$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/38bb4162-7340-3e15-9152-3b6cccac904f.roa File: 38bb4162-7340-3e15-9152-3b6cccac904f.roa (raw, json) Hash identifier: HOwtRBNGvyXRpHtfkgn4fUMd88umOCbholoU9L/VFt4= Subject key identifier: 9C:71:DE:72:71:45:1D:99:CF:CA:BF:CF:01:9D:49:F3:65:F8:A2:66 Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Certificate serial: 010D0C9F432858496E498B15240FB7AE82B3D900 Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/38bb4162-7340-3e15-9152-3b6cccac904f.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 40545 IP address blocks: 72.18.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:8b:15:24:0f:b7:ae:82:b3:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=94115d85-7c3f-49cf-bc23-5d5f771a5bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:82:73:75:ef:db:09:b3:c5:83:40:39:34: 8a:d5:31:7d:43:20:fa:ce:26:74:b5:b5:cd:73:ec: 87:74:50:ab:38:6e:60:9e:50:c6:f8:62:9d:f6:f0: 6e:bc:aa:14:54:2c:43:5b:32:e1:d9:59:df:d0:51: 64:8a:c4:72:c1:cb:a9:e6:a2:e3:58:60:c6:5c:31: ca:59:96:bb:de:00:25:58:12:03:56:0b:fa:0e:cc: c8:b5:d0:00:48:52:8e:6f:62:fd:c7:91:f0:8e:3b: 3d:a5:ee:93:76:b4:27:21:5d:d6:7f:09:27:ef:1b: f0:98:3b:77:f5:6d:9b:c5:94:e5:93:ae:a9:9b:38: c3:85:40:30:9f:83:75:05:61:3a:08:10:5b:5c:36: 61:1a:84:fe:af:34:20:45:81:67:e2:7c:61:fc:68: 83:d5:67:82:07:a8:e9:f5:43:3a:4c:c7:09:c6:2d: 83:e5:c3:b5:7e:13:d1:41:e6:eb:57:aa:be:5b:85: 62:5f:2a:a3:de:fd:48:32:3c:be:91:d6:db:4b:54: 66:3d:fc:e7:2a:be:35:a7:02:58:65:00:05:43:17: 7b:29:2f:2f:9d:4d:3b:03:1f:2d:08:93:30:01:a8: 31:4d:10:18:1c:8a:3b:78:ee:70:e2:fd:73:67:80: f4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:71:DE:72:71:45:1D:99:CF:CA:BF:CF:01:9D:49:F3:65:F8:A2:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/38bb4162-7340-3e15-9152-3b6cccac904f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl X509v3 Authority Key Identifier: keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer sbgp-ipAddrBlock: critical IPv4: 72.18.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:a7:42:ee:b1:76:a5:ed:b8:b8:be:55:6f:3f:af:fa:0e:cb: 79:22:2b:d4:8b:18:60:28:21:93:fe:a3:e0:d4:18:a4:0f:a8: 71:03:8c:49:22:ec:ad:4d:db:64:25:2c:1c:29:bd:a1:dc:5a: fb:95:f8:6b:36:7f:47:61:44:78:df:55:0f:80:87:a9:10:50: 2b:9d:31:44:3a:c4:91:58:7a:a8:d8:d9:64:7f:03:bf:51:2f: 1e:7a:fd:1d:02:f4:29:d4:71:57:fd:04:bf:75:3f:f1:94:27: 89:8b:90:8c:be:09:a8:a1:64:1d:89:bf:bb:2d:91:4e:eb:65: 52:54:4e:cd:b1:a5:81:2f:08:a0:9d:bb:4b:29:63:9c:4e:db: b6:c5:74:7b:fb:ff:4c:ed:cf:dc:70:c0:eb:0e:14:8d:6e:c1: 22:eb:2b:3d:4e:14:ed:84:5f:0e:fe:f8:95:a6:a8:8a:64:a7: 37:d9:ee:56:b8:a8:4d:18:1f:89:71:a7:7c:79:c7:99:31:66: 79:4c:e2:e6:ad:ba:73:af:c9:83:ef:d7:2d:60:25:3e:02:d0: 39:9e:88:ab:8c:ba:fc:93:52:1e:d9:00:d8:d1:c7:50:74:04: a9:78:c4:6a:86:47:3f:70:88:ba:3b:01:04:00:38:ec:00:ea: 8d:fb:a5:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYsVJA+3roKz2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkMzdiZjYtNjk1NS00ZWQ1LTgzNDctMjg5Njc2N2Fm YWIwMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk OTQxMTVkODUtN2MzZi00OWNmLWJjMjMtNWQ1Zjc3MWE1YmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgiCc3Xv2wmzxYNAOTSK1TF9QyD6ziZ0tbXN c+yHdFCrOG5gnlDG+GKd9vBuvKoUVCxDWzLh2Vnf0FFkisRywcup5qLjWGDGXDHK WZa73gAlWBIDVgv6DszItdAASFKOb2L9x5Hwjjs9pe6TdrQnIV3Wfwkn7xvwmDt3 9W2bxZTlk66pmzjDhUAwn4N1BWE6CBBbXDZhGoT+rzQgRYFn4nxh/GiD1WeCB6jp 9UM6TMcJxi2D5cO1fhPRQebrV6q+W4ViXyqj3v1IMjy+kdbbS1RmPfznKr41pwJY ZQAFQxd7KS8vnU07Ax8tCJMwAagxTRAYHIo7eO5w4v1zZ4D0ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxx3nJxRR2Zz8q/zwGdSfNl+KJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQz N2JmNi02OTU1LTRlZDUtODM0Ny0yODk2NzY3YWZhYjAvMzhiYjQxNjItNzM0MC0z ZTE1LTkxNTItM2I2Y2NjYWM5MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZkMzdiZjYtNjk1NS00ZWQ1LTgz NDctMjg5Njc2N2FmYWIwLzNmZDM3YmY2LTY5NTUtNGVkNS04MzQ3LTI4OTY3Njdh ZmFiMC5jcmwwHwYDVR0jBBgwFoAULNrtwbJ3wcnBT6n58z0s7qVZ2y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQzN2JmNi02OTU1LTRlZDUtODM0Ny0yODk2 NzY3YWZhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2nQu6xdqXtuLi+VW8/r/oOy3kiK9SLGGAoIZP+o+DUGKQPqHEDjEki 7K1N22QlLBwpvaHcWvuV+Gs2f0dhRHjfVQ+Ah6kQUCudMUQ6xJFYeqjY2WR/A79R Lx56/R0C9CnUcVf9BL91P/GUJ4mLkIy+CaihZB2Jv7stkU7rZVJUTs2xpYEvCKCd u0spY5xO27bFdHv7/0ztz9xwwOsOFI1uwSLrKz1OFO2EXw7++JWmqIpkpzfZ7la4 qE0YH4lxp3x5x5kxZnlM4uatunOvyYPv1y1gJT4C0DmeiKuMuvyTUh7ZANjRx1B0 BKl4xGqGRz9wiLo7AQQAOOwA6o37pVA= -----END CERTIFICATE-----Generated at Mon Apr 21 02:38:33 2025 by rpki-client