$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c95c4186-fec5-30b2-b84d-a3a444066ebb.roa File: c95c4186-fec5-30b2-b84d-a3a444066ebb.roa (raw, json) Hash identifier: i0TzftQDBNf3T08atMg5BHpLPq6edc6ISowS0uA1vJM= Subject key identifier: 5B:8E:95:42:A0:38:F7:F9:9F:66:84:D4:09:3C:5F:0F:FF:27:C7:B7 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584921342E2550743B8AE13B3B80 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c95c4186-fec5-30b2-b84d-a3a444066ebb.roa Signing time: Sun 09 Mar 2025 10:20:38 +0000 ROA not before: Sun 09 Mar 2025 10:20:38 +0000 ROA not after: Sat 07 Jun 2025 10:20:38 +0000 asID: 577 IP address blocks: 72.28.64.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:2e:25:50:74:3b:8a:e1:3b:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:20:38 2025 GMT Not After : Jun 7 10:20:38 2025 GMT Subject: CN=6d2b8d34-7792-4893-adab-5fb8784d9634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:79:c9:64:81:00:c6:06:b7:0d:8c:90:22: 5f:eb:d7:0b:61:b5:3f:37:ef:ae:4c:e8:d5:e5:ce: 04:97:0f:2c:aa:49:1e:99:f2:f6:89:2e:69:f5:85: c7:f8:4b:58:ca:3a:99:fe:1b:22:3d:22:0c:f5:a5: 9a:09:44:ef:a6:21:21:26:f5:fd:a6:3e:6e:02:44: 9a:61:b6:09:54:fe:df:a0:3b:47:48:29:a7:a4:97: 16:60:c7:22:2e:0c:9c:9e:98:d7:0e:8c:e4:61:4d: a6:3c:68:77:cc:1f:e1:2c:eb:0e:c1:b5:d5:d0:17: 75:03:0e:0f:4d:75:29:b8:c8:e7:8a:23:22:7e:7c: c0:16:c7:56:05:74:3a:be:6e:a9:c8:ff:f7:c5:f6: e5:b6:e1:b9:1e:81:b0:2f:45:4f:8a:67:d2:59:18: 0a:ec:67:e8:9c:c5:64:ca:b2:99:ad:22:f8:15:27: 0b:b1:f8:bf:20:cd:1e:76:78:67:2f:d5:38:9f:a1: 6c:cb:d4:61:68:83:c0:2c:8f:14:db:86:36:46:8d: 47:1d:1b:89:07:20:3a:51:de:30:48:78:d5:2c:14: 26:98:ad:f3:16:d5:bd:c0:05:89:3a:65:4f:6f:e5: 8a:c3:fc:a9:ae:4f:dd:1c:6b:65:06:8a:72:19:c7: 15:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8E:95:42:A0:38:F7:F9:9F:66:84:D4:09:3C:5F:0F:FF:27:C7:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c95c4186-fec5-30b2-b84d-a3a444066ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 72.28.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:77:bc:f9:3b:c2:aa:e0:e0:9b:01:29:d1:bd:80:d2:75:68: b3:1f:1f:48:dd:79:54:7e:65:1f:31:5c:01:08:79:17:22:77: 9c:68:b5:78:fe:27:8e:3d:03:40:03:7a:8c:0f:5c:d0:af:3a: 02:50:7d:b8:77:99:b5:8b:bc:ba:61:d0:7c:f1:02:7c:c5:4e: a3:5c:cc:3f:3e:9d:fe:a4:17:31:5b:96:ac:1e:dd:78:99:c0: a3:74:1f:c2:0a:49:01:af:20:13:3b:3d:01:74:c4:98:24:e4: c1:c5:aa:ea:30:db:a3:11:38:06:6d:48:e4:67:8c:9a:54:da: 91:56:ea:3e:4b:14:58:43:9a:ff:b7:aa:e5:ae:61:66:03:34: 8e:08:b1:70:a5:6f:00:ca:2d:e3:e5:25:f0:31:9a:ed:d3:52: b5:bc:74:46:29:f5:92:c0:62:06:0e:61:65:21:5a:8e:38:0c: ce:e3:ba:e7:79:80:75:1a:11:27:a8:28:3a:ef:fd:09:60:e5: 97:8e:71:90:5e:78:9e:9c:3b:bc:2a:df:67:9b:d4:8f:c1:ef: cc:fc:5b:fe:5d:50:50:f0:6c:58:e5:3b:4d:b6:46:2d:01:07: ea:80:23:61:8e:a3:8f:79:d1:a8:e7:a8:64:33:35:a9:7f:c8: 91:14:c4:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNC4lUHQ7iuE7O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjAzOFoXDTI1MDYwNzEwMjAzOFowLzEtMCsGA1UEAxMk NmQyYjhkMzQtNzc5Mi00ODkzLWFkYWItNWZiODc4NGQ5NjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnl5yWSBAMYGtw2MkCJf69cLYbU/N++uTOjV 5c4Elw8sqkkemfL2iS5p9YXH+EtYyjqZ/hsiPSIM9aWaCUTvpiEhJvX9pj5uAkSa YbYJVP7foDtHSCmnpJcWYMciLgycnpjXDozkYU2mPGh3zB/hLOsOwbXV0Bd1Aw4P TXUpuMjniiMifnzAFsdWBXQ6vm6pyP/3xfbltuG5HoGwL0VPimfSWRgK7GfonMVk yrKZrSL4FScLsfi/IM0ednhnL9U4n6Fsy9RhaIPALI8U24Y2Ro1HHRuJByA6Ud4w SHjVLBQmmK3zFtW9wAWJOmVPb+WKw/yprk/dHGtlBopyGccV2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuOlUKgOPf5n2aE1Ak8Xw//J8e3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYzk1YzQxODYtZmVjNS0z MGIyLWI4NGQtYTNhNDQ0MDY2ZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH13vPk7wqrg4JsBKdG9gNJ1aLMfH0jdeVR+ZR8xXAEIeRcid5xotXj+ J449A0ADeowPXNCvOgJQfbh3mbWLvLph0HzxAnzFTqNczD8+nf6kFzFblqwe3XiZ wKN0H8IKSQGvIBM7PQF0xJgk5MHFquow26MROAZtSORnjJpU2pFW6j5LFFhDmv+3 quWuYWYDNI4IsXClbwDKLePlJfAxmu3TUrW8dEYp9ZLAYgYOYWUhWo44DM7juud5 gHUaESeoKDrv/Qlg5ZeOcZBeeJ6cO7wq32eb1I/B78z8W/5dUFDwbFjlO022Ri0B B+qAI2GOo4950ajnqGQzNal/yJEUxIk= -----END CERTIFICATE-----Generated at Fri May 9 10:45:53 2025 by rpki-client