$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa File: 8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa (raw, json) Hash identifier: Rh6sNMXqCn65pEA52qdxBLzHHraU7VtLoKijiuimP40= Subject key identifier: A4:CB:AC:B6:C1:58:5F:C2:C7:DD:56:F5:CF:12:26:E1:C6:77:E4:0A Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584A1035484B91220B8B7846E300 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 22362 IP address blocks: 72.20.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:48:4b:91:22:0b:8b:78:46:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=9623a86e-4019-491a-bdb2-624310116cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ac:bb:96:56:df:b4:8c:9c:18:2f:47:16:20: 77:1b:ca:5d:7e:35:d5:57:b6:6d:05:a0:d9:8b:d0: 6f:5e:1c:b8:5c:6e:a1:6f:a5:f2:d5:58:18:f4:67: 66:71:5a:04:be:f4:e4:58:b9:fe:50:43:c2:30:75: 18:80:59:4c:5f:6b:35:92:32:f5:65:32:0e:f1:fe: 6f:8a:1f:cb:3a:69:65:cd:5e:eb:31:21:d9:cb:9c: 7a:0b:ae:dd:2f:8b:6a:27:7c:d6:a2:e3:b5:16:74: 99:73:4d:64:21:85:33:bb:b6:e9:83:35:80:76:7a: c5:9b:8e:8d:a5:4f:ed:c4:6a:08:03:c7:17:07:c1: 11:cd:88:27:e2:b3:83:b0:3d:c2:97:96:5a:71:5c: 50:2b:20:d8:33:f0:38:fe:c1:5b:0e:9c:5d:72:7b: c2:91:85:bf:4b:65:a7:c9:eb:6f:47:5d:6b:0e:1a: 57:16:33:5e:3d:05:74:4e:fa:bd:ff:1c:6b:c7:d3: ee:b5:0c:13:16:3e:8f:ad:20:fd:87:36:d3:a4:38: 33:54:1f:b1:21:16:12:3a:42:21:4f:5f:35:e9:f5: 49:8e:19:21:fb:57:41:22:22:4a:49:29:7c:37:45: b0:10:a5:8b:95:54:72:ee:84:fc:b1:4f:32:44:60: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CB:AC:B6:C1:58:5F:C2:C7:DD:56:F5:CF:12:26:E1:C6:77:E4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5f:99:4f:73:8c:74:52:ee:0e:6c:ff:ac:4b:16:4b:51:5b: 50:1d:61:49:aa:c8:36:51:fd:a5:60:42:dd:cd:48:e1:03:a5: 63:2a:43:c8:c1:58:c1:f1:88:22:e8:54:ef:da:7c:8f:ff:3b: e7:5e:20:fe:eb:96:da:c0:61:a9:f1:89:0d:ab:dd:d4:d3:bc: 20:b5:df:d6:d4:a2:ca:02:9a:86:9f:13:b2:be:66:ae:94:83: b2:b0:82:3b:6c:16:54:e1:ae:2e:88:78:86:94:b2:ea:4a:aa: da:ad:f5:5d:53:54:68:e4:62:cf:ec:0c:25:95:06:13:e5:66: 4a:1c:83:1c:04:4f:a9:d2:ed:9d:c9:78:d8:eb:8a:75:ac:1e: af:df:f6:91:3c:79:33:30:6c:9d:92:24:45:55:0e:6a:d6:ff: 57:22:05:80:ec:84:eb:ef:50:c0:e5:36:80:b8:e1:a6:6f:71: 83:9d:b8:01:ec:93:76:41:1f:8c:68:ba:96:9e:21:0e:1e:36: 15:61:fe:87:73:d9:4c:73:94:4a:c8:3a:eb:11:27:46:79:59: 70:f9:3c:d6:31:e4:01:fe:1d:19:c1:4a:49:ff:71:57:6d:a6: 20:f9:3c:7a:1b:14:d0:48:29:99:20:7d:45:1a:bf:7d:2e:97: 4e:ae:20:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUhLkSILi3hG4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk OTYyM2E4NmUtNDAxOS00OTFhLWJkYjItNjI0MzEwMTE2Y2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKy7llbftIycGC9HFiB3G8pdfjXVV7ZtBaDZ i9BvXhy4XG6hb6Xy1VgY9GdmcVoEvvTkWLn+UEPCMHUYgFlMX2s1kjL1ZTIO8f5v ih/LOmllzV7rMSHZy5x6C67dL4tqJ3zWouO1FnSZc01kIYUzu7bpgzWAdnrFm46N pU/txGoIA8cXB8ERzYgn4rODsD3Cl5ZacVxQKyDYM/A4/sFbDpxdcnvCkYW/S2Wn yetvR11rDhpXFjNePQV0Tvq9/xxrx9PutQwTFj6PrSD9hzbTpDgzVB+xIRYSOkIh T1816fVJjhkh+1dBIiJKSSl8N0WwEKWLlVRy7oT8sU8yRGBuFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTLrLbBWF/Cx91W9c8SJuHGd+QKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvODQ2NmM4YzQtMWVhNy0z YmM2LWI1YzMtNTZlZDZjMTYzZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFfmU9zjHRS7g5s/6xLFktRW1AdYUmqyDZR/aVgQt3NSOEDpWMqQ8jB WMHxiCLoVO/afI//O+deIP7rltrAYanxiQ2r3dTTvCC139bUosoCmoafE7K+Zq6U g7KwgjtsFlThri6IeIaUsupKqtqt9V1TVGjkYs/sDCWVBhPlZkocgxwET6nS7Z3J eNjrinWsHq/f9pE8eTMwbJ2SJEVVDmrW/1ciBYDshOvvUMDlNoC44aZvcYOduAHs k3ZBH4xoupaeIQ4eNhVh/odz2UxzlErIOusRJ0Z5WXD5PNYx5AH+HRnBSkn/cVdt piD5PHobFNBIKZkgfUUav30ul06uIGE= -----END CERTIFICATE-----Generated at Mon Jun 30 18:21:02 2025 by rpki-client