$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/aa4e50e2-3b8f-3cbc-9faf-1f6385fbad66.roa File: aa4e50e2-3b8f-3cbc-9faf-1f6385fbad66.roa (raw, json) Hash identifier: TmFltYm5pqlhdNGw91ywcVfoP4qeAoRfW+5n3JZpOGQ= Subject key identifier: 3F:22:D0:5D:DD:D2:7D:E9:C4:8B:02:6E:02:42:E0:2C:AD:78:FA:C8 Certificate issuer: /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0 Certificate serial: 010D0C9F432858495D896FFE3EAB8CAC97FC6C34 Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/aa4e50e2-3b8f-3cbc-9faf-1f6385fbad66.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 46320 IP address blocks: 216.234.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:6f:fe:3e:ab:8c:ac:97:fc:6c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=dd6f8d71-f4ab-44d0-92ab-20805104b625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:db:f8:21:6b:4a:fa:05:4a:00:13:6a:d5:ee: 8e:24:a2:be:86:1d:ca:af:e8:e6:48:5d:9b:67:30: e2:bc:86:46:e7:3a:cc:8a:4f:15:28:83:7b:2f:4b: 55:1e:04:7f:15:c1:48:06:3d:47:fd:3d:80:96:34: c1:45:5d:b3:4d:26:da:0b:3f:08:c1:88:7b:43:6d: 3b:56:b3:de:0f:5f:d7:ba:a2:25:56:47:af:74:c3: 75:f3:9b:bb:32:b0:ad:9b:3a:0c:e1:19:ad:00:0b: 6e:40:54:85:73:99:ed:06:53:02:19:74:29:bf:74: 74:ca:03:46:4e:49:76:b5:6b:3a:f8:4a:5b:f2:4f: 7e:e7:3a:a7:7f:64:6a:ab:0d:6e:d2:91:e5:79:9c: 35:f7:e6:fb:bc:8b:fd:d6:4e:e8:b0:01:9e:d6:6b: e4:8e:b1:76:bd:20:60:07:3f:38:8a:04:63:90:7a: 3b:54:ed:ab:5c:75:0a:66:ef:b6:ea:6d:17:8d:40: 7e:b8:52:6c:61:01:a1:25:11:ed:9d:89:de:2e:2d: 08:8e:38:fb:79:f0:ca:2a:78:52:f1:11:84:e9:da: 27:9a:62:eb:9a:b2:27:29:4a:ff:93:79:03:df:e7: 7a:5c:fc:cc:ee:19:54:71:d3:f6:91:00:a2:26:db: d5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:22:D0:5D:DD:D2:7D:E9:C4:8B:02:6E:02:42:E0:2C:AD:78:FA:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/aa4e50e2-3b8f-3cbc-9faf-1f6385fbad66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl X509v3 Authority Key Identifier: keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer sbgp-ipAddrBlock: critical IPv4: 216.234.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:75:c5:57:29:84:bb:06:64:64:78:31:0c:38:1a:70:32:38: 52:ab:a9:d9:ed:d0:2f:be:8e:aa:39:f0:8b:08:f6:79:b1:0d: e2:e1:e0:a3:be:16:71:9e:f4:33:1f:b6:a5:4a:92:87:52:1a: 41:33:e5:98:cb:e0:d3:6e:07:1b:0b:23:1d:96:b5:a1:4e:d2: 29:a9:2b:17:6f:0a:5b:f0:05:ec:03:9a:76:43:a0:29:16:bf: d8:93:fe:19:71:37:d0:15:37:dc:3a:17:89:36:a5:91:24:eb: bd:e8:98:f0:86:51:b4:32:f8:df:48:89:ca:d8:90:48:f3:96: ba:fa:1f:06:36:89:a2:29:8c:b4:86:9b:08:e1:2d:98:2b:07: 15:a7:08:23:92:93:10:d0:ef:3d:c0:8d:90:9a:64:7a:b2:49: ff:4a:5e:43:5d:37:b8:b5:13:ac:e9:b0:ac:c5:0e:a4:02:87: c1:7e:c0:ea:07:8c:b5:63:9c:b5:61:53:0a:eb:95:1e:70:59: de:dd:29:8a:86:b9:87:89:ea:2e:ae:d9:1f:36:f8:d8:53:0d: ea:84:e4:11:0f:39:2b:72:b1:b8:54:89:ae:f8:b7:d0:4c:29: fe:df:9e:4f:27:a3:f4:e3:7e:5b:1c:d3:08:25:7b:0d:48:c9: 4d:41:7c:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiW/+PquMrJf8bDQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJiMTczNDMtZDJmMS00OWNlLWJhOTItMjJmMTNjZmJj MGQwMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZGQ2ZjhkNzEtZjRhYi00NGQwLTkyYWItMjA4MDUxMDRiNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Nv4IWtK+gVKABNq1e6OJKK+hh3Kr+jmSF2b ZzDivIZG5zrMik8VKIN7L0tVHgR/FcFIBj1H/T2AljTBRV2zTSbaCz8IwYh7Q207 VrPeD1/XuqIlVkevdMN185u7MrCtmzoM4RmtAAtuQFSFc5ntBlMCGXQpv3R0ygNG Tkl2tWs6+Epb8k9+5zqnf2Rqqw1u0pHleZw19+b7vIv91k7osAGe1mvkjrF2vSBg Bz84igRjkHo7VO2rXHUKZu+26m0XjUB+uFJsYQGhJRHtnYneLi0Ijjj7efDKKnhS 8RGE6donmmLrmrInKUr/k3kD3+d6XPzM7hlUcdP2kQCiJtvVMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8i0F3d0n3pxIsCbgJC4CytePrIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MmIx NzM0My1kMmYxLTQ5Y2UtYmE5Mi0yMmYxM2NmYmMwZDAvYWE0ZTUwZTItM2I4Zi0z Y2JjLTlmYWYtMWY2Mzg1ZmJhZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzJiMTczNDMtZDJmMS00OWNlLWJh OTItMjJmMTNjZmJjMGQwLzcyYjE3MzQzLWQyZjEtNDljZS1iYTkyLTIyZjEzY2Zi YzBkMC5jcmwwHwYDVR0jBBgwFoAUoybRn8spmYSXTnzi26U8HqczzBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83MmIxNzM0My1kMmYxLTQ5Y2UtYmE5Mi0yMmYx M2NmYmMwZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp1xVcphLsGZGR4MQw4GnAyOFKrqdnt0C++jqo58IsI9nmxDeLh4KO+ FnGe9DMftqVKkodSGkEz5ZjL4NNuBxsLIx2WtaFO0impKxdvClvwBewDmnZDoCkW v9iT/hlxN9AVN9w6F4k2pZEk673omPCGUbQy+N9IicrYkEjzlrr6HwY2iaIpjLSG mwjhLZgrBxWnCCOSkxDQ7z3AjZCaZHqySf9KXkNdN7i1E6zpsKzFDqQCh8F+wOoH jLVjnLVhUwrrlR5wWd7dKYqGuYeJ6i6u2R82+NhTDeqE5BEPOStysbhUia74t9BM Kf7fnk8no/Tjflsc0wglew1IyU1BfO8= -----END CERTIFICATE-----Generated at Sun May 11 06:38:35 2025 by rpki-client