$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa File: e15131cc-650e-3c36-9991-f449603d4fc4.roa (raw, json) Hash identifier: qW+TabROlx0eNFi9ayix59dmTqcxwv0Nb9uR70f3DKA= Subject key identifier: C9:70:B9:23:8F:58:F8:A1:77:BB:7A:8C:77:EE:26:3C:8D:82:E0:1C Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285849C0A4ECECA7B0A3DEFE9B4C80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 21547 IP address blocks: 72.12.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ec:ec:a7:b0:a3:de:fe:9b:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=2494890a-173c-4164-a61b-3c087dfaee56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:e0:57:61:69:cf:e4:cb:48:e5:12:3a:a7: 86:e3:04:03:c0:a5:0b:4b:dc:0a:76:57:c2:04:a9: 07:0f:ed:6e:58:a2:ff:fd:7f:ed:87:50:98:96:e6: fe:84:36:d8:3e:67:a3:24:ca:9c:55:5a:d8:b7:09: 5a:a3:51:06:14:cd:10:14:e3:1c:ad:a4:c7:61:cd: 86:7a:db:0e:0c:84:f4:b2:78:d3:e0:ad:b1:35:c0: 8f:c5:d2:d3:96:ef:ee:7e:01:63:d9:b0:69:3d:ff: b0:9f:39:5e:d5:4b:ce:44:1c:24:c7:73:48:2e:d4: a1:ba:58:aa:35:16:9e:84:9d:9c:f6:45:32:9e:ad: 62:57:0c:5d:98:62:53:2c:3f:41:76:b5:b9:e3:80: 85:63:3e:a1:5c:19:05:94:ab:b5:51:3d:27:e3:51: 86:a2:99:40:ae:3a:f1:6d:0f:6a:e0:cd:d4:e7:94: 93:41:28:e4:11:6c:1e:67:70:f5:97:06:5f:66:62: 90:47:16:0b:df:82:a6:66:a8:fb:bf:84:15:2b:4c: 6f:04:5f:54:d5:07:ff:3e:71:c7:2b:4b:4f:0b:a9: 1b:78:88:56:a2:8c:c9:6e:47:43:64:5e:3a:ce:d1: 09:f4:f7:b4:8b:89:2c:87:5d:dd:64:f7:0c:8e:20: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:70:B9:23:8F:58:F8:A1:77:BB:7A:8C:77:EE:26:3C:8D:82:E0:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 72.12.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a6:e8:36:93:3f:42:9b:48:66:72:3d:1e:a4:7a:aa:ea:d8: 0a:a5:30:c4:53:5d:71:bf:07:46:63:27:9a:0f:03:1d:99:1c: 32:c0:0e:50:ca:80:b6:82:a1:8c:7e:b4:f0:f0:32:de:5b:73: ca:2d:cd:40:68:39:67:7c:01:75:8f:68:24:67:2a:8d:73:65: 55:71:cb:32:83:f7:8b:13:45:26:00:9b:f3:31:41:fb:e2:9c: 3a:f0:84:1b:41:29:75:4d:16:45:1c:42:e3:ce:e2:c6:e5:d3: be:f3:2a:96:3a:53:f5:c9:38:ef:40:1a:93:89:0c:0a:65:cf: b7:d2:12:95:40:3e:53:7a:7d:4a:55:29:7f:af:6c:24:5a:17: 23:3b:96:2a:1b:dc:e4:ff:cd:d6:fb:a5:29:52:97:80:d7:33: 5c:ce:0d:50:c3:95:5a:ea:ff:e7:37:3c:79:91:c9:81:32:51: 1c:5d:5d:56:4c:da:a7:d3:81:d4:f9:cf:1d:37:05:75:73:a0: 39:89:88:08:0d:dc:25:08:3e:e0:82:25:28:22:6b:7b:92:aa: b7:2d:98:9c:e4:54:ba:a3:69:48:6c:e1:70:8c:d1:da:f5:bb: 47:8b:8b:78:94:47:6b:42:a6:d1:88:c7:28:3c:92:02:ba:7e: f5:85:4d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOzsp7Cj3v6bTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MjQ5NDg5MGEtMTczYy00MTY0LWE2MWItM2MwODdkZmFlZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfjgV2Fpz+TLSOUSOqeG4wQDwKULS9wKdlfC BKkHD+1uWKL//X/th1CYlub+hDbYPmejJMqcVVrYtwlao1EGFM0QFOMcraTHYc2G etsODIT0snjT4K2xNcCPxdLTlu/ufgFj2bBpPf+wnzle1UvORBwkx3NILtShuliq NRaehJ2c9kUynq1iVwxdmGJTLD9BdrW544CFYz6hXBkFlKu1UT0n41GGoplArjrx bQ9q4M3U55STQSjkEWweZ3D1lwZfZmKQRxYL34KmZqj7v4QVK0xvBF9U1Qf/PnHH K0tPC6kbeIhWoozJbkdDZF46ztEJ9Pe0i4ksh13dZPcMjiCLGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlwuSOPWPihd7t6jHfuJjyNguAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZTE1MTMxY2MtNjUwZS0z YzM2LTk5OTEtZjQ0OTYwM2Q0ZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmm6DaTP0KbSGZyPR6keqrq2AqlMMRTXXG/B0ZjJ5oPAx2ZHDLADlDK gLaCoYx+tPDwMt5bc8otzUBoOWd8AXWPaCRnKo1zZVVxyzKD94sTRSYAm/MxQfvi nDrwhBtBKXVNFkUcQuPO4sbl077zKpY6U/XJOO9AGpOJDAplz7fSEpVAPlN6fUpV KX+vbCRaFyM7liob3OT/zdb7pSlSl4DXM1zODVDDlVrq/+c3PHmRyYEyURxdXVZM 2qfTgdT5zx03BXVzoDmJiAgN3CUIPuCCJSgia3uSqrctmJzkVLqjaUhs4XCM0dr1 u0eLi3iUR2tCptGIxyg8kgK6fvWFTVs= -----END CERTIFICATE-----Generated at Sat May 10 22:01:38 2025 by rpki-client