$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4472f4e3-dbc2-37c7-ae25-05ff52abe6c9.roa File: 4472f4e3-dbc2-37c7-ae25-05ff52abe6c9.roa (raw, json) Hash identifier: 3p+bwFhJSvjUGzfKaUSkBUNc1WUX4uf/kLUFrKdPqIY= Subject key identifier: 59:4C:C0:0A:00:CC:14:F2:81:EE:21:12:7C:0B:33:7B:5E:3C:BD:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D164FE336BCE75AE9FC1F300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4472f4e3-dbc2-37c7-ae25-05ff52abe6c9.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 0 IP address blocks: 72.13.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:fe:33:6b:ce:75:ae:9f:c1:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=751380bb-58f3-45e7-94c5-68df037eaf5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8c:89:41:f2:5f:d8:af:5e:2e:c6:76:27:11: db:d4:7c:46:ac:25:9b:c9:dd:1e:3a:7d:4c:dd:ea: cc:5b:62:c2:b5:d4:6e:89:c4:1c:11:24:c6:f0:d5: f6:2f:9d:f9:aa:f2:e7:5d:14:79:d3:d5:14:59:8f: 5a:0d:34:bd:19:a6:cb:a3:68:2f:f5:b8:82:09:c1: a4:e7:d9:7c:12:e7:ab:e3:a3:6c:b4:fc:6c:c7:cb: 21:a9:5b:6e:22:61:d8:34:82:7b:46:7e:94:b6:25: 21:58:d5:71:4b:a7:df:d8:37:79:e1:cc:c6:15:00: 31:82:96:04:d3:50:bd:00:73:ba:3d:42:d4:83:a3: f6:ee:7f:a7:cf:3a:4c:97:9e:e8:6d:e8:07:9d:d6: 30:50:68:3d:e1:47:8a:0b:64:e8:e2:27:a8:e7:13: dd:bc:09:84:eb:fa:be:1c:fb:6b:1c:a6:46:aa:ca: 74:9b:c3:75:62:43:1a:af:08:ee:83:a8:48:c5:dc: 54:a1:2f:5c:89:37:97:ee:c3:5f:3a:79:0d:8a:a4: b5:eb:8c:62:94:be:99:9e:fc:c9:e3:9f:aa:9d:94: 59:ef:f6:68:c9:a7:50:6c:9a:da:cc:02:cc:3f:6e: b1:68:01:c6:f5:11:18:3a:db:97:7c:c9:fa:e7:a9: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4C:C0:0A:00:CC:14:F2:81:EE:21:12:7C:0B:33:7B:5E:3C:BD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4472f4e3-dbc2-37c7-ae25-05ff52abe6c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:02:58:54:d7:88:8d:33:d0:37:36:09:0e:6b:fe:fe:12:56: 89:0b:ae:5b:59:33:18:b7:f5:85:a5:d1:bc:d9:c0:c3:d4:cd: dd:a1:a2:49:2c:90:dd:26:6b:63:0c:dd:05:4d:bf:88:35:2d: 87:e5:f7:c0:d5:b1:19:bb:bd:d6:78:72:ca:35:98:d7:8c:bc: 20:94:4b:9e:f1:c5:9a:c0:a6:15:9f:65:a0:95:f0:39:5f:5e: 24:83:82:c0:03:26:ac:27:1e:fc:18:42:72:5d:61:19:c6:5e: a5:36:b9:b2:c0:85:06:21:a5:15:8a:f8:8f:7f:35:e9:37:8c: 62:9a:d5:64:62:2f:9d:45:0f:0d:0b:87:10:c1:df:d9:5e:2a: 26:45:56:9d:ed:49:c9:e2:23:77:6e:1b:63:6c:1b:6c:4f:98: 84:54:cd:f1:8d:6d:50:66:30:14:2f:c1:0a:57:77:59:8a:f3: 68:6b:0e:d1:60:d6:1d:e3:0d:47:5a:fe:e8:03:c3:9a:9d:6b: e5:d7:57:46:09:ad:a4:ee:30:47:eb:38:69:34:22:d4:45:f7: c6:17:6a:0a:79:21:03:82:f2:1f:9c:7b:c7:6d:3d:f0:6e:52: 54:de:23:5b:81:ea:88:f7:9d:c9:c3:a9:dc:b6:2a:b7:1f:62: 6c:7f:6c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZP4za851rp/B8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NzUxMzgwYmItNThmMy00NWU3LTk0YzUtNjhkZjAzN2VhZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIyJQfJf2K9eLsZ2JxHb1HxGrCWbyd0eOn1M 3erMW2LCtdRuicQcESTG8NX2L535qvLnXRR509UUWY9aDTS9GabLo2gv9biCCcGk 59l8Euer46NstPxsx8shqVtuImHYNIJ7Rn6UtiUhWNVxS6ff2Dd54czGFQAxgpYE 01C9AHO6PULUg6P27n+nzzpMl57obegHndYwUGg94UeKC2To4ieo5xPdvAmE6/q+ HPtrHKZGqsp0m8N1YkMarwjug6hIxdxUoS9ciTeX7sNfOnkNiqS164xilL6ZnvzJ 45+qnZRZ7/ZoyadQbJrazALMP26xaAHG9REYOtuXfMn656mQ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlMwAoAzBTyge4hEnwLM3tePL3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDQ3MmY0ZTMtZGJjMi0z N2M3LWFlMjUtMDVmZjUyYWJlNmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcCWFTXiI0z0Dc2CQ5r/v4SVokLrltZMxi39YWl0bzZwMPUzd2hokks kN0ma2MM3QVNv4g1LYfl98DVsRm7vdZ4cso1mNeMvCCUS57xxZrAphWfZaCV8Dlf XiSDgsADJqwnHvwYQnJdYRnGXqU2ubLAhQYhpRWK+I9/Nek3jGKa1WRiL51FDw0L hxDB39leKiZFVp3tScniI3duG2NsG2xPmIRUzfGNbVBmMBQvwQpXd1mK82hrDtFg 1h3jDUda/ugDw5qda+XXV0YJraTuMEfrOGk0ItRF98YXagp5IQOC8h+ce8dtPfBu UlTeI1uB6oj3ncnDqdy2KrcfYmx/bJ4= -----END CERTIFICATE-----Generated at Mon May 12 10:47:49 2025 by rpki-client