$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa File: 9b381475-2f37-3a66-a109-346ba5355fa0.roa (raw, json) Hash identifier: McjEUfIEaTrzfX+edH/cW3rexV1iEgjbYuGBO65kQvk= Subject key identifier: 3E:05:F1:3B:13:7F:43:A6:5E:C8:FB:CF:10:C1:DC:F9:A6:5D:AA:F1 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584A2C20229633A4F719C8686680 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 394437 IP address blocks: 72.20.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:22:96:33:a4:f7:19:c8:68:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=dc7bc7b4-7442-4fe3-bf1e-ed026acfba57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:29:b8:29:17:6d:9a:fe:97:49:89:37:6e:d7: 75:be:23:ee:b5:5b:57:f4:9a:7e:3d:e1:50:8f:8f: 7e:9d:ed:39:dc:79:5d:ce:e5:8c:43:f4:12:c8:ab: 05:f0:ef:6b:a7:c6:30:08:cf:fe:82:00:0d:10:f4: b9:8b:18:7a:1c:0e:3a:c9:1a:a0:95:44:e6:f9:0f: 8e:29:1f:db:4c:59:c4:60:6f:82:fe:f9:a1:0f:e8: 29:fa:ef:e1:30:d2:f1:32:7d:84:ed:02:6d:c0:7a: 58:bf:2a:c7:52:e9:74:67:1c:ab:d4:36:e6:b4:96: 23:b5:52:1f:16:8d:ef:f5:a5:28:29:bb:11:6f:1e: 66:e5:f8:c7:0b:f6:92:4e:d6:bf:ea:30:92:6e:67: ff:31:42:d1:32:56:cc:0b:de:fe:6e:44:a5:0b:9a: 06:97:b2:83:10:01:58:c7:18:8c:72:05:ed:02:6e: 7f:69:82:1a:83:2e:cf:06:e6:06:a3:0e:ac:90:db: 0c:27:9c:43:7b:b6:7a:1a:21:11:db:0f:8c:19:9a: 27:ca:1a:a1:4b:d3:9f:96:39:a0:b8:31:96:fd:86: f9:d6:e6:37:7a:65:e7:45:32:71:b6:1e:a6:39:65: 2e:2a:7b:dd:8e:fc:eb:36:8f:d6:5c:c2:df:90:e8: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:05:F1:3B:13:7F:43:A6:5E:C8:FB:CF:10:C1:DC:F9:A6:5D:AA:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:be:31:50:dc:c5:cc:d2:bd:c5:3b:f5:8e:4b:61:33:07:cd: 51:44:87:04:93:91:60:6c:a4:4a:42:d5:88:f9:30:a3:d9:83: 67:34:34:de:44:dd:33:01:90:39:77:be:90:61:c5:27:66:3a: c1:58:16:a3:16:1e:4e:a4:de:bb:1d:a5:16:53:ce:35:f3:2a: 8d:3e:6a:d1:cc:7b:5e:02:30:9e:58:d6:42:93:4a:e2:38:90: a5:1c:3f:46:25:86:90:42:86:ff:22:8f:41:c3:00:ec:b9:8f: c8:4e:af:63:df:fa:fd:d2:d6:2a:89:71:db:7b:5e:a4:3d:ca: 93:ba:e9:b0:53:a3:d9:b5:af:bc:d1:7c:77:58:df:ff:10:14: 5d:af:5d:81:6f:8b:46:a2:8a:04:fb:a4:e6:41:d1:55:5b:f4: 82:99:8e:7b:83:96:a9:b1:a8:c3:f8:db:2c:63:71:c2:96:49: 72:a0:33:5d:62:d4:74:f6:db:cf:6b:7d:81:cd:32:a1:63:d4: 25:a5:33:2f:97:fe:83:40:d7:29:be:fb:84:3b:e8:98:19:f4: 2c:3c:7a:73:ca:b8:ca:a4:c8:e9:31:dc:de:d0:6d:a0:6c:78: 1a:95:b5:1f:e8:58:73:13:0a:6c:71:06:d4:8a:7a:62:39:47: 6a:23:e0:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICKWM6T3GchoZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk ZGM3YmM3YjQtNzQ0Mi00ZmUzLWJmMWUtZWQwMjZhY2ZiYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSm4KRdtmv6XSYk3btd1viPutVtX9Jp+PeFQ j49+ne053HldzuWMQ/QSyKsF8O9rp8YwCM/+ggANEPS5ixh6HA46yRqglUTm+Q+O KR/bTFnEYG+C/vmhD+gp+u/hMNLxMn2E7QJtwHpYvyrHUul0Zxyr1DbmtJYjtVIf Fo3v9aUoKbsRbx5m5fjHC/aSTta/6jCSbmf/MULRMlbMC97+bkSlC5oGl7KDEAFY xxiMcgXtAm5/aYIagy7PBuYGow6skNsMJ5xDe7Z6GiER2w+MGZonyhqhS9Ofljmg uDGW/Yb51uY3emXnRTJxth6mOWUuKnvdjvzrNo/WXMLfkOhLxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4F8TsTf0OmXsj7zxDB3PmmXarxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvOWIzODE0NzUtMmYzNy0z YTY2LWExMDktMzQ2YmE1MzU1ZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu+MVDcxczSvcU79Y5LYTMHzVFEhwSTkWBspEpC1Yj5MKPZg2c0NN5E 3TMBkDl3vpBhxSdmOsFYFqMWHk6k3rsdpRZTzjXzKo0+atHMe14CMJ5Y1kKTSuI4 kKUcP0YlhpBChv8ij0HDAOy5j8hOr2Pf+v3S1iqJcdt7XqQ9ypO66bBTo9m1r7zR fHdY3/8QFF2vXYFvi0aiigT7pOZB0VVb9IKZjnuDlqmxqMP42yxjccKWSXKgM11i 1HT2289rfYHNMqFj1CWlMy+X/oNA1ym++4Q76JgZ9Cw8enPKuMqkyOkx3N7QbaBs eBqVtR/oWHMTCmxxBtSKemI5R2oj4Gc= -----END CERTIFICATE-----Generated at Tue Jul 1 08:57:19 2025 by rpki-client