$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa File: 0f216025-08f0-3ed8-84c5-9f7904503c8e.roa (raw, json) Hash identifier: ZzdWiqKiD63glDFtEp5SYe4IH/L3/j1BlC/iksHj8qk= Subject key identifier: 22:75:E7:DC:0B:C0:4E:64:C9:68:C4:C7:3A:0F:4F:7C:B8:AA:2D:DA Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F43285848E9CBD70FB58C9DF37E68DE00 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 14717 IP address blocks: 72.21.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:d7:0f:b5:8c:9d:f3:7e:68:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=ceb85298-06f9-45f0-ac8d-d274349fefdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:1e:41:67:c3:f8:cb:e6:ad:60:df:24:4d: 96:5e:8d:fc:b7:f6:e9:1e:2b:a2:eb:b4:6b:b0:d1: ac:0a:ad:fb:e5:23:68:8a:ec:00:01:3d:ec:fc:49: 44:ee:85:b2:78:57:0d:18:80:4a:3a:54:5f:3c:5f: 33:43:27:2e:61:07:d5:f3:c2:24:b9:3e:7c:76:5b: de:ad:3e:5a:59:8d:3d:44:28:fd:5c:57:b0:44:e3: 98:6c:30:ed:c6:7f:5a:32:93:fb:e6:a2:df:c3:d0: 7e:83:30:52:8a:22:46:8a:31:7d:27:cc:d1:ea:d6: 8e:92:1d:f1:73:41:f8:b8:e6:6a:1f:31:5f:3f:03: e0:fa:8a:d1:49:78:c1:c5:61:1d:f4:62:2f:3c:38: 02:8b:f6:fe:0a:cf:46:ad:74:e9:52:15:cb:5d:7d: a3:84:7b:18:da:38:19:6b:97:9b:41:63:5b:4c:bc: f7:64:f1:5d:25:cb:a3:63:3e:0c:86:7f:2d:e3:72: 51:ee:45:b9:06:11:5c:13:42:74:26:ce:00:09:87: 5c:e8:08:f7:d3:e1:22:15:c4:c1:4f:d8:7a:8b:51: c9:50:9b:26:e3:f4:29:2f:a3:5b:55:f5:83:dd:48: 62:df:87:fe:d3:f0:31:bc:38:b6:38:4b:4a:c3:ee: 06:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:75:E7:DC:0B:C0:4E:64:C9:68:C4:C7:3A:0F:4F:7C:B8:AA:2D:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ca:9c:7a:a9:4f:f0:af:7d:30:9d:69:ab:09:9b:ee:ed:e6: 5e:de:7c:bb:e5:34:17:b5:6d:39:45:e3:c9:09:e5:83:17:19: e9:70:f4:db:cb:86:16:e3:7a:94:31:74:01:ba:a9:95:f5:3f: bf:2c:81:6c:75:87:1b:24:22:79:f7:a7:16:96:41:ce:12:8e: 28:5e:7b:e3:db:2f:40:4c:c8:d3:c4:15:4e:72:62:45:cf:e3: 3e:7d:9a:a3:15:eb:00:5c:46:e0:8e:72:0b:9f:c0:77:ee:70: 15:e4:0a:fe:c1:48:23:b1:da:7b:3e:fe:57:1e:4c:78:d1:90: c8:a8:6a:b3:38:03:cc:84:a7:95:c7:c2:c8:a0:a3:64:38:71: e3:77:df:61:14:63:59:7b:03:b1:b3:06:41:43:7c:bf:f4:a0: 7c:7b:df:58:89:6e:07:ab:7a:9f:0d:61:88:8d:cd:2c:c4:b1: b6:b1:c6:9d:62:f7:5d:60:82:a1:93:66:7b:3a:9d:26:06:51: 13:5c:d9:f6:4d:d5:82:31:58:c9:4c:b4:8d:5f:9e:59:46:b8: c4:61:17:52:87:84:05:f9:b0:0e:38:d2:4a:bf:b0:67:2f:c2: e3:df:12:1d:e5:6c:c7:5d:0f:34:3a:16:52:b7:61:b5:1c:e3: 52:7a:1f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9cPtYyd835o3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk Y2ViODUyOTgtMDZmOS00NWYwLWFjOGQtZDI3NDM0OWZlZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwceQWfD+MvmrWDfJE2WXo38t/bpHiui67Rr sNGsCq375SNoiuwAAT3s/ElE7oWyeFcNGIBKOlRfPF8zQycuYQfV88IkuT58dlve rT5aWY09RCj9XFewROOYbDDtxn9aMpP75qLfw9B+gzBSiiJGijF9J8zR6taOkh3x c0H4uOZqHzFfPwPg+orRSXjBxWEd9GIvPDgCi/b+Cs9GrXTpUhXLXX2jhHsY2jgZ a5ebQWNbTLz3ZPFdJcujYz4Mhn8t43JR7kW5BhFcE0J0Js4ACYdc6Aj30+EiFcTB T9h6i1HJUJsm4/QpL6NbVfWD3Uhi34f+0/AxvDi2OEtKw+4G1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJ159wLwE5kyWjExzoPT3y4qi3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvMGYyMTYwMjUtMDhmMC0z ZWQ4LTg0YzUtOWY3OTA0NTAzYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/KnHqpT/CvfTCdaasJm+7t5l7efLvlNBe1bTlF48kJ5YMXGelw9NvL hhbjepQxdAG6qZX1P78sgWx1hxskInn3pxaWQc4Sjihee+PbL0BMyNPEFU5yYkXP 4z59mqMV6wBcRuCOcgufwHfucBXkCv7BSCOx2ns+/lceTHjRkMioarM4A8yEp5XH wsigo2Q4ceN332EUY1l7A7GzBkFDfL/0oHx731iJbgerep8NYYiNzSzEsbaxxp1i 911ggqGTZns6nSYGURNc2fZN1YIxWMlMtI1fnllGuMRhF1KHhAX5sA440kq/sGcv wuPfEh3lbMddDzQ6FlK3YbUc41J6H1A= -----END CERTIFICATE-----Generated at Tue Mar 18 19:59:41 2025 by rpki-client