$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa File: 0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa (raw, json) Hash identifier: 3cwsCIqrgF46pp9cX9VtLGQ2Ia0nVkdjwQ1ElSm9tLM= Subject key identifier: A6:8C:B0:C8:64:AF:16:AB:9D:B7:D8:24:87:BA:CF:93:5C:3C:A8:F2 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858499AF48716DC5BB6E5A780E580 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 394437 IP address blocks: 72.20.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:87:16:dc:5b:b6:e5:a7:80:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=ba60b3b8-ea3c-4885-ad14-515153964e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:ff:f0:99:51:a6:d9:b5:67:93:88:fb:8e: dd:40:30:01:ad:29:c2:7c:92:d5:b5:5f:77:6a:cc: a7:87:42:5c:aa:6a:3f:33:62:58:ba:8a:93:46:fa: f6:a9:77:b1:23:c2:7a:47:2e:c5:2f:f7:93:16:99: 66:b6:00:d6:c9:43:00:64:04:51:c8:89:ba:38:7d: f0:98:dd:03:b5:95:8d:8c:46:3f:fa:a1:8e:a2:95: 19:41:95:4d:cf:2d:ee:08:c1:b8:4a:51:4e:10:56: ea:05:a2:d4:e0:bd:5c:8f:52:38:70:02:9a:ec:40: f3:4d:6a:27:bf:36:b4:19:21:e9:4f:56:dc:d2:b0: 9f:7b:ce:8a:22:01:87:23:5b:3b:cf:3a:5f:b1:bd: 56:1f:47:c9:b8:15:e7:97:3f:38:0e:55:82:e2:6c: 78:f6:7a:ae:10:a4:be:b4:43:64:c7:4b:68:05:b6: 11:6e:02:d8:56:6f:cd:c7:44:56:14:9d:c8:16:e9: db:28:f1:ee:23:55:4a:f4:dc:2a:92:a1:ec:d3:2a: 4e:86:7f:c2:0f:b8:fc:ea:66:dd:6c:00:22:09:e2: 59:e3:92:ef:4e:60:91:f4:5f:58:3c:8f:1e:6b:cd: bd:da:3f:ff:4d:12:63:14:7e:55:74:ab:95:ca:1d: ba:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8C:B0:C8:64:AF:16:AB:9D:B7:D8:24:87:BA:CF:93:5C:3C:A8:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f7:b2:97:2c:32:de:ad:b9:e2:1b:c3:9d:b2:3c:79:2a:da: a6:e1:27:4a:09:a4:31:e2:e6:99:87:fa:29:f7:58:dd:2b:82: 55:6a:49:66:d3:9c:31:ea:20:4c:5d:c4:2b:af:16:55:ff:87: 45:66:7a:99:c1:29:c0:df:14:ac:2a:80:d2:e9:d2:11:cf:d9: 65:d6:af:1b:cb:56:1b:9a:18:98:dd:4f:26:dd:5d:59:31:f4: eb:bd:43:c0:9a:90:7b:8b:cf:c5:f5:67:8f:fa:f5:95:a1:5a: 8c:38:e4:39:8a:95:2f:11:c6:a8:9b:84:48:a3:98:31:02:da: 47:0e:89:7a:43:5f:d2:2d:5d:4f:fd:95:30:4c:1d:70:15:9d: e5:63:40:3b:89:82:8f:45:8a:89:0b:21:5c:16:af:dd:30:06: 31:f1:c6:0b:88:2f:a0:82:2a:e9:a1:bc:e4:d0:7c:06:d8:95: c3:fe:a4:7d:c1:a8:96:51:a4:aa:cd:4f:0d:df:04:cd:0c:29: b9:b5:d9:d1:1e:10:77:2a:ed:ed:ec:3f:18:b8:89:f1:f3:3b: 0c:be:ca:1c:35:f6:bd:a6:b4:d0:46:73:93:31:9e:f6:9a:ad: 3b:69:1c:7f:3f:6c:3a:14:f4:ba:39:fe:eb:4b:7c:f6:07:80: 6b:05:f5:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IcW3Fu25aeA5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YmE2MGIzYjgtZWEzYy00ODg1LWFkMTQtNTE1MTUzOTY0ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvP/8JlRptm1Z5OI+47dQDABrSnCfJLVtV93 asynh0Jcqmo/M2JYuoqTRvr2qXexI8J6Ry7FL/eTFplmtgDWyUMAZARRyIm6OH3w mN0DtZWNjEY/+qGOopUZQZVNzy3uCMG4SlFOEFbqBaLU4L1cj1I4cAKa7EDzTWon vza0GSHpT1bc0rCfe86KIgGHI1s7zzpfsb1WH0fJuBXnlz84DlWC4mx49nquEKS+ tENkx0toBbYRbgLYVm/Nx0RWFJ3IFunbKPHuI1VK9NwqkqHs0ypOhn/CD7j86mbd bAAiCeJZ45LvTmCR9F9YPI8ea8292j//TRJjFH5VdKuVyh262QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaMsMhkrxarnbfYJIe6z5NcPKjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMGFjNTY5OTgtYWIyMS0z ZjRiLWFkZjctODVkNTE2YzFhZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIH3spcsMt6tueIbw52yPHkq2qbhJ0oJpDHi5pmH+in3WN0rglVqSWbT nDHqIExdxCuvFlX/h0VmepnBKcDfFKwqgNLp0hHP2WXWrxvLVhuaGJjdTybdXVkx 9Ou9Q8CakHuLz8X1Z4/69ZWhWow45DmKlS8RxqibhEijmDEC2kcOiXpDX9ItXU/9 lTBMHXAVneVjQDuJgo9FiokLIVwWr90wBjHxxguIL6CCKumhvOTQfAbYlcP+pH3B qJZRpKrNTw3fBM0MKbm12dEeEHcq7e3sPxi4ifHzOwy+yhw19r2mtNBGc5Mxnvaa rTtpHH8/bDoU9Lo5/utLfPYHgGsF9Rw= -----END CERTIFICATE-----Generated at Mon May 12 00:17:09 2025 by rpki-client