$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/289daa74-4a09-31a6-b30b-a1e175e151de.roa File: 289daa74-4a09-31a6-b30b-a1e175e151de.roa (raw, json) Hash identifier: aYHB+OBn2YKMmj7t4/oIoCfa4CBFdm/pL0Hbn3QDxGE= Subject key identifier: 7A:C5:A4:D9:B6:A1:DB:37:84:41:D6:78:45:BF:E9:68:7D:A5:B3:BB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584909E6A2E23D8BB88683B3E040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/289daa74-4a09-31a6-b30b-a1e175e151de.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 12222 IP address blocks: 72.247.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a2:e2:3d:8b:b8:86:83:b3:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=f2dbf4c9-bd0f-4177-9877-de8639b97e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:90:9d:3b:d9:6c:07:a4:df:da:60:86:ab:24: 6f:d3:f2:3b:96:1c:81:94:12:d1:e3:73:c6:4a:e2: 27:96:f5:7a:20:5f:95:d9:c3:09:59:a1:59:e0:31: bd:e6:3d:a6:65:cd:e6:66:50:ce:1c:63:eb:69:5c: e7:a3:18:c0:76:bb:73:2c:88:d8:e6:03:8e:49:c2: 96:f8:8d:30:d3:44:bd:65:a0:a4:02:5a:be:4a:1e: 82:41:58:b2:68:66:1d:26:80:d5:bc:2e:65:b8:a8: eb:cd:cb:81:36:ad:58:14:ea:56:38:99:fa:78:99: b9:9d:f6:47:d0:a7:4b:8b:5d:92:91:28:09:ed:20: 4e:df:e9:37:2d:32:67:0c:0d:f1:62:3b:6d:f6:aa: 12:0e:d5:a9:da:05:de:44:74:36:09:b2:35:09:31: a3:03:10:06:77:cf:5d:56:a9:d9:b9:ad:86:87:aa: 11:27:e3:96:f2:b2:c5:c6:6b:48:a6:a4:5e:36:81: a7:02:67:03:a9:a0:27:ac:0e:35:d8:4d:ba:32:69: bb:58:11:f2:6b:a6:cc:c7:f7:01:48:74:d8:11:ab: 4f:26:9e:ff:e6:32:6e:69:5c:82:2a:89:e5:8d:19: d1:9f:17:bd:08:d8:04:79:d8:87:cf:d2:c7:67:f8: 50:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C5:A4:D9:B6:A1:DB:37:84:41:D6:78:45:BF:E9:68:7D:A5:B3:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/289daa74-4a09-31a6-b30b-a1e175e151de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a2:b8:8f:7c:90:1d:b0:e1:c4:28:1e:ac:40:ab:cd:e0:fe: 22:27:6b:92:33:7c:2c:02:00:f7:e4:8f:a1:51:91:b1:0b:fb: 07:d7:55:c3:92:a3:66:a6:25:2d:4e:27:51:20:28:a6:ef:93: 39:4c:97:b4:ea:f0:65:2b:3d:de:69:d6:d5:e8:e1:56:f8:67: 1d:c9:91:81:1f:b6:9a:d2:2e:91:ef:a7:bc:73:41:bb:bf:df: 08:16:e6:c9:16:f5:6d:7c:25:91:3f:b7:93:8b:d0:97:25:49: a9:cb:e0:ec:41:13:b5:83:db:4c:e7:10:63:3e:94:60:50:7a: 80:95:73:af:15:4f:ca:52:da:14:e7:6d:88:0a:50:9b:6a:41: 64:a2:f6:a5:ff:c7:d2:03:06:a4:c4:19:aa:4f:bf:a6:fb:49: 58:40:1f:86:f1:73:1f:47:4d:30:a1:28:4e:67:85:33:48:10: 7c:4c:34:c7:59:03:03:a0:ef:36:29:97:51:2d:f4:99:5c:43: f8:eb:f9:c5:71:cd:79:01:1b:9f:cb:bc:2b:90:23:d4:57:4d: 38:a7:d9:de:33:53:f3:29:85:21:0c:63:48:55:65:4e:b2:30: 93:97:18:11:60:be:68:9c:a4:d1:e5:a2:67:42:41:4b:bf:89: 98:c7:eb:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5qLiPYu4hoOz4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjJkYmY0YzktYmQwZi00MTc3LTk4NzctZGU4NjM5Yjk3ZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5CdO9lsB6Tf2mCGqyRv0/I7lhyBlBLR43PG SuInlvV6IF+V2cMJWaFZ4DG95j2mZc3mZlDOHGPraVznoxjAdrtzLIjY5gOOScKW +I0w00S9ZaCkAlq+Sh6CQViyaGYdJoDVvC5luKjrzcuBNq1YFOpWOJn6eJm5nfZH 0KdLi12SkSgJ7SBO3+k3LTJnDA3xYjtt9qoSDtWp2gXeRHQ2CbI1CTGjAxAGd89d VqnZua2Gh6oRJ+OW8rLFxmtIpqReNoGnAmcDqaAnrA412E26Mmm7WBHya6bMx/cB SHTYEatPJp7/5jJuaVyCKonljRnRnxe9CNgEediHz9LHZ/hQpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrFpNm2ods3hEHWeEW/6Wh9pbO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg5ZGFhNzQtNGEwOS0z MWE2LWIzMGItYTFlMTc1ZTE1MWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPeXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaiuI98kB2w4cQoHqxAq83g/iIna5IzfCwCAPfkj6FRkbEL+wfXVcOS o2amJS1OJ1EgKKbvkzlMl7Tq8GUrPd5p1tXo4Vb4Zx3JkYEftprSLpHvp7xzQbu/ 3wgW5skW9W18JZE/t5OL0JclSanL4OxBE7WD20znEGM+lGBQeoCVc68VT8pS2hTn bYgKUJtqQWSi9qX/x9IDBqTEGapPv6b7SVhAH4bxcx9HTTChKE5nhTNIEHxMNMdZ AwOg7zYpl1Et9JlcQ/jr+cVxzXkBG5/LvCuQI9RXTTin2d4zU/MphSEMY0hVZU6y MJOXGBFgvmicpNHlomdCQUu/iZjH6/k= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:42 2025 by rpki-client