$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1aee348f-3e86-34d0-8f03-e284e2fb7624.roa File: 1aee348f-3e86-34d0-8f03-e284e2fb7624.roa (raw, json) Hash identifier: 2vJYrXzrBlye4QkyY5wXTS0CeP9JbusHHds5qqolAYg= Subject key identifier: 75:99:9C:BA:8D:EF:29:01:48:B3:C2:68:69:B4:9D:78:6D:8F:D2:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584905B6B96B3C7CC4DA0C26B100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1aee348f-3e86-34d0-8f03-e284e2fb7624.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 16625 IP address blocks: 72.246.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b9:6b:3c:7c:c4:da:0c:26:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=7d88c5e6-db83-4509-94bd-cbd717d93bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e0:03:88:03:d7:24:de:2a:5f:25:58:c5:5d: e3:b3:f0:73:10:cb:e6:7a:23:6b:71:ea:35:b1:ed: 53:1a:77:d2:3d:2c:16:44:1c:a9:cb:cb:fd:82:ff: 3f:09:bf:7e:e5:e9:a4:40:e9:01:3f:25:ee:55:9c: ef:5c:e3:2f:9d:b2:c5:0b:e4:63:07:20:d8:80:e7: 65:a9:68:e2:2c:32:76:58:54:93:d5:20:47:58:85: be:0d:27:d0:85:0b:63:2a:40:5b:b1:2e:f5:3f:7c: c6:04:36:6b:ae:2e:0e:cc:73:48:ff:33:fa:6c:0a: f9:d2:20:5d:97:0c:2f:6c:93:33:ea:c5:b9:d7:e7: 00:6e:76:fb:fa:6e:b3:a2:fb:f8:c4:2d:36:88:63: b4:05:fe:5a:36:ad:c8:8e:98:ba:52:25:a8:a6:d7: 75:01:77:15:42:b3:16:8b:c1:57:da:02:7c:c7:49: b1:4e:38:91:2c:b0:ef:c3:23:6b:ae:d8:ef:34:7f: 88:09:86:f3:49:24:69:38:19:cf:bd:00:72:d2:de: 23:2d:98:4e:c8:fc:ba:77:03:bc:8e:e0:14:0c:67: 87:bb:41:0d:9d:ba:16:9d:6d:28:7f:9c:4c:0e:7d: 37:67:bd:d6:78:45:61:50:8e:45:8e:72:e7:5d:3b: 8f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:99:9C:BA:8D:EF:29:01:48:B3:C2:68:69:B4:9D:78:6D:8F:D2:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1aee348f-3e86-34d0-8f03-e284e2fb7624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:4e:98:b0:93:3d:d8:97:ba:0a:48:f8:48:0c:0f:7c:c2:29: a3:7e:b3:dd:92:88:2e:31:a5:03:ed:75:09:f5:b3:61:2b:06: 13:eb:6e:6c:2a:9a:8b:51:73:87:72:7a:de:33:c7:f9:b4:82: c5:27:1e:d1:4b:64:df:b8:ad:b4:11:28:56:bc:94:84:0e:b6: aa:dc:0b:75:38:6f:75:13:53:af:5b:4c:63:11:76:24:e4:9e: 6d:78:ae:f8:a0:41:d7:a6:9e:b9:6f:91:58:00:c6:c6:90:6e: 30:00:5a:43:10:b8:d1:8d:af:aa:af:c5:32:22:42:7b:6e:99: f2:ea:2d:8a:ba:7a:68:8c:2a:45:72:e3:7b:f0:df:84:6c:b9: 5e:b6:6e:71:a6:f6:fd:46:01:2e:51:96:c4:e7:b8:db:f1:74: 89:50:a4:64:a1:d4:89:b0:08:ab:3c:c8:0f:c3:a5:02:f1:21: 88:06:a3:56:f7:b2:22:16:b7:50:ec:93:55:83:6a:9f:08:b5: cf:33:a3:a7:e3:d1:98:ab:b5:5d:1c:dd:95:fa:5b:47:71:3f: f4:14:cb:df:97:13:60:52:da:a1:52:38:20:38:90:df:7c:1e: c6:dc:c5:cb:c9:e3:2f:74:5b:ef:5d:36:5b:27:77:28:67:26: 99:6a:6c:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrlrPHzE2gwmsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk N2Q4OGM1ZTYtZGI4My00NTA5LTk0YmQtY2JkNzE3ZDkzYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+ADiAPXJN4qXyVYxV3js/BzEMvmeiNrceo1 se1TGnfSPSwWRBypy8v9gv8/Cb9+5emkQOkBPyXuVZzvXOMvnbLFC+RjByDYgOdl qWjiLDJ2WFST1SBHWIW+DSfQhQtjKkBbsS71P3zGBDZrri4OzHNI/zP6bAr50iBd lwwvbJMz6sW51+cAbnb7+m6zovv4xC02iGO0Bf5aNq3Ijpi6UiWoptd1AXcVQrMW i8FX2gJ8x0mxTjiRLLDvwyNrrtjvNH+ICYbzSSRpOBnPvQBy0t4jLZhOyPy6dwO8 juAUDGeHu0ENnboWnW0of5xMDn03Z73WeEVhUI5FjnLnXTuPTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWZnLqN7ykBSLPCaGm0nXhtj9KGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWFlZTM0OGYtM2U4Ni0z NGQwLThmMDMtZTI4NGUyZmI3NjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVOmLCTPdiXugpI+EgMD3zCKaN+s92SiC4xpQPtdQn1s2ErBhPrbmwq motRc4dyet4zx/m0gsUnHtFLZN+4rbQRKFa8lIQOtqrcC3U4b3UTU69bTGMRdiTk nm14rvigQdemnrlvkVgAxsaQbjAAWkMQuNGNr6qvxTIiQntumfLqLYq6emiMKkVy 43vw34RsuV62bnGm9v1GAS5RlsTnuNvxdIlQpGSh1ImwCKs8yA/DpQLxIYgGo1b3 siIWt1Dsk1WDap8Itc8zo6fj0ZirtV0c3ZX6W0dxP/QUy9+XE2BS2qFSOCA4kN98 HsbcxcvJ4y90W+9dNlsndyhnJplqbLg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:54 2025 by rpki-client