$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37918ee0-808c-36c1-b356-8ae91436ddd3.roa File: 37918ee0-808c-36c1-b356-8ae91436ddd3.roa (raw, json) Hash identifier: gUsPS+rLfU1WWE1DRYExsXfbw51bn3XoJ4h7GdVBwd8= Subject key identifier: 25:09:A6:D3:74:A0:66:3F:F1:D6:AF:3F:80:21:B9:74:11:6D:AC:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EC968E881C31A92B80AC4C50 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37918ee0-808c-36c1-b356-8ae91436ddd3.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 32787 IP address blocks: 72.52.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8e:88:1c:31:a9:2b:80:ac:4c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=32d0db98-af82-4439-a182-2ee6b5968059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:65:25:62:6f:db:c6:c3:46:4a:d7:41:c6: 22:3f:fd:c6:a4:86:43:98:d2:0e:95:74:d6:f5:93: 8c:a7:c9:4d:69:28:c5:b9:e3:c4:4c:de:4d:44:b6: 50:37:32:5b:0c:0b:c2:4f:06:a1:d8:a9:0b:eb:a9: 88:9a:9c:8b:f8:75:f9:09:e2:58:79:0d:82:2c:00: 56:43:8f:ea:21:f9:4f:d1:b2:c0:e8:e1:35:81:7b: 21:e1:48:c8:6e:de:22:a1:70:62:f8:d4:58:02:37: 10:cb:80:29:cf:e6:10:08:a3:2a:a7:7b:23:4a:f2: 9d:30:21:db:59:74:d0:c0:b3:c0:d2:d7:3e:d5:69: c9:a8:08:ff:6d:08:9d:2e:44:47:e2:b6:90:4e:b1: 5f:30:8e:de:a2:a3:61:8f:a7:91:eb:d4:9c:bc:f9: 11:31:0b:d5:4c:83:ee:77:c7:48:68:c2:f8:68:02: 24:7b:04:0c:6d:ed:50:fc:b4:47:16:62:d7:dc:08: 39:14:c0:da:3f:83:7e:64:e4:c7:b2:97:39:e0:02: 36:6c:2a:de:c7:76:8b:c5:0f:eb:a0:e6:55:87:74: 94:c8:fe:bc:57:2d:46:f0:78:4a:ab:e7:e4:70:05: d1:66:bc:65:5f:a3:ff:87:97:67:b1:b8:b3:d9:70: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:09:A6:D3:74:A0:66:3F:F1:D6:AF:3F:80:21:B9:74:11:6D:AC:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37918ee0-808c-36c1-b356-8ae91436ddd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:02:d6:d1:08:1b:bb:7c:af:9e:9d:b7:84:93:6b:fc:1a:51: 5f:2c:46:47:97:b7:60:4e:f6:1c:98:60:e1:a6:92:3a:ae:55: 3f:f2:2d:20:3b:50:dc:bd:da:a0:8f:68:07:88:9f:87:37:09: 62:f2:bf:9a:aa:10:7a:c0:db:b9:22:7c:84:ac:3c:0d:ad:ba: 89:e4:dd:4a:70:a0:ff:53:a7:70:58:3e:cb:e1:cb:f2:d8:5e: fd:f8:fd:f0:29:0a:19:81:61:28:cb:0e:fb:e9:0d:ab:75:9d: 68:17:ac:c9:65:40:9f:58:f7:0e:0a:b0:1f:28:8d:6a:5c:c7: fe:10:11:6d:77:6d:f2:e9:74:29:16:c0:68:d2:8d:03:ca:f6: 56:8e:cb:66:de:42:98:4b:9c:6a:62:32:ee:0b:06:e5:c2:3e: e3:4e:eb:d3:98:37:d4:f8:5e:2d:a9:e7:09:d8:31:f8:5c:09: 56:c3:fa:1c:04:81:44:ed:63:73:eb:1e:96:64:99:58:7d:a4: 4f:d0:34:58:b3:51:4b:39:c4:ff:90:b6:e5:30:94:5e:e0:e1: 86:a8:4b:37:25:3b:b6:ca:ab:3e:1e:aa:0c:27:b4:56:c3:ce: 0b:33:ec:2e:e2:ed:29:da:b8:87:a9:a8:79:58:57:72:66:d0: 01:15:2b:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslo6IHDGpK4CsTFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MzJkMGRiOTgtYWY4Mi00NDM5LWExODItMmVlNmI1OTY4MDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPxlJWJv28bDRkrXQcYiP/3GpIZDmNIOlXTW 9ZOMp8lNaSjFuePETN5NRLZQNzJbDAvCTwah2KkL66mImpyL+HX5CeJYeQ2CLABW Q4/qIflP0bLA6OE1gXsh4UjIbt4ioXBi+NRYAjcQy4Apz+YQCKMqp3sjSvKdMCHb WXTQwLPA0tc+1WnJqAj/bQidLkRH4raQTrFfMI7eoqNhj6eR69ScvPkRMQvVTIPu d8dIaML4aAIkewQMbe1Q/LRHFmLX3Ag5FMDaP4N+ZOTHspc54AI2bCrex3aLxQ/r oOZVh3SUyP68Vy1G8HhKq+fkcAXRZrxlX6P/h5dnsbiz2XC68wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUJptN0oGY/8davP4AhuXQRbawFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzc5MThlZTAtODA4Yy0z NmMxLWIzNTYtOGFlOTE0MzZkZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcC1tEIG7t8r56dt4STa/waUV8sRkeXt2BO9hyYYOGmkjquVT/yLSA7 UNy92qCPaAeIn4c3CWLyv5qqEHrA27kifISsPA2tuonk3UpwoP9Tp3BYPsvhy/LY Xv34/fApChmBYSjLDvvpDat1nWgXrMllQJ9Y9w4KsB8ojWpcx/4QEW13bfLpdCkW wGjSjQPK9laOy2beQphLnGpiMu4LBuXCPuNO69OYN9T4Xi2p5wnYMfhcCVbD+hwE gUTtY3PrHpZkmVh9pE/QNFizUUs5xP+QtuUwlF7g4YaoSzclO7bKqz4eqgwntFbD zgsz7C7i7SnauIepqHlYV3Jm0AEVK58= -----END CERTIFICATE-----Generated at Fri Mar 14 09:17:36 2025 by rpki-client