$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9238585-1539-3eda-8995-41ac21a325b9.roa File: f9238585-1539-3eda-8995-41ac21a325b9.roa (raw, json) Hash identifier: DXYS2Shpenp7aplS8clcdcGQyd8hVNAsPUolV/JpoY0= Subject key identifier: E0:1F:A5:62:AB:AB:70:6C:D3:B4:8F:F9:EA:FF:11:81:3C:80:78:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584953B658A2ABA220EB86690BD4 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9238585-1539-3eda-8995-41ac21a325b9.roa Signing time: Thu 27 Mar 2025 12:33:19 +0000 ROA not before: Thu 27 Mar 2025 12:33:19 +0000 ROA not after: Wed 25 Jun 2025 12:33:19 +0000 asID: 32787 IP address blocks: 72.52.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:b6:58:a2:ab:a2:20:eb:86:69:0b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 27 12:33:19 2025 GMT Not After : Jun 25 12:33:19 2025 GMT Subject: CN=2188d784-3c17-49f3-98af-dd9da32c997b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3e:49:d1:f7:53:a1:12:0b:14:af:17:bd:f9: e8:df:59:d6:70:18:a1:54:12:1d:27:77:95:9d:23: 17:54:43:1c:28:d4:c9:21:0d:33:63:3b:f2:63:5a: 7d:82:fc:f9:5c:da:99:4e:58:5b:fb:44:b4:ed:ce: a8:a4:c2:47:09:90:6d:3f:b0:14:1d:ef:fe:57:98: a5:c6:f4:70:b2:29:f3:d3:02:7c:60:42:8d:f4:c5: fe:50:fd:f8:33:aa:7c:3f:ad:a9:96:97:47:51:bb: 67:5e:ca:31:16:f7:e9:42:e8:0c:b2:64:44:50:a8: f8:07:9e:f1:d0:20:5c:31:04:d9:96:2b:92:1a:e1: f1:bd:04:53:3c:12:2d:30:71:22:4c:95:4d:05:49: b0:be:e3:e6:b1:48:f7:93:25:1b:37:df:a8:1f:a5: 0d:6f:de:43:c9:1c:94:f1:ec:91:31:83:e4:cc:88: b3:06:74:01:0c:a7:6e:1c:d5:54:b7:a8:21:a5:ae: 87:65:44:7b:9e:eb:d5:37:18:8f:06:78:1b:76:8d: d2:6a:5a:e0:cc:41:42:ca:4f:d0:2d:8b:d5:e8:4e: 5f:22:dc:7d:07:c0:81:e8:66:11:04:81:03:7e:e3: 08:b8:5f:58:19:67:33:f2:17:cf:e5:c4:9c:12:04: 1d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1F:A5:62:AB:AB:70:6C:D3:B4:8F:F9:EA:FF:11:81:3C:80:78:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9238585-1539-3eda-8995-41ac21a325b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6e:b0:20:c2:02:ad:e1:65:31:3d:08:f8:c6:e8:b9:93:aa: 7c:02:f1:6c:93:c5:75:94:69:e7:f7:b0:5e:4b:59:4b:ae:27: 79:cc:49:db:04:2e:ab:f9:49:ef:12:ef:13:fd:ed:e1:b5:a6: af:56:a0:75:e7:62:9d:1e:fc:8a:6e:00:6a:4b:84:ba:64:32: 5c:7b:45:19:c8:28:dd:e4:e2:6f:d6:0c:0e:60:bc:5c:06:dd: fa:0d:36:5c:fc:7c:37:0f:4a:2e:dc:3e:e6:b6:76:7b:b6:f9: 38:bd:d6:af:43:52:35:85:06:2a:f0:fd:92:60:ae:5e:64:41: 36:58:41:40:22:23:6b:03:30:45:0b:a0:0d:b0:d5:77:b2:bf: 1f:fa:2a:f0:89:82:5c:c1:fe:5a:02:28:38:44:1d:6f:65:18: b6:aa:5a:ca:69:b7:af:65:8e:7f:72:83:f9:e2:15:9d:65:06: 1b:e1:cf:0d:31:93:c6:0c:1f:f5:2f:73:24:2f:1e:b6:d9:f9: 74:72:c6:85:eb:83:d8:39:7c:09:9d:a3:91:e0:82:da:48:2e: e3:52:b4:cc:33:af:18:94:99:45:05:e5:96:9c:41:84:ac:36: e8:24:e6:70:a9:23:e2:f2:55:12:23:66:85:32:5e:f5:c3:6c: 2f:ce:a4:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTtliiq6Ig64ZpC9QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNzEyMzMxOVoXDTI1MDYyNTEyMzMxOVowLzEtMCsGA1UEAxMk MjE4OGQ3ODQtM2MxNy00OWYzLTk4YWYtZGQ5ZGEzMmM5OTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij5J0fdToRILFK8Xvfno31nWcBihVBIdJ3eV nSMXVEMcKNTJIQ0zYzvyY1p9gvz5XNqZTlhb+0S07c6opMJHCZBtP7AUHe/+V5il xvRwsinz0wJ8YEKN9MX+UP34M6p8P62plpdHUbtnXsoxFvfpQugMsmREUKj4B57x 0CBcMQTZliuSGuHxvQRTPBItMHEiTJVNBUmwvuPmsUj3kyUbN9+oH6UNb95DyRyU 8eyRMYPkzIizBnQBDKduHNVUt6ghpa6HZUR7nuvVNxiPBngbdo3SalrgzEFCyk/Q LYvV6E5fItx9B8CB6GYRBIEDfuMIuF9YGWcz8hfP5cScEgQd+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAfpWKrq3Bs07SP+er/EYE8gHi9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjkyMzg1ODUtMTUzOS0z ZWRhLTg5OTUtNDFhYzIxYTMyNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdusCDCAq3hZTE9CPjG6LmTqnwC8WyTxXWUaef3sF5LWUuuJ3nMSdsE Lqv5Se8S7xP97eG1pq9WoHXnYp0e/IpuAGpLhLpkMlx7RRnIKN3k4m/WDA5gvFwG 3foNNlz8fDcPSi7cPua2dnu2+Ti91q9DUjWFBirw/ZJgrl5kQTZYQUAiI2sDMEUL oA2w1Xeyvx/6KvCJglzB/loCKDhEHW9lGLaqWsppt69ljn9yg/niFZ1lBhvhzw0x k8YMH/UvcyQvHrbZ+XRyxoXrg9g5fAmdo5HggtpILuNStMwzrxiUmUUF5ZacQYSs Nugk5nCpI+LyVRIjZoUyXvXDbC/OpC0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:15 2025 by rpki-client