$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa File: 420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa (raw, json) Hash identifier: 5AUXyccaqsxDwLd2sYdiMhbePlbAqgd5ujrjqKQukQU= Subject key identifier: 21:47:C9:85:44:04:35:76:90:27:3F:62:39:95:24:28:4F:8B:03:5B Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F43285849CE9A652528083A88DB20E140 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 13638 IP address blocks: 72.11.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:65:25:28:08:3a:88:db:20:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=935155b5-ace2-4a57-a4c5-5096d5fb14ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7e:4f:cd:2c:0e:d7:0c:ad:71:c3:55:91:30: af:1f:53:e3:bf:13:b6:f9:d8:98:31:8f:b8:ad:db: 1b:01:5d:ec:de:f8:1e:98:4c:b6:03:5e:80:8b:e7: 5b:ba:d2:b3:6c:e0:d6:3b:86:c9:e9:07:ed:05:6a: 38:3e:a7:f2:a9:c9:79:db:98:46:02:b3:e0:3c:30: a8:94:c4:ea:b6:81:d5:b9:95:11:e0:e0:23:e8:77: 91:70:e1:bd:26:d0:26:39:ff:6e:1d:09:f8:14:b0: 2f:48:a6:03:d9:91:4a:36:c0:07:56:bd:af:92:7d: ab:a5:14:ab:0c:cb:af:d6:e6:02:75:10:59:42:e6: 90:b6:78:65:5c:13:55:17:38:66:8d:c4:13:a8:42: 0a:5f:d6:79:8d:7f:62:c1:7c:1b:23:df:8b:07:94: db:b4:ae:aa:31:cb:5b:9e:af:9c:27:62:f4:e6:d7: 4f:90:96:65:b9:0b:4c:68:9c:76:b9:14:4f:a6:7f: 63:f8:25:04:b2:df:94:93:34:8c:13:cc:ac:56:94: e0:54:db:79:81:c5:a3:3a:3e:09:c5:16:8c:29:70: b9:80:e9:06:08:e3:23:6f:ba:1e:88:8f:8e:62:df: 52:62:d2:59:d1:7c:13:41:57:e5:83:7a:ef:8b:ee: 4e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:47:C9:85:44:04:35:76:90:27:3F:62:39:95:24:28:4F:8B:03:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 72.11.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f5:ab:44:cb:1e:1f:fb:99:26:a1:b0:d8:da:72:4e:a2:85: e4:0a:89:8d:c5:46:9c:e7:eb:57:8a:48:c2:b1:cc:3f:f1:80: 53:bc:74:cf:4c:da:4a:27:fd:ac:03:01:a7:7b:dd:df:49:1b: 67:bb:92:ff:54:36:5a:90:0c:81:0f:d9:40:e4:9a:c5:2e:70: 92:6e:5a:79:7e:1b:bb:6a:a1:9f:d4:e0:0b:27:7a:aa:7b:10: 60:04:41:1b:25:4f:af:9e:48:1f:97:d9:f4:8a:ee:09:ba:03: 73:b6:8b:28:e4:c3:3c:43:7a:cd:a2:e0:52:6a:92:3c:f4:b9: 7e:7a:ff:ad:0f:4c:e9:1f:eb:0e:86:b1:17:3c:60:b5:87:77: 5a:a8:a5:9a:dc:ee:39:25:35:8e:4c:a4:b9:b7:e2:3f:a3:cc: 62:f0:79:cd:ac:b6:b0:6d:45:8a:0a:e3:b1:af:85:76:8a:dd: aa:71:46:73:d9:76:55:20:86:ce:bf:84:56:bf:82:4a:45:69: f1:43:b8:2a:1d:1c:40:e3:3b:af:fd:cb:4a:6c:84:2f:4d:40: 74:70:96:46:a9:6c:eb:1b:6d:59:01:16:c3:6c:21:00:66:b2: 81:8a:60:3a:18:90:8e:cd:e1:19:44:af:9f:61:bd:20:ab:53: f2:d0:f7:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmUlKAg6iNsg4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk OTM1MTU1YjUtYWNlMi00YTU3LWE0YzUtNTA5NmQ1ZmIxNGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H5PzSwO1wytccNVkTCvH1PjvxO2+diYMY+4 rdsbAV3s3vgemEy2A16Ai+dbutKzbODWO4bJ6QftBWo4Pqfyqcl525hGArPgPDCo lMTqtoHVuZUR4OAj6HeRcOG9JtAmOf9uHQn4FLAvSKYD2ZFKNsAHVr2vkn2rpRSr DMuv1uYCdRBZQuaQtnhlXBNVFzhmjcQTqEIKX9Z5jX9iwXwbI9+LB5TbtK6qMctb nq+cJ2L05tdPkJZluQtMaJx2uRRPpn9j+CUEst+UkzSME8ysVpTgVNt5gcWjOj4J xRaMKXC5gOkGCOMjb7oeiI+OYt9SYtJZ0XwTQVflg3rvi+5OeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFHyYVEBDV2kCc/YjmVJChPiwNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvNDIwZDUwNmItNGRkZC0z Mjg2LThiZDItZWY0NzA3YjA3YmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv1q0TLHh/7mSahsNjack6iheQKiY3FRpzn61eKSMKxzD/xgFO8dM9M 2kon/awDAad73d9JG2e7kv9UNlqQDIEP2UDkmsUucJJuWnl+G7tqoZ/U4Asneqp7 EGAEQRslT6+eSB+X2fSK7gm6A3O2iyjkwzxDes2i4FJqkjz0uX56/60PTOkf6w6G sRc8YLWHd1qopZrc7jklNY5MpLm34j+jzGLwec2strBtRYoK47GvhXaK3apxRnPZ dlUghs6/hFa/gkpFafFDuCodHEDjO6/9y0pshC9NQHRwlkapbOsbbVkBFsNsIQBm soGKYDoYkI7N4RlEr59hvSCrU/LQ96w= -----END CERTIFICATE-----Generated at Mon May 12 18:44:21 2025 by rpki-client