$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/7830e1c4-4f1b-3b13-9ab1-889c491a0ace.roa File: 7830e1c4-4f1b-3b13-9ab1-889c491a0ace.roa (raw, json) Hash identifier: L2KUmfNmsonpxfX7sjkF3ATYd2OcnzCfotJV8DdzXjE= Subject key identifier: 42:99:D9:95:5A:EC:AF:58:2C:B4:90:8D:09:54:01:06:C1:4B:0B:29 Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Certificate serial: 010D0C9F43285849E22538B199490272C12A6260 Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/7830e1c4-4f1b-3b13-9ab1-889c491a0ace.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 395425 IP address blocks: 72.42.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:38:b1:99:49:02:72:c1:2a:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=f3be808f-3819-4447-b466-0f914edf73ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:24:11:7c:9a:5b:29:33:9c:5f:9f:b3:6a: 04:97:30:8e:79:00:c5:fb:d8:7f:19:4c:dc:f0:99: 76:67:03:75:e4:48:36:93:a5:73:c9:20:01:59:9a: c6:31:43:66:e0:2a:34:6d:ad:62:a2:89:b0:08:52: 59:6f:6b:c0:cb:f9:1b:a0:52:06:7e:22:44:e2:79: 48:d4:9a:a2:48:86:75:92:51:d1:8f:83:73:e6:a5: 8a:bc:f2:60:11:c2:9a:21:de:dc:95:53:c0:c3:11: e5:b9:a5:b7:bc:ea:2f:9c:58:75:b8:0f:5a:00:23: 10:b2:b4:68:8b:bf:ed:40:b0:65:b0:6b:3d:9f:d2: e8:fd:69:e0:43:1a:f4:aa:08:0e:dd:fb:a1:6b:32: a4:43:64:5c:20:bf:53:d0:72:fe:cf:3f:28:67:56: 2e:d7:18:7a:5c:97:bc:06:83:9a:ef:10:aa:30:ab: a9:95:f3:61:d4:6c:5b:d5:8a:5a:21:b0:67:77:86: 46:fb:41:b2:01:dd:1f:b5:b2:83:e3:a7:b3:df:4e: 52:be:7e:80:cd:7c:c8:a5:a1:79:53:83:42:83:c6: 15:83:42:ce:c7:40:79:45:b5:25:97:26:31:a8:09: fa:89:0d:de:9d:8f:61:80:7d:d7:09:1d:b4:23:bb: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:99:D9:95:5A:EC:AF:58:2C:B4:90:8D:09:54:01:06:C1:4B:0B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/7830e1c4-4f1b-3b13-9ab1-889c491a0ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl X509v3 Authority Key Identifier: keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer sbgp-ipAddrBlock: critical IPv4: 72.42.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f7:01:bd:42:a4:7a:53:c4:e3:d3:97:6a:ac:be:14:13:15: 74:ce:69:5b:c2:e3:e4:e3:c9:73:ef:91:2d:06:45:5f:fc:cb: 0f:9a:ee:7f:56:33:fe:af:a2:f9:d0:d1:21:ac:2b:5b:8a:0d: 9a:dd:ea:b6:a0:fb:5c:1f:23:68:26:08:07:77:a9:b7:25:d0: cc:91:f9:0b:24:64:5f:ed:98:e0:8b:79:05:9d:98:8a:7e:19: 8a:02:0d:ac:ff:6b:db:35:74:f9:a2:ef:20:69:c9:a2:de:39: f1:74:c6:5d:b2:45:3c:cd:c4:71:82:a6:a1:51:6a:82:b7:05: dd:96:ed:46:a0:8d:7a:bf:3f:36:4c:35:04:14:9d:5b:9e:6f: f8:20:a4:12:0a:e1:d6:27:04:4f:07:18:de:e2:0f:1a:05:18: d9:fb:a7:49:9e:ac:e3:0d:7e:51:7d:cb:45:77:1e:ad:79:d3: 7d:82:89:70:9d:e5:32:bb:9a:94:7f:83:21:38:06:09:59:3d: 02:e6:09:3f:5a:1c:d8:80:c6:ba:f2:aa:70:57:b0:c2:63:80: 6e:2f:7c:b4:eb:a0:2a:03:81:1d:4f:e9:fb:f0:e7:94:80:48: e2:6a:b0:ed:0a:d2:60:f2:74:cf:c3:49:34:61:53:af:83:0c: 5b:9b:d1:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTixmUkCcsEqYmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJl OTg0MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ZjNiZTgwOGYtMzgxOS00NDQ3LWI0NjYtMGY5MTRlZGY3M2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS8kEXyaWykznF+fs2oElzCOeQDF+9h/GUzc 8Jl2ZwN15Eg2k6VzySABWZrGMUNm4Co0ba1ioomwCFJZb2vAy/kboFIGfiJE4nlI 1JqiSIZ1klHRj4Nz5qWKvPJgEcKaId7clVPAwxHluaW3vOovnFh1uA9aACMQsrRo i7/tQLBlsGs9n9Lo/WngQxr0qggO3fuhazKkQ2RcIL9T0HL+zz8oZ1Yu1xh6XJe8 BoOa7xCqMKuplfNh1Gxb1YpaIbBnd4ZG+0GyAd0ftbKD46ez305Svn6AzXzIpaF5 U4NCg8YVg0LOx0B5RbUllyYxqAn6iQ3enY9hgH3XCR20I7s76QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKZ2ZVa7K9YLLSQjQlUAQbBSwspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5 N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvNzgzMGUxYzQtNGYxYi0z YjEzLTlhYjEtODg5YzQ5MWEwYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWM2OTdjOWQtMzI1YS00NjBmLWFi MmYtOGNmNzFiMWJlOTg0L2VjNjk3YzlkLTMyNWEtNDYwZi1hYjJmLThjZjcxYjFi ZTk4NC5jcmwwHwYDVR0jBBgwFoAUEjvZdTKrj92cHFYpzjLx33slhhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3 MWIxYmU5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESCrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr3Ab1CpHpTxOPTl2qsvhQTFXTOaVvC4+TjyXPvkS0GRV/8yw+a7n9W M/6vovnQ0SGsK1uKDZrd6rag+1wfI2gmCAd3qbcl0MyR+QskZF/tmOCLeQWdmIp+ GYoCDaz/a9s1dPmi7yBpyaLeOfF0xl2yRTzNxHGCpqFRaoK3Bd2W7UagjXq/PzZM NQQUnVueb/ggpBIK4dYnBE8HGN7iDxoFGNn7p0merOMNflF9y0V3Hq15032CiXCd 5TK7mpR/gyE4BglZPQLmCT9aHNiAxrryqnBXsMJjgG4vfLTroCoDgR1P6fvw55SA SOJqsO0K0mDydM/DSTRhU6+DDFub0Uk= -----END CERTIFICATE-----Generated at Sun Jun 29 12:40:17 2025 by rpki-client