$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/b6720d34-db30-38d9-91ae-45f07ef69322.roa File: b6720d34-db30-38d9-91ae-45f07ef69322.roa (raw, json) Hash identifier: o21PkD03Hf05xF9vHVnwi1l4cy0Yg+dRgBl0RNCneXs= Subject key identifier: BE:01:61:93:CB:1A:ED:B5:1E:86:7B:A0:0B:86:1D:B7:20:77:30:E6 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F43285848BFEBA79254784141AECD1CC0 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/b6720d34-db30-38d9-91ae-45f07ef69322.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 198949 IP address blocks: 72.10.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a7:92:54:78:41:41:ae:cd:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=6e28d2ae-c362-4afb-85cc-b62baea8150e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:55:6a:2d:73:5e:95:b9:24:80:20:0b:72:a6: cd:48:53:78:30:27:8c:96:e7:3e:ad:af:9d:71:2f: dd:77:d3:24:ae:fd:99:56:05:4f:8c:4a:d3:ed:4c: e8:7c:85:aa:9c:72:f4:bf:5e:22:f2:1b:03:c2:83: 07:93:f9:e7:d6:aa:de:0b:99:19:04:bb:bc:f7:5e: 4a:8a:c5:fa:de:3f:6a:07:58:88:e3:a7:0e:20:a0: 8f:46:41:1f:82:a3:dc:60:b4:dc:b0:e5:12:f1:cd: ce:16:a1:72:26:30:c6:f3:35:cf:90:00:4f:07:bc: 3d:ce:7b:71:de:e7:e4:70:42:ad:49:e0:93:1d:01: 02:6b:60:56:73:2d:d7:66:32:c1:5b:fb:5d:e6:e3: 1c:00:2d:d4:17:fa:a5:8d:4d:35:84:30:9b:7f:0a: 0c:7b:5e:54:16:01:47:92:1f:82:41:3c:86:06:56: 3c:44:c9:2b:b1:80:3a:ac:11:90:6a:99:33:df:05: 0d:a0:07:74:f8:43:a5:8d:6d:6b:dd:da:d4:b4:c9: c5:dd:bf:85:9e:72:1d:5a:6e:74:20:a7:14:9c:13: 32:c9:97:55:84:0b:8c:1e:1d:fa:0a:04:8d:d9:af: fc:48:58:15:8d:80:b7:ae:fc:4c:d3:88:a3:78:bf: d9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:01:61:93:CB:1A:ED:B5:1E:86:7B:A0:0B:86:1D:B7:20:77:30:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/b6720d34-db30-38d9-91ae-45f07ef69322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 72.10.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:5a:80:0d:e5:3c:ac:5d:e3:2f:25:f4:87:11:86:14:0d:5d: 28:f2:47:f6:94:ce:b5:37:42:aa:0d:97:d4:1d:39:e7:f8:ac: cf:43:35:5f:9a:51:8c:ae:f3:af:5c:8c:8f:48:55:4f:e5:6f: 43:fb:77:35:85:a0:8d:7b:68:9e:d7:3a:96:9f:98:ab:e6:31: d3:a8:4c:a4:51:96:c8:1f:f3:ff:d2:cb:21:f9:80:22:ca:22: 12:eb:0f:b9:a4:09:44:30:5a:f6:43:b4:78:b8:95:43:8e:9e: 56:db:af:db:3e:9e:90:81:cd:81:a3:96:c4:08:2c:90:4a:2d: 1a:df:8c:c4:97:c7:f7:a1:77:2d:bf:b3:c2:fe:c4:c9:30:c3: 28:87:74:88:9e:ba:4e:76:99:42:d7:a6:d8:ac:cd:16:9c:1c: b7:4d:c9:87:70:18:0d:4f:dc:69:35:4e:39:80:cb:81:20:78: ec:2c:78:67:f8:34:2e:cf:f2:c8:31:7d:89:40:41:ef:f6:b1: 2e:cc:3a:1e:a9:da:e3:11:b3:af:06:a8:10:91:6a:b7:59:b9: 8d:e3:76:a6:31:b2:2b:e3:ce:ff:cd:f4:3e:ad:02:03:ba:b0: c5:45:2a:c3:f7:cf:5f:e3:eb:2a:14:50:c5:e9:18:e5:38:c7: 95:5e:1d:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66eSVHhBQa7NHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NmUyOGQyYWUtYzM2Mi00YWZiLTg1Y2MtYjYyYmFlYTgxNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVVqLXNelbkkgCALcqbNSFN4MCeMluc+ra+d cS/dd9Mkrv2ZVgVPjErT7UzofIWqnHL0v14i8hsDwoMHk/nn1qreC5kZBLu8915K isX63j9qB1iI46cOIKCPRkEfgqPcYLTcsOUS8c3OFqFyJjDG8zXPkABPB7w9zntx 3ufkcEKtSeCTHQECa2BWcy3XZjLBW/td5uMcAC3UF/qljU01hDCbfwoMe15UFgFH kh+CQTyGBlY8RMkrsYA6rBGQapkz3wUNoAd0+EOljW1r3drUtMnF3b+FnnIdWm50 IKcUnBMyyZdVhAuMHh36CgSN2a/8SFgVjYC3rvxM04ijeL/ZYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4BYZPLGu21HoZ7oAuGHbcgdzDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYjY3MjBkMzQtZGIzMC0z OGQ5LTkxYWUtNDVmMDdlZjY5MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSApgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdagA3lPKxd4y8l9IcRhhQNXSjyR/aUzrU3QqoNl9QdOef4rM9DNV+a UYyu869cjI9IVU/lb0P7dzWFoI17aJ7XOpafmKvmMdOoTKRRlsgf8//SyyH5gCLK IhLrD7mkCUQwWvZDtHi4lUOOnlbbr9s+npCBzYGjlsQILJBKLRrfjMSXx/ehdy2/ s8L+xMkwwyiHdIieuk52mULXptiszRacHLdNyYdwGA1P3Gk1TjmAy4EgeOwseGf4 NC7P8sgxfYlAQe/2sS7MOh6p2uMRs68GqBCRardZuY3jdqYxsivjzv/N9D6tAgO6 sMVFKsP3z1/j6yoUUMXpGOU4x5VeHTk= -----END CERTIFICATE-----Generated at Fri Apr 11 21:36:19 2025 by rpki-client