$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa File: 2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa (raw, json) Hash identifier: 1VvtFyayQJrmgGgn/2sAvd+GcDEo7rpA3nEDPlml1Ck= Subject key identifier: 74:FA:FA:02:2A:76:B8:DF:0F:8A:00:B4:B1:C3:90:70:7F:31:BE:79 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858499AF4876D0DE72863975935C0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 394437 IP address blocks: 72.20.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:87:6d:0d:e7:28:63:97:59:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=4cc507b8-a3c0-49be-b48b-c77c41c9b73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:0a:71:1b:fa:23:4c:69:8e:29:f0:9a:8c: 36:e1:c7:35:11:52:6a:aa:f0:7d:46:6a:a6:24:90: 99:88:6d:a6:e4:08:27:c5:4f:b7:cf:53:f2:6a:c6: d7:38:7e:67:77:7e:56:6c:17:46:15:ad:3e:a8:09: 39:6a:ce:73:23:c8:ae:15:cc:1a:00:59:da:9a:04: f1:7b:e4:46:18:c1:0f:99:5c:bd:c0:9b:90:92:5d: e0:b1:80:23:19:03:7b:9a:e0:f1:1b:be:bc:92:25: 2f:39:b9:d3:16:98:0d:7f:2d:37:73:81:ca:f0:d1: 48:73:71:cb:d2:26:57:77:39:22:34:e8:84:42:4e: 53:58:34:d0:f6:db:e5:9f:4e:55:b6:c4:84:d0:55: 9f:fb:d2:1d:46:e6:5c:2f:ff:36:6c:5b:f5:b9:3e: 25:b7:4a:e7:c9:6a:1c:c1:92:47:08:47:bd:0f:d2: a2:07:a0:b0:a4:84:66:d9:ed:6b:6c:3c:56:97:b2: 85:3a:0c:44:28:b8:dd:76:c6:7b:8a:1c:a2:b5:41: 34:b1:2d:47:b5:78:90:bd:84:00:eb:e5:e7:48:fb: 89:91:14:81:3f:90:c4:9b:f3:c5:5f:45:8a:bb:2f: 52:44:a8:98:49:d2:c8:22:04:a5:7c:09:98:14:00: 9a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FA:FA:02:2A:76:B8:DF:0F:8A:00:B4:B1:C3:90:70:7F:31:BE:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:67:6b:ad:e4:07:7b:83:dd:10:86:9c:c7:b3:d7:1e:01:77: db:6e:1b:2e:6f:61:0c:81:5b:9c:f1:25:da:27:4b:d0:d2:af: dd:47:c8:c3:e6:8c:ff:3d:ec:3f:1f:ca:7c:b8:2a:54:65:61: f7:ae:64:20:cc:4e:c0:68:b9:14:f3:a2:8e:24:a3:d2:af:cc: d3:9e:99:b4:1a:d0:a1:65:4a:eb:c0:e9:30:84:30:5a:56:47: f6:2c:ec:df:40:a9:66:15:e6:05:82:f5:a3:80:67:bc:bd:fd: 5f:c0:6e:80:12:cb:43:4b:6b:aa:df:66:25:9d:96:27:66:c4: 2d:90:59:c5:a0:a2:66:71:1d:70:c7:e7:e0:d8:dc:f7:eb:2d: 5b:df:fd:da:58:02:ae:69:b8:60:7e:ed:7d:b4:8c:5a:52:b1: f3:5d:e2:ec:ec:b7:83:d9:7b:dc:25:4a:ac:f5:6a:d7:13:84: d4:6d:b3:a1:bb:e7:a4:cc:bd:e1:36:b7:cf:ed:37:f3:da:07: 1f:0b:a0:7f:83:23:d0:d7:2d:c8:87:ac:a5:0f:45:22:a5:56: 2b:d5:23:50:17:85:e1:b3:ad:e4:b1:de:35:1b:96:5c:82:91: 1e:7c:56:23:e4:6f:c9:6d:12:81:e5:22:2a:0b:d6:9a:26:cd: 14:3b:08:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IdtDecoY5dZNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NGNjNTA3YjgtYTNjMC00OWJlLWI0OGItYzc3YzQxYzliNzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuQKcRv6I0xpjinwmow24cc1EVJqqvB9Rmqm JJCZiG2m5AgnxU+3z1PyasbXOH5nd35WbBdGFa0+qAk5as5zI8iuFcwaAFnamgTx e+RGGMEPmVy9wJuQkl3gsYAjGQN7muDxG768kiUvObnTFpgNfy03c4HK8NFIc3HL 0iZXdzkiNOiEQk5TWDTQ9tvln05VtsSE0FWf+9IdRuZcL/82bFv1uT4lt0rnyWoc wZJHCEe9D9KiB6CwpIRm2e1rbDxWl7KFOgxEKLjddsZ7ihyitUE0sS1HtXiQvYQA 6+XnSPuJkRSBP5DEm/PFX0WKuy9SRKiYSdLIIgSlfAmYFACapwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHT6+gIqdrjfD4oAtLHDkHB/Mb55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMmUwMDQwNGMtNmYwZS0z OTZjLWFkM2EtYzAwYWU3OGY3ZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1na63kB3uD3RCGnMez1x4Bd9tuGy5vYQyBW5zxJdonS9DSr91HyMPm jP897D8fyny4KlRlYfeuZCDMTsBouRTzoo4ko9KvzNOembQa0KFlSuvA6TCEMFpW R/Ys7N9AqWYV5gWC9aOAZ7y9/V/AboASy0NLa6rfZiWdlidmxC2QWcWgomZxHXDH 5+DY3PfrLVvf/dpYAq5puGB+7X20jFpSsfNd4uzst4PZe9wlSqz1atcThNRts6G7 56TMveE2t8/tN/PaBx8LoH+DI9DXLciHrKUPRSKlVivVI1AXheGzreSx3jUbllyC kR58ViPkb8ltEoHlIioL1pomzRQ7CNE= -----END CERTIFICATE-----Generated at Mon May 12 02:11:50 2025 by rpki-client