$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa File: ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa (raw, json) Hash identifier: XGkO/hGF7iHvRAJ0RiiVUDo7hZ/R6e7vb7+6F+bFR+A= Subject key identifier: CF:51:C0:42:A6:E1:E6:E7:70:79:50:46:98:B3:2F:1F:44:EB:2D:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849CE9A76EF59ECC6DBD4D67B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 0 IP address blocks: 72.13.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:76:ef:59:ec:c6:db:d4:d6:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=6b73f0b0-f035-45b6-8de9-9122faf08914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:79:c6:61:f3:f3:05:a5:0d:7e:57:20:f6:28: a9:c2:26:0f:17:a7:68:e9:4d:7a:03:25:53:76:93: 47:04:7d:be:70:18:56:a8:35:4e:b5:25:c2:ef:af: 55:aa:5a:64:03:20:b0:b3:69:7d:7b:aa:a0:2e:ab: 32:73:95:a4:a4:b7:84:f4:89:14:b1:f0:2f:1a:b4: 8a:f7:01:d9:49:b1:08:ca:a8:e0:df:36:d1:5d:df: 56:b1:34:8a:27:54:c7:56:35:1b:83:1d:18:d5:81: 85:80:bf:14:1d:d9:59:da:68:a6:b3:72:70:61:f5: da:62:25:d3:9c:19:fc:44:00:3d:25:b3:38:41:04: b6:34:65:7a:ac:b3:d3:6a:2c:e6:3e:8c:e6:4a:a1: b1:53:da:f7:0b:81:bf:17:31:8a:d8:67:d0:f9:65: b1:01:b6:5c:cf:63:05:7c:b6:eb:31:53:c5:a8:4e: af:8e:af:23:32:51:3c:dd:d2:78:d1:98:0a:5c:38: 17:ee:bd:e3:91:7a:62:64:e6:4a:fc:e5:dd:0a:a5: d6:7b:af:0d:56:8b:e3:0c:ca:0c:9f:70:bd:5b:dd: 12:50:c9:e2:e5:0b:2a:26:4d:d9:07:c7:77:86:07: 82:bd:27:cf:b0:90:0f:cb:e8:dd:3b:f0:02:fd:18: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:51:C0:42:A6:E1:E6:E7:70:79:50:46:98:B3:2F:1F:44:EB:2D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:25:e0:8d:86:ce:ff:f9:26:1e:a3:51:10:da:d1:db:7b:67: 84:eb:08:1a:9b:09:1b:f0:6f:5f:c9:3f:f6:0a:10:6d:2c:64: 35:0d:fd:2c:43:55:05:92:f7:09:3e:eb:ee:de:ed:33:66:08: ff:3d:02:65:13:b4:e6:17:cd:1a:31:0b:9e:12:ae:02:dc:20: ab:2b:9c:4e:14:48:5c:b8:17:39:c7:01:b3:d6:b2:de:c3:cc: 36:76:68:96:d0:87:a9:1f:1c:d9:ab:9c:35:1e:ab:3a:4b:d6: a7:39:6d:5a:92:15:06:bd:70:50:53:c4:93:f9:55:c5:e8:ba: 6c:9e:ea:08:fc:66:bc:ff:7e:5b:11:96:e2:5d:c4:88:69:72: 7f:64:ee:2f:b6:71:5e:da:5b:f8:c5:80:3d:08:4c:4e:f5:50: 79:d7:cb:ee:11:c4:02:35:75:81:b6:e8:b1:13:8b:52:8d:db: 27:84:a3:06:4b:fb:c1:4e:01:f5:18:c0:18:23:5e:20:a1:ab: 75:3c:e0:89:d3:e5:72:40:79:63:7f:d6:c3:b3:fd:f7:56:ca: fd:94:7f:e2:1e:58:e0:6a:6c:df:01:a5:ef:04:b0:42:10:10: db:1b:b1:cf:6f:bb:e9:60:02:8f:44:72:8a:21:ea:ff:ba:96: 05:33:9d:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnbvWezG29TWe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NmI3M2YwYjAtZjAzNS00NWI2LThkZTktOTEyMmZhZjA4OTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXnGYfPzBaUNflcg9iipwiYPF6do6U16AyVT dpNHBH2+cBhWqDVOtSXC769VqlpkAyCws2l9e6qgLqsyc5WkpLeE9IkUsfAvGrSK 9wHZSbEIyqjg3zbRXd9WsTSKJ1THVjUbgx0Y1YGFgL8UHdlZ2mims3JwYfXaYiXT nBn8RAA9JbM4QQS2NGV6rLPTaizmPozmSqGxU9r3C4G/FzGK2GfQ+WWxAbZcz2MF fLbrMVPFqE6vjq8jMlE83dJ40ZgKXDgX7r3jkXpiZOZK/OXdCqXWe68NVovjDMoM n3C9W90SUMni5QsqJk3ZB8d3hgeCvSfPsJAPy+jdO/AC/RhdxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9RwEKm4ebncHlQRpizLx9E6y1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWMzYTdlZDMtYzRkZi0z YjgyLWE3OTUtN2YyYzQ1NGE2MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwl4I2Gzv/5Jh6jURDa0dt7Z4TrCBqbCRvwb1/JP/YKEG0sZDUN/SxD VQWS9wk+6+7e7TNmCP89AmUTtOYXzRoxC54SrgLcIKsrnE4USFy4FznHAbPWst7D zDZ2aJbQh6kfHNmrnDUeqzpL1qc5bVqSFQa9cFBTxJP5VcXoumye6gj8Zrz/flsR luJdxIhpcn9k7i+2cV7aW/jFgD0ITE71UHnXy+4RxAI1dYG26LETi1KN2yeEowZL +8FOAfUYwBgjXiChq3U84InT5XJAeWN/1sOz/fdWyv2Uf+IeWOBqbN8Bpe8EsEIQ ENsbsc9vu+lgAo9Ecooh6v+6lgUznWk= -----END CERTIFICATE-----Generated at Mon May 12 10:47:40 2025 by rpki-client