$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa File: d981ed21-a25a-3b01-91c0-905497dccc91.roa (raw, json) Hash identifier: gXSBHEViPp9pUnocwHNAETaYjvz1YJ8FPzVS2EKbS0o= Subject key identifier: AC:E7:46:9E:D8:98:24:24:92:73:D7:79:C6:3A:23:EB:BE:77:9B:D1 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F43285848E9CBE0D3D8929A9AC615D400 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 29746 IP address blocks: 72.21.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e0:d3:d8:92:9a:9a:c6:15:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=7dcfdbb1-0635-4e8d-9e9d-81980bfd1a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:b4:b0:2a:30:c4:92:99:bc:d8:27:f1:70: 15:3e:3d:bc:a5:94:5f:82:fd:b1:d3:fb:fa:66:98: 32:35:89:5b:a9:c5:bf:0c:51:b8:05:dc:42:af:27: 91:1f:57:e1:fe:70:df:14:14:9f:37:d6:df:c8:ce: 11:8f:14:b4:f5:e0:d0:36:c7:9a:77:d1:46:f9:f2: 68:4a:3b:5e:34:33:9d:d3:29:d7:16:c5:79:f1:2f: 1d:43:1e:b6:72:9d:d3:af:ec:fc:ed:5a:8d:b9:a9: 97:eb:5d:c3:8b:ee:56:aa:dd:7e:a2:6c:9f:ef:5b: be:eb:dd:fe:30:49:4d:3f:16:5f:33:72:9d:86:fd: 34:5d:c2:66:2d:e8:fb:e6:fd:7e:79:83:9c:b0:82: 3c:58:6b:00:ad:73:6e:6a:ea:80:b7:d1:bc:0b:6a: 8a:ce:be:e2:b5:59:c1:68:9d:e7:28:62:15:03:a3: c7:30:60:19:74:6b:f9:f2:39:0f:dd:a3:dc:bd:a3: cf:51:ce:07:f7:fb:40:14:69:71:09:ea:b2:0e:24: c3:13:1a:99:d9:83:6a:6d:ca:30:fe:48:f1:f6:2e: 00:e6:55:60:3b:13:3a:86:f9:8a:76:d4:82:57:59: 3c:6c:2f:35:10:ea:d4:67:33:b1:8f:01:2f:c1:db: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E7:46:9E:D8:98:24:24:92:73:D7:79:C6:3A:23:EB:BE:77:9B:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1c:ca:21:9f:09:b8:72:bf:00:41:fd:71:2b:07:c1:50:30: 88:01:35:49:b0:c6:c6:38:c1:85:73:56:b1:3b:4d:12:ec:ec: d4:f0:90:0b:e0:f9:4a:a4:cd:e2:40:23:5c:e9:8d:ac:f2:1b: 08:11:c4:be:3a:08:c6:b7:83:f1:55:cc:90:b7:f0:31:7e:e5: e7:fc:8d:3d:9e:cd:4e:85:14:cc:bc:10:1c:80:e1:c3:17:2f: 99:77:e0:e0:17:06:d9:31:ca:94:ca:10:c6:b8:45:db:17:c2: 96:91:ae:6c:be:9f:ee:e5:46:9b:64:1e:62:12:e6:3c:a4:6d: 23:52:7f:8c:7a:18:c5:83:c0:a6:d2:65:c4:e7:61:42:d6:a7: 48:a2:76:59:c9:3c:09:0c:3e:a5:eb:e1:81:dd:44:7d:69:a5: 94:2e:56:9e:d3:fb:68:10:b2:2d:95:b0:4c:63:1a:c8:0a:41: dc:f8:c2:3f:fb:5d:e9:dc:3b:13:2c:43:12:3c:2f:2b:cd:f3: 4f:6c:91:fa:72:80:80:bf:22:c4:74:31:33:9c:d8:c3:31:bb: 4b:61:5b:d2:07:4c:79:68:67:b1:3a:9f:9b:7e:b0:a7:89:8b: e8:aa:fc:67:92:f5:b7:af:06:8d:56:44:ef:1d:11:fb:e7:f6: 46:5c:d9:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+DT2JKamsYV1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk N2RjZmRiYjEtMDYzNS00ZThkLTllOWQtODE5ODBiZmQxYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp60sCowxJKZvNgn8XAVPj28pZRfgv2x0/v6 ZpgyNYlbqcW/DFG4BdxCryeRH1fh/nDfFBSfN9bfyM4RjxS09eDQNsead9FG+fJo SjteNDOd0ynXFsV58S8dQx62cp3Tr+z87VqNuamX613Di+5Wqt1+omyf71u+693+ MElNPxZfM3Kdhv00XcJmLej75v1+eYOcsII8WGsArXNuauqAt9G8C2qKzr7itVnB aJ3nKGIVA6PHMGAZdGv58jkP3aPcvaPPUc4H9/tAFGlxCeqyDiTDExqZ2YNqbcow /kjx9i4A5lVgOxM6hvmKdtSCV1k8bC81EOrUZzOxjwEvwdskZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKznRp7YmCQkknPXecY6I+u+d5vRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvZDk4MWVkMjEtYTI1YS0z YjAxLTkxYzAtOTA1NDk3ZGNjYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBWtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQcyiGfCbhyvwBB/XErB8FQMIgBNUmwxsY4wYVzVrE7TRLs7NTwkAvg +UqkzeJAI1zpjazyGwgRxL46CMa3g/FVzJC38DF+5ef8jT2ezU6FFMy8EByA4cMX L5l34OAXBtkxypTKEMa4RdsXwpaRrmy+n+7lRptkHmIS5jykbSNSf4x6GMWDwKbS ZcTnYULWp0iidlnJPAkMPqXr4YHdRH1ppZQuVp7T+2gQsi2VsExjGsgKQdz4wj/7 XencOxMsQxI8LyvN809skfpygIC/IsR0MTOc2MMxu0thW9IHTHloZ7E6n5t+sKeJ i+iq/GeS9bevBo1WRO8dEfvn9kZc2fQ= -----END CERTIFICATE-----Generated at Tue Mar 18 20:09:34 2025 by rpki-client