$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/41a4aeb3-f9d3-3abd-ae83-c0cce907513e.roa File: 41a4aeb3-f9d3-3abd-ae83-c0cce907513e.roa (raw, json) Hash identifier: UpkP+lY/OmJgVaJKO5zzr65WSGXCVbV8+n2glm2HF0Y= Subject key identifier: D3:1E:88:C7:6A:F5:C7:4E:AE:C3:1E:0A:7E:E1:8D:93:54:BB:23:A7 Certificate issuer: /CN=59dd5c15-2985-4e5b-8090-c191469aad18 Certificate serial: 010D0C9F43285849DF5A76BB1171D71BF71AAF00 Authority key identifier: 6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/41a4aeb3-f9d3-3abd-ae83-c0cce907513e.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 62164 IP address blocks: 72.18.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:76:bb:11:71:d7:1b:f7:1a:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd5c15-2985-4e5b-8090-c191469aad18 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=7a61fc1f-ad7e-4c8f-80a7-c48540dcc7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:2f:53:46:34:d3:fc:ab:eb:99:3b:09:db: 02:ae:8a:5b:12:da:7e:77:51:14:b0:fa:ae:aa:ad: 79:71:69:8f:7f:48:79:4c:e2:9d:bd:ce:3f:a1:7c: bf:19:3d:3b:19:37:50:6a:97:49:d6:db:b9:ae:15: 95:05:92:b8:fb:ce:86:33:47:5e:02:b8:46:38:a9: c5:2a:58:f2:dc:0e:da:6f:0e:d9:93:9c:ee:da:a9: 91:de:d9:07:ca:6d:bb:2e:f0:03:0f:df:93:87:fa: 36:67:70:91:30:8b:b6:06:01:8b:01:fc:0d:a4:0e: 6d:c8:62:9b:50:5e:39:ae:7f:d4:54:0f:f8:a2:f9: 24:ca:fe:f9:13:02:38:09:b2:2e:a3:9f:32:62:bf: 8b:97:70:9b:b3:ca:27:9c:97:76:e2:01:b7:03:eb: 89:36:fd:51:23:60:c0:c2:63:34:1a:72:8d:41:3b: e4:69:dd:11:d7:46:89:c2:00:28:e0:20:50:1b:70: 33:39:b3:36:6f:ff:4c:ce:e9:a3:f6:fc:21:cd:e8: 1e:9c:8c:93:7f:9a:08:d5:dc:fb:98:8e:79:a1:b4: ae:1c:06:bc:c8:55:c2:31:27:60:e9:69:3f:15:e5: ff:62:f5:b4:d7:37:0b:e2:bc:50:04:64:18:a2:43: 34:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1E:88:C7:6A:F5:C7:4E:AE:C3:1E:0A:7E:E1:8D:93:54:BB:23:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/41a4aeb3-f9d3-3abd-ae83-c0cce907513e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl X509v3 Authority Key Identifier: keyid:6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer sbgp-ipAddrBlock: critical IPv4: 72.18.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f7:83:51:33:1f:06:03:72:d7:25:cb:2a:ee:3b:5b:08:d4: 56:9d:c3:e5:7a:57:7e:b5:13:ea:35:f7:82:b3:1c:11:b2:a8: d9:9c:66:84:6a:f6:6c:bb:8f:db:48:ba:a7:20:c9:fb:cf:45: c2:14:b6:d4:f7:34:38:6e:8a:64:19:8d:c1:74:c9:1b:2b:35: 30:c9:82:56:47:75:33:9c:2f:ba:01:e5:5b:67:50:7c:ca:0b: 19:4b:58:54:07:66:b2:87:c5:71:01:23:5f:51:f9:23:d3:e9: f1:7f:a6:3c:05:e5:9b:cc:83:9a:ac:eb:20:99:4b:67:b5:aa: e5:04:c5:4c:c2:70:5e:3e:16:8a:0a:08:99:a6:9e:97:d5:df: b2:e7:1a:73:a5:07:39:1a:38:c7:88:fe:8b:d9:2c:0e:8b:3a: 53:0f:ec:55:70:69:2a:3d:39:47:8a:fa:7c:12:29:be:41:51: f9:e9:cf:b3:72:8a:05:1b:90:31:b2:1c:94:b8:1d:03:21:fb: de:13:5c:51:f5:c7:14:fd:47:1a:42:60:ca:a0:66:12:5c:d0: cc:32:81:de:a1:29:df:f0:7d:7d:d2:2f:6f:28:38:0e:23:93: 60:bf:28:9d:f6:d3:ea:d4:94:08:cd:a8:75:48:cc:83:37:da: f7:e7:4a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWna7EXHXG/carwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlkZDVjMTUtMjk4NS00ZTViLTgwOTAtYzE5MTQ2OWFh ZDE4MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk N2E2MWZjMWYtYWQ3ZS00YzhmLTgwYTctYzQ4NTQwZGNjN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5kvU0Y00/yr65k7CdsCropbEtp+d1EUsPqu qq15cWmPf0h5TOKdvc4/oXy/GT07GTdQapdJ1tu5rhWVBZK4+86GM0deArhGOKnF Kljy3A7abw7Zk5zu2qmR3tkHym27LvADD9+Th/o2Z3CRMIu2BgGLAfwNpA5tyGKb UF45rn/UVA/4ovkkyv75EwI4CbIuo58yYr+Ll3Cbs8onnJd24gG3A+uJNv1RI2DA wmM0GnKNQTvkad0R10aJwgAo4CBQG3AzObM2b/9Mzumj9vwhzegenIyTf5oI1dz7 mI55obSuHAa8yFXCMSdg6Wk/FeX/YvW01zcL4rxQBGQYokM03wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMeiMdq9cdOrsMeCn7hjZNUuyOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81OWRk NWMxNS0yOTg1LTRlNWItODA5MC1jMTkxNDY5YWFkMTgvNDFhNGFlYjMtZjlkMy0z YWJkLWFlODMtYzBjY2U5MDc1MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTlkZDVjMTUtMjk4NS00ZTViLTgw OTAtYzE5MTQ2OWFhZDE4LzU5ZGQ1YzE1LTI5ODUtNGU1Yi04MDkwLWMxOTE0Njlh YWQxOC5jcmwwHwYDVR0jBBgwFoAUb0Wahbhc9Ip9r6B8KQ/8IMB9htAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81OWRkNWMxNS0yOTg1LTRlNWItODA5MC1jMTkx NDY5YWFkMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn3g1EzHwYDctclyyruO1sI1Fadw+V6V361E+o194KzHBGyqNmcZoRq 9my7j9tIuqcgyfvPRcIUttT3NDhuimQZjcF0yRsrNTDJglZHdTOcL7oB5VtnUHzK CxlLWFQHZrKHxXEBI19R+SPT6fF/pjwF5ZvMg5qs6yCZS2e1quUExUzCcF4+FooK CJmmnpfV37LnGnOlBzkaOMeI/ovZLA6LOlMP7FVwaSo9OUeK+nwSKb5BUfnpz7Ny igUbkDGyHJS4HQMh+94TXFH1xxT9RxpCYMqgZhJc0Mwygd6hKd/wfX3SL28oOA4j k2C/KJ320+rUlAjNqHVIzIM32vfnSjI= -----END CERTIFICATE-----Generated at Tue Jul 1 01:10:28 2025 by rpki-client