$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/257e3931-d768-3013-94c0-1b65b52ad059.roa File: 257e3931-d768-3013-94c0-1b65b52ad059.roa (raw, json) Hash identifier: Hp1a5KwxtrLpAp0afI0RLa/uyQv9j4/ZsrPNOy9yOYg= Subject key identifier: 15:38:8E:37:57:86:4E:6C:BF:2D:E7:67:F3:1C:FD:46:20:C0:90:17 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285849CBCF860AC4D883FFFE425780 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/257e3931-d768-3013-94c0-1b65b52ad059.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 42 IP address blocks: 72.0.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:86:0a:c4:d8:83:ff:fe:42:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=e1e0cf4d-8795-40e7-bf84-b5808c2b7377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:a1:9d:8a:21:d1:aa:0f:05:a3:f6:3f:2a: fa:29:ff:01:64:00:09:41:c3:29:53:88:37:0b:70: 24:f4:92:4b:6d:b6:ec:34:ef:de:4d:16:c3:85:de: 86:29:62:27:d2:0e:1c:3c:77:26:28:62:e4:3a:dd: 54:df:11:0c:e9:1b:f1:b4:50:5a:72:ff:15:63:13: 7d:62:f1:c0:e3:7a:3a:58:07:4a:b1:41:eb:1d:64: 86:53:e4:c9:b2:3b:1b:ba:4c:19:81:94:87:94:1e: cc:e4:6f:e3:21:47:6a:54:30:c0:89:20:54:8d:e6: 8b:cb:90:bc:2c:60:a1:a4:8d:a8:61:6f:04:11:25: 5c:15:99:43:be:2c:15:e2:3d:23:43:7b:b8:9a:c1: 99:15:3b:ce:6a:4d:64:e8:76:81:ff:3e:29:d5:cb: 60:cd:d0:08:dd:9b:17:5d:2e:47:37:fe:81:9b:e1: b9:e0:d4:79:f2:35:b8:32:f3:de:9d:7e:45:00:0c: bb:9a:a6:be:05:a1:10:f5:6f:fd:a6:2a:7f:3b:4e: ee:d9:2d:36:94:b1:d0:2b:18:d9:ab:ed:e5:41:b1: 4c:bc:c8:a4:17:c0:0d:30:6c:6f:79:ba:5a:9c:0c: cd:85:58:9f:4d:fb:76:e5:a9:fa:bd:45:24:24:d9: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:38:8E:37:57:86:4E:6C:BF:2D:E7:67:F3:1C:FD:46:20:C0:90:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/257e3931-d768-3013-94c0-1b65b52ad059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 72.0.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:7e:a9:d4:21:66:e3:c7:e1:22:83:21:97:05:0f:ed:98:89: 5d:98:d9:51:de:5d:61:cf:52:49:e3:40:26:d9:16:df:c7:d1: 4e:9f:66:2f:52:59:0d:48:1b:e1:69:13:59:b3:3e:6d:bf:b0: ed:74:df:a1:04:7e:ea:77:6e:31:b0:f2:19:eb:ad:3d:fc:75: 42:cb:9d:a2:45:cd:79:e6:2c:93:1f:1a:62:5c:0a:0b:b8:ff: 70:f8:e8:04:d3:4b:6a:ae:d2:48:7c:e5:0b:d2:c6:5f:e7:a8: f4:ce:bc:d9:13:22:b9:e0:89:a7:b5:0c:04:03:5f:08:a6:9f: e6:2c:b4:15:e1:15:63:43:c6:fc:87:00:73:85:78:0c:6f:ed: c9:c9:10:1b:95:69:47:bc:14:76:50:fb:f4:78:0f:a7:8f:10: 04:c7:42:68:58:0f:da:8a:39:35:83:8a:b1:12:63:39:df:e6: e2:11:b9:fb:e1:18:aa:15:1b:fe:fb:d0:0f:ac:f3:35:1a:95: 9f:62:e1:d3:c2:96:a2:d8:2e:bb:b1:f3:91:0d:49:26:1f:81: 3b:3e:d6:db:fd:29:6b:6b:b1:2c:b5:79:9b:31:e8:61:b6:5b: 87:c5:7e:c0:1c:08:20:c6:3a:a4:10:f7:c6:d3:e5:65:98:73: 4b:31:b8:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4YKxNiD//5CV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZTFlMGNmNGQtODc5NS00MGU3LWJmODQtYjU4MDhjMmI3Mzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniGhnYoh0aoPBaP2Pyr6Kf8BZAAJQcMpU4g3 C3Ak9JJLbbbsNO/eTRbDhd6GKWIn0g4cPHcmKGLkOt1U3xEM6RvxtFBacv8VYxN9 YvHA43o6WAdKsUHrHWSGU+TJsjsbukwZgZSHlB7M5G/jIUdqVDDAiSBUjeaLy5C8 LGChpI2oYW8EESVcFZlDviwV4j0jQ3u4msGZFTvOak1k6HaB/z4p1ctgzdAI3ZsX XS5HN/6Bm+G54NR58jW4MvPenX5FAAy7mqa+BaEQ9W/9pip/O07u2S02lLHQKxjZ q+3lQbFMvMikF8ANMGxvebpanAzNhVifTft25an6vUUkJNkn+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBU4jjdXhk5svy3nZ/Mc/UYgwJAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMjU3ZTM5MzEtZDc2OC0z MDEzLTk0YzAtMWI2NWI1MmFkMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALh+qdQhZuPH4SKDIZcFD+2YiV2Y2VHeXWHPUknjQCbZFt/H0U6fZi9S WQ1IG+FpE1mzPm2/sO1036EEfup3bjGw8hnrrT38dULLnaJFzXnmLJMfGmJcCgu4 /3D46ATTS2qu0kh85QvSxl/nqPTOvNkTIrngiae1DAQDXwimn+YstBXhFWNDxvyH AHOFeAxv7cnJEBuVaUe8FHZQ+/R4D6ePEATHQmhYD9qKOTWDirESYznf5uIRufvh GKoVG/770A+s8zUalZ9i4dPClqLYLrux85ENSSYfgTs+1tv9KWtrsSy1eZsx6GG2 W4fFfsAcCCDGOqQQ98bT5WWYc0sxuOw= -----END CERTIFICATE-----Generated at Sun May 11 17:03:47 2025 by rpki-client