$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23579f7-40df-33a8-a759-5728208dc52a.roa File: f23579f7-40df-33a8-a759-5728208dc52a.roa (raw, json) Hash identifier: 0BIBWCw9W7IZ3X3Z8Eh80JXmWWoTXM5poghgqh5Wzps= Subject key identifier: 2A:0B:44:4A:AE:87:B0:4B:9E:07:35:5B:2A:D8:D7:1F:62:72:A0:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C2FB755FF2D2D1678EB60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23579f7-40df-33a8-a759-5728208dc52a.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 35994 IP address blocks: 72.246.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:2f:b7:55:ff:2d:2d:16:78:eb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=b5d4fc54-a8ee-4de3-9bad-571f7b5b8836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:f3:d0:ff:3c:af:5b:ba:09:0f:67:af:4b: b3:18:52:77:06:91:8c:b3:42:91:5c:98:65:11:a1: 24:18:90:a1:71:42:db:37:e5:0f:f5:c9:98:c0:d1: 5e:e9:9b:d6:31:61:8e:f5:7c:bb:b8:b9:9d:60:be: 41:42:03:0b:22:30:c2:4d:06:f0:69:f6:fa:b3:4f: 98:20:78:11:a7:6c:34:4c:9b:d2:df:7d:89:ad:2a: ba:5d:0f:66:a7:0d:12:a6:b9:3d:8f:b1:99:d7:a8: c8:d8:9a:74:55:7a:95:12:5f:70:4c:39:15:11:af: d6:c5:3a:cb:fd:df:fa:53:56:4d:71:e2:97:e3:cf: 04:e5:b8:85:a1:3e:e9:1c:f4:d1:52:5d:7b:77:b4: f1:e7:0f:88:c2:36:f4:7c:c1:05:4c:8b:91:b6:f9: 70:fa:a3:cd:15:c2:e7:e5:0c:1f:de:12:e9:ab:9a: 3c:e4:b4:45:df:84:b0:0b:8f:fc:94:63:b3:68:b2: db:d3:9c:62:57:46:ac:6e:e3:4b:cf:47:89:10:ca: c8:e1:e1:16:12:62:1c:81:d5:e9:29:32:65:1b:03: ae:20:16:51:b8:fd:94:ee:a7:30:14:7b:0a:df:a5: 70:72:13:f9:8d:d9:a9:82:3b:5a:47:22:9c:83:0f: 82:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0B:44:4A:AE:87:B0:4B:9E:07:35:5B:2A:D8:D7:1F:62:72:A0:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23579f7-40df-33a8-a759-5728208dc52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:dc:e3:bf:a8:29:d3:14:59:68:f0:2b:15:77:b0:65:48:07: 1a:79:3b:30:61:06:72:8e:9d:a5:9c:11:93:e8:2c:7d:5c:c4: 38:06:7c:07:e1:d3:e3:dc:65:84:d2:d1:2a:56:1b:9d:b7:39: d0:f3:42:b2:a4:d5:b0:b8:0b:c6:db:85:2f:61:4f:09:95:c5: 3d:15:bd:f7:b2:18:13:46:f3:c0:1d:98:be:20:29:f1:b5:55: 94:c8:fd:2e:f7:cf:2b:ce:d2:27:4f:fb:95:1f:8f:1b:75:7a: f8:14:79:4e:bb:ec:a9:3e:cc:36:75:0f:e1:7f:7e:09:49:2b: ca:ce:48:91:46:0f:23:0d:31:ef:d7:45:c3:27:86:77:1c:d3: c2:1c:cd:42:86:f4:3e:90:2e:c6:df:ff:b8:c2:29:de:50:19: 34:83:8a:eb:dd:15:08:eb:f9:3a:0c:9e:6c:07:9c:ea:22:1b: 0d:44:ad:03:45:5f:26:29:21:13:f1:2a:e4:75:b1:af:a4:4f: 8c:20:b6:af:b8:90:be:f4:b1:91:e3:0a:1f:74:89:35:ff:85: f1:5e:9a:73:37:f1:25:c9:57:ad:db:9a:9a:1b:43:cc:ec:33: 23:50:9f:10:0e:8e:4e:6e:13:77:b5:08:a1:12:b0:76:45:c4: ef:d5:95:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTC+3Vf8tLRZ462AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YjVkNGZjNTQtYThlZS00ZGUzLTliYWQtNTcxZjdiNWI4ODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7jz0P88r1u6CQ9nr0uzGFJ3BpGMs0KRXJhl EaEkGJChcULbN+UP9cmYwNFe6ZvWMWGO9Xy7uLmdYL5BQgMLIjDCTQbwafb6s0+Y IHgRp2w0TJvS332JrSq6XQ9mpw0Sprk9j7GZ16jI2Jp0VXqVEl9wTDkVEa/WxTrL /d/6U1ZNceKX488E5biFoT7pHPTRUl17d7Tx5w+Iwjb0fMEFTIuRtvlw+qPNFcLn 5Qwf3hLpq5o85LRF34SwC4/8lGOzaLLb05xiV0asbuNLz0eJEMrI4eEWEmIcgdXp KTJlGwOuIBZRuP2U7qcwFHsK36VwchP5jdmpgjtaRyKcgw+CDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoLREquh7BLngc1WyrY1x9icqBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjIzNTc5ZjctNDBkZi0z M2E4LWE3NTktNTcyODIwOGRjNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPYRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfc47+oKdMUWWjwKxV3sGVIBxp5OzBhBnKOnaWcEZPoLH1cxDgGfAfh 0+PcZYTS0SpWG523OdDzQrKk1bC4C8bbhS9hTwmVxT0VvfeyGBNG88AdmL4gKfG1 VZTI/S73zyvO0idP+5Ufjxt1evgUeU677Kk+zDZ1D+F/fglJK8rOSJFGDyMNMe/X RcMnhncc08IczUKG9D6QLsbf/7jCKd5QGTSDiuvdFQjr+ToMnmwHnOoiGw1ErQNF XyYpIRPxKuR1sa+kT4wgtq+4kL70sZHjCh90iTX/hfFemnM38SXJV63bmpobQ8zs MyNQnxAOjk5uE3e1CKESsHZFxO/VlXU= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:04 2025 by rpki-client