:8e:51:86:24:7e:a2:c4:2f:cc:d4:cb:68: f9:69:c1:72:bc:56:08:5b:67:8b:0f:06:63:73:46: 09:ad:9d:62:80:ab:cc:b6:2b:23:21:3e:f1:d1:4e: 99:69:3c:54:19:a9:36:81:c1:e4:0c:9a:63:2e:c0: 99:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D3:AF:63:BC:4F:F1:18:E9:35:D1:CD:1E:FB:E0:9F:86:E0:65:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/3245ca37-0734-301d-b450-94f643a39c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl X509v3 Authority Key Identifier: keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer sbgp-ipAddrBlock: critical IPv4: 72.1.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:08:59:26:55:9b:56:39:a2:76:6e:ba:ad:b1:ea:bc:83:85: 7a:c3:78:73:5d:5b:5f:4e:a2:17:22:d7:03:c0:86:0f:37:2d: 26:81:f4:24:7e:bd:c5:9f:b8:2c:fa:eb:03:49:2b:2b:e1:c8: 31:70:da:60:fa:f5:87:a5:85:87:d0:9b:a7:a3:80:a3:f6:a8: c2:19:94:43:45:05:bc:e8:66:c8:a7:71:8b:0b:bf:67:86:73: 11:cc:98:7b:bf:ab:72:44:30:72:54:7c:d9:11:2f:a3:24:26: 6e:03:e4:70:97:79:36:dd:1c:dd:5c:ba:32:77:9a:c2:c9:36: 5f:af:61:25:66:dd:62:b1:42:bd:4f:c1:30:45:bd:88:40:fe: 22:67:78:d9:32:99:f2:b7:6e:48:af:61:7b:d2:90:b7:31:1e: 6e:cb:aa:d9:bb:e7:27:c1:cf:52:ff:b7:94:f3:84:b7:7c:97: 76:27:a7:ad:75:31:7c:bf:d3:30:72:75:2d:3d:d9:e4:53:26: 63:5f:ed:e5:87:11:fe:16:28:a4:65:b1:d4:e2:e1:5e:60:70: 68:12:c8:dc:e5:09:bc:5f:5a:a0:97:5a:73:d3:8e:df:d3:65: 5a:a4:13:29:d4:f1:f2:c8:77:d1:c5:81:e1:cb:92:cd:c1:82: e5:ab:98:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl99UD67UXa/BriE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNTkwZTgtMzBjNS00OTk3LWJiZjMtZjJmZTEwYTI5 ZTg3MB4XDTI1MDQxMTE1NDQwMVoXDTI1MDcxMDE1NDQwMVowLzEtMCsGA1UEAxMk OThlNjkxNWQtMTkwMy00MTJmLTk3ZDQtOTAzNWRlZTBjZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdQO6TTWB4HZtFePcmXuJ1gL+UgnGwn0mDJd CND01365gbq6I9/b2nVUYH1DiIlaGT1fpzmOxmT4B+pWQywUeLsJQ99V8N+LGBRY DtDgYYwUjyGyrfkJsHhu/5wZApzBYkMjOa14xRAGEM33/6/3JIo8Bhksz1C98/V1 +b1lIEUxmNm0by/+P5XnitBXF+Nk88jYwpc1etHYz3bMgeh7ojwU9GopnWvGTa14 unND6TW9nmqulPUA7WCn1avHw4Kuqq8JrHCOUYYkfqLEL8zUy2j5acFyvFYIW2eL DwZjc0YJrZ1igKvMtisjIT7x0U6ZaTxUGak2gcHkDJpjLsCZoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPTr2O8T/EY6TXRzR774J+G4GWaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1 OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZlMTBhMjllODcvMzI0NWNhMzctMDczNC0z MDFkLWI0NTAtOTRmNjQzYTM5YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNiNTkwZTgtMzBjNS00OTk3LWJi ZjMtZjJmZTEwYTI5ZTg3LzIzYjU5MGU4LTMwYzUtNDk5Ny1iYmYzLWYyZmUxMGEy OWU4Ny5jcmwwHwYDVR0jBBgwFoAUcy1hwgTHlLBjGpuuELFhCs6jUygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZl MTBhMjllODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSAGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYIWSZVm1Y5onZuuq2x6ryDhXrDeHNdW19Oohci1wPAhg83LSaB9CR+ vcWfuCz66wNJKyvhyDFw2mD69YelhYfQm6ejgKP2qMIZlENFBbzoZsincYsLv2eG cxHMmHu/q3JEMHJUfNkRL6MkJm4D5HCXeTbdHN1cujJ3msLJNl+vYSVm3WKxQr1P wTBFvYhA/iJneNkymfK3bkivYXvSkLcxHm7Lqtm75yfBz1L/t5TzhLd8l3Ynp611 MXy/0zBydS092eRTJmNf7eWHEf4WKKRlsdTi4V5gcGgSyNzlCbxfWqCXWnPTjt/T ZVqkEynU8fLId9HFgeHLks3BguWrmMA= -----END CERTIFICATE-----Generated at Tue Apr 15 11:54:19 2025 by rpki-client