$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa File: 7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa (raw, json) Hash identifier: i4DLrXCwHaun0I4B3Oa6/Z4pNb2mAqyB3SjauuhVGec= Subject key identifier: B7:C8:C1:FC:37:03:52:AF:59:F4:29:E0:F4:7A:C9:2E:9C:00:35:AC Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858499AF487ABF88E39C88E2B6380 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 394437 IP address blocks: 72.20.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:87:ab:f8:8e:39:c8:8e:2b:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=404ff00b-edd4-4d15-83f1-8af2ece06489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:79:53:fd:9b:21:b8:50:25:4e:05:02:2a:a8: 2d:df:bf:96:d3:ab:ac:d2:8e:fc:e2:c7:8b:dd:9c: fe:87:c8:dd:ab:a7:46:a7:22:f2:d7:be:d1:2e:c3: 5d:af:4e:fd:23:1c:c1:c3:25:9c:38:7d:68:32:e9: 84:95:41:7a:87:a6:47:21:c7:5c:45:66:27:ce:96: 56:ad:ea:7c:12:20:b3:57:98:09:de:3b:38:3d:a9: 33:09:f9:87:a8:b0:43:a2:9d:69:52:7a:0a:94:0c: 00:f9:16:a9:94:64:7a:7c:00:b7:1f:69:e3:b2:c2: f8:29:63:43:1a:f3:db:93:ff:2e:03:8b:d2:86:4f: ad:7f:fb:be:c6:4e:80:f8:a2:a2:02:fc:9d:f8:4d: 89:fe:e4:9c:61:65:6c:f3:f9:ec:e1:7f:4b:bb:bd: 74:5c:e8:e2:06:65:5e:c1:76:25:21:86:11:2a:4f: b9:ef:c7:c5:2c:0c:e3:9f:ed:44:d2:b4:7a:9c:48: 28:e4:e3:63:b7:d9:8c:4b:b0:72:3e:90:5b:15:ed: af:41:04:5b:c8:59:66:67:fc:37:cb:bd:56:d3:bb: 97:af:8e:ec:50:5d:8b:9d:97:ab:2e:2b:e0:a4:05: df:09:41:45:fb:a2:12:bb:af:a1:62:f8:bd:f5:c9: dd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C8:C1:FC:37:03:52:AF:59:F4:29:E0:F4:7A:C9:2E:9C:00:35:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ba:ea:ed:31:f8:0d:be:4d:05:73:16:fc:18:93:f3:c3:61: 22:15:cf:8b:e9:75:80:00:89:68:90:f3:4b:86:c4:a5:ef:f3: 45:30:54:a1:6e:ac:66:d7:70:d9:3c:cf:56:d1:2b:83:06:f1: fb:ef:b8:ef:65:5b:c2:42:b1:cf:36:50:60:07:a9:69:81:61: 34:07:6d:d9:cb:84:7d:9b:bf:d6:48:e1:8d:c9:a9:69:68:e7: 95:b5:01:8f:f5:17:8d:05:f6:98:9d:87:a6:85:4c:f2:53:76: 85:ba:af:b5:df:be:7a:cd:64:46:00:da:48:bb:50:75:25:c0: b8:57:ec:37:b6:c2:b7:2f:64:5e:f2:8c:6c:a1:99:d4:b0:97: 8d:58:75:61:ac:50:b1:4f:40:54:97:f4:74:3f:e7:35:a8:7b: 3e:b5:88:60:13:d7:cb:38:24:9d:10:03:4b:32:81:00:8f:76: 5e:58:01:78:38:11:d5:90:8d:70:0d:bd:3c:9f:cf:01:38:b2: c4:05:c5:de:10:5a:36:a2:d0:ec:eb:2c:48:1e:05:13:51:02: 00:b2:5a:b8:2a:e0:83:bf:2f:8e:e7:29:42:04:6d:f5:85:c3: e4:fe:7b:c4:d5:0a:9d:c6:ad:87:80:cc:38:c4:02:8d:8e:32: 22:75:ec:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Ier+I45yI4rY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NDA0ZmYwMGItZWRkNC00ZDE1LTgzZjEtOGFmMmVjZTA2NDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXlT/ZshuFAlTgUCKqgt37+W06us0o784seL 3Zz+h8jdq6dGpyLy177RLsNdr079IxzBwyWcOH1oMumElUF6h6ZHIcdcRWYnzpZW rep8EiCzV5gJ3js4PakzCfmHqLBDop1pUnoKlAwA+RaplGR6fAC3H2njssL4KWND GvPbk/8uA4vShk+tf/u+xk6A+KKiAvyd+E2J/uScYWVs8/ns4X9Lu710XOjiBmVe wXYlIYYRKk+578fFLAzjn+1E0rR6nEgo5ONjt9mMS7ByPpBbFe2vQQRbyFlmZ/w3 y71W07uXr47sUF2LnZerLivgpAXfCUFF+6ISu6+hYvi99cndLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfIwfw3A1KvWfQp4PR6yS6cADWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvN2VjYjhlNWQtYjhmMy0z OTIyLWE1MjYtZGUzNzFlY2Y0ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK66u0x+A2+TQVzFvwYk/PDYSIVz4vpdYAAiWiQ80uGxKXv80UwVKFu rGbXcNk8z1bRK4MG8fvvuO9lW8JCsc82UGAHqWmBYTQHbdnLhH2bv9ZI4Y3JqWlo 55W1AY/1F40F9pidh6aFTPJTdoW6r7XfvnrNZEYA2ki7UHUlwLhX7De2wrcvZF7y jGyhmdSwl41YdWGsULFPQFSX9HQ/5zWoez61iGAT18s4JJ0QA0sygQCPdl5YAXg4 EdWQjXANvTyfzwE4ssQFxd4QWjai0OzrLEgeBRNRAgCyWrgq4IO/L47nKUIEbfWF w+T+e8TVCp3GrYeAzDjEAo2OMiJ17Eo= -----END CERTIFICATE-----Generated at Mon May 12 01:27:26 2025 by rpki-client