$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9421a0e-6333-35dd-bee6-397155943c85.roa File: d9421a0e-6333-35dd-bee6-397155943c85.roa (raw, json) Hash identifier: oMQBEmAN7U9Yo0uxmYG7bUFwoZqwYy0LkALHpGiikR0= Subject key identifier: 70:A9:7C:61:2F:20:31:05:BB:36:1F:51:5A:53:D4:3E:03:53:26:91 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926DBC46F4A0435D1082C00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9421a0e-6333-35dd-bee6-397155943c85.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 397270 IP address blocks: 72.52.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:db:c4:6f:4a:04:35:d1:08:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=479ab12a-bc0b-4bb6-ada6-291fa0a9d444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:90:99:3a:7f:e1:cf:45:ab:7f:47:85:24: 0b:e2:42:80:94:21:4f:ac:d7:65:53:f6:64:1f:f4: be:56:69:27:1b:e0:6c:59:1e:e6:e7:f6:a6:ae:18: d6:69:b3:8a:1c:50:70:df:89:b7:1e:1c:5e:e0:a6: fe:09:07:ce:fb:2b:da:24:3a:de:87:9c:61:f2:4d: 32:de:fd:dc:c0:8d:71:c7:34:8f:07:97:8b:61:36: 09:7b:19:0e:ad:08:ab:d1:04:ee:63:55:af:e9:53: 24:71:c7:e0:d3:93:53:1a:30:13:f5:aa:f3:a2:12: b9:a8:1a:45:8d:f5:01:a0:45:ed:dd:4e:63:ed:61: 29:93:3d:88:65:43:14:e5:55:cf:76:c1:cc:6e:a8: 6e:e0:7d:9b:6f:cc:f0:3e:b0:c4:41:29:38:00:dc: 6a:96:1f:ca:66:07:0c:db:ed:15:4b:97:fd:d5:e9: 04:38:79:65:71:f4:ea:db:d1:43:06:bf:77:b2:3a: 77:45:3d:a4:ec:df:c2:6d:7c:37:49:01:6f:0c:3f: 5b:c7:00:41:a1:ec:0a:a6:a5:75:24:e5:90:2a:26: 0e:5a:ec:22:26:1c:9b:8e:1a:aa:08:94:af:34:3f: 3f:a8:8c:1a:9d:86:a6:4e:6a:d3:dc:4e:82:31:24: 80:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A9:7C:61:2F:20:31:05:BB:36:1F:51:5A:53:D4:3E:03:53:26:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9421a0e-6333-35dd-bee6-397155943c85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 72.52.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:40:3e:0c:24:01:75:6a:61:0d:0f:01:3a:9d:1c:25:d8:4a: 29:25:a4:7e:69:e1:3a:9f:b2:f8:7a:07:2c:95:d6:bb:2e:80: dd:f6:48:11:be:66:70:20:aa:be:11:60:cd:eb:38:c5:51:5c: dc:6d:a8:1a:dd:21:17:b0:04:b7:9b:ab:00:c3:a6:e8:f2:b8: df:41:a6:6c:9f:60:14:c4:81:ea:c6:e6:39:32:37:d8:d5:96: cc:36:63:7b:5f:f7:d8:36:9d:bd:ba:e3:a3:f0:62:8a:88:42: 50:0c:29:31:f1:7a:e9:b9:92:1d:a3:2a:45:34:89:21:29:67: 0c:f4:bb:db:7e:c1:c1:df:b1:94:b8:9c:74:fd:29:9f:96:e4: b6:f3:e3:67:fd:cc:fd:23:19:df:cd:21:a7:5a:86:ce:ca:f4: c0:ec:33:60:02:14:c0:f1:68:be:05:c5:d3:8a:60:11:f2:16: 73:ad:80:94:20:74:79:0a:d1:3f:bc:17:52:fd:f8:80:29:a6: f6:3b:68:c8:e8:30:2f:2c:2c:ff:ca:34:db:bd:4a:c1:20:d6: 46:89:c9:81:91:79:45:43:7f:c8:5d:33:82:e4:99:39:cd:dd: 88:ac:eb:55:3c:13:75:a7:08:83:5f:dc:4c:c2:6e:ee:70:5a: bb:90:1f:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JtvEb0oENdEILAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NDc5YWIxMmEtYmMwYi00YmI2LWFkYTYtMjkxZmEwYTlkNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCeQmTp/4c9Fq39HhSQL4kKAlCFPrNdlU/Zk H/S+VmknG+BsWR7m5/amrhjWabOKHFBw34m3Hhxe4Kb+CQfO+yvaJDreh5xh8k0y 3v3cwI1xxzSPB5eLYTYJexkOrQir0QTuY1Wv6VMkccfg05NTGjAT9arzohK5qBpF jfUBoEXt3U5j7WEpkz2IZUMU5VXPdsHMbqhu4H2bb8zwPrDEQSk4ANxqlh/KZgcM 2+0VS5f91ekEOHllcfTq29FDBr93sjp3RT2k7N/CbXw3SQFvDD9bxwBBoewKpqV1 JOWQKiYOWuwiJhybjhqqCJSvND8/qIwanYamTmrT3E6CMSSA4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCpfGEvIDEFuzYfUVpT1D4DUyaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDk0MjFhMGUtNjMzMy0z NWRkLWJlZTYtMzk3MTU1OTQzYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDRHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFAPgwkAXVqYQ0PATqdHCXYSiklpH5p4Tqfsvh6ByyV1rsugN32SBG+ ZnAgqr4RYM3rOMVRXNxtqBrdIRewBLebqwDDpujyuN9BpmyfYBTEgerG5jkyN9jV lsw2Y3tf99g2nb2646PwYoqIQlAMKTHxeum5kh2jKkU0iSEpZwz0u9t+wcHfsZS4 nHT9KZ+W5Lbz42f9zP0jGd/NIadahs7K9MDsM2ACFMDxaL4FxdOKYBHyFnOtgJQg dHkK0T+8F1L9+IAppvY7aMjoMC8sLP/KNNu9SsEg1kaJyYGReUVDf8hdM4LkmTnN 3Yis61U8E3WnCINf3EzCbu5wWruQH9Q= -----END CERTIFICATE-----Generated at Fri Apr 4 17:57:38 2025 by rpki-client