$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dde48ff7-06fd-3836-9537-e8e3ab91f63b.roa File: dde48ff7-06fd-3836-9537-e8e3ab91f63b.roa (raw, json) Hash identifier: djRj4uFDAVV7D431Hj1fbIe7Yyv+dRSuXB0rsUEipXE= Subject key identifier: C1:D0:00:AC:87:35:E5:4F:50:C3:9E:59:DF:30:44:28:C4:2E:C5:7A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849BC74B16FDB709B8030734740 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dde48ff7-06fd-3836-9537-e8e3ab91f63b.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 6079 IP address blocks: 72.25.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:b1:6f:db:70:9b:80:30:73:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=fea302f3-f0e0-41ec-9b1d-1b32ef87c58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:26:a5:a8:fd:07:68:a0:77:05:76:5e:69: 96:19:c9:ba:cf:f5:97:d5:6d:1f:7a:aa:be:0f:8f: 7d:c7:05:4f:f2:cd:95:bb:54:f1:16:c1:60:76:eb: b9:59:9e:c1:99:6d:85:a3:97:ea:dd:7b:2b:a5:59: 9f:4b:83:40:73:a1:47:02:bb:3b:a3:7e:da:f8:56: 5a:dd:ff:46:98:87:23:43:30:41:a6:fe:f1:67:54: f8:94:e8:27:85:ec:d7:c7:a4:39:e7:1f:93:37:f8: 0d:6d:b3:2d:42:0f:47:ef:8c:04:47:1e:95:28:1b: 2f:6e:a8:c0:8d:de:02:13:d6:8b:2e:5f:5e:74:77: be:ad:9e:b8:ba:b1:29:93:55:a5:86:cb:9b:ae:3b: f4:7d:c1:51:35:e3:05:68:9d:94:61:bf:97:aa:c7: 08:0f:e2:9e:a9:62:27:4c:f1:cb:fb:59:98:c4:9d: 86:be:fd:5b:67:ef:fc:8b:d2:75:43:a6:3f:97:5d: 40:96:e9:00:95:6a:20:02:49:da:04:31:58:4c:d1: 6d:a5:ab:52:e0:ce:f9:a8:55:5a:af:f2:e0:63:b8: 38:ba:dd:71:1a:e0:b8:02:86:68:d7:c9:2d:9c:4b: 7e:58:5b:eb:47:37:52:7e:89:f5:68:78:1c:ea:ee: 61:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D0:00:AC:87:35:E5:4F:50:C3:9E:59:DF:30:44:28:C4:2E:C5:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dde48ff7-06fd-3836-9537-e8e3ab91f63b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 72.25.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:94:ea:91:b4:da:a2:8f:66:da:39:3a:8b:f4:32:80:d1:1b: 81:f0:74:2c:33:ee:c9:74:a0:2f:94:e5:51:5d:4e:7e:1d:b9: f9:cc:20:88:ca:7f:c3:8c:e1:b6:74:cc:5d:3f:8c:4b:90:26: 9d:6d:77:70:f8:5e:17:92:80:7b:00:a1:fd:06:d7:e8:8f:08: 53:16:c7:9b:0b:16:e0:e6:0c:fb:c9:b2:75:22:4b:9f:c4:61: 0c:50:6d:84:ae:5c:b3:31:ce:db:6d:97:8f:16:3f:97:86:4a: 3c:ce:80:69:59:38:b1:3b:bd:0e:02:1f:84:5a:f7:b6:4e:0f: 9d:e0:e7:9d:9f:c1:2f:50:fa:e4:c0:f8:a8:ed:6b:13:dd:9b: 54:f8:19:39:61:16:e2:5d:0f:20:f0:9f:5e:81:f7:d4:76:c1: a4:b7:c8:00:13:72:66:15:4e:70:0a:26:c8:f9:b6:12:15:95: 9b:65:58:ea:ef:b3:a5:3c:cc:23:61:0e:d5:18:15:ba:fc:7c: 28:be:32:97:5e:1f:83:78:a0:1e:a6:75:d7:ee:c4:7e:26:1f: b2:4d:4e:cc:48:a0:95:6b:92:d1:ee:0a:a0:b2:3a:08:86:2c: 25:9f:53:5c:90:e1:e6:43:1e:d5:b7:12:cd:be:3e:e5:24:88: a7:c9:5c:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dLFv23CbgDBzR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk ZmVhMzAyZjMtZjBlMC00MWVjLTliMWQtMWIzMmVmODdjNThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR0mpaj9B2igdwV2XmmWGcm6z/WX1W0feqq+ D499xwVP8s2Vu1TxFsFgduu5WZ7BmW2Fo5fq3XsrpVmfS4NAc6FHArs7o37a+FZa 3f9GmIcjQzBBpv7xZ1T4lOgnhezXx6Q55x+TN/gNbbMtQg9H74wERx6VKBsvbqjA jd4CE9aLLl9edHe+rZ64urEpk1Wlhsubrjv0fcFRNeMFaJ2UYb+XqscID+KeqWIn TPHL+1mYxJ2Gvv1bZ+/8i9J1Q6Y/l11AlukAlWogAknaBDFYTNFtpatS4M75qFVa r/LgY7g4ut1xGuC4AoZo18ktnEt+WFvrRzdSfon1aHgc6u5huwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHQAKyHNeVPUMOeWd8wRCjELsV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGRlNDhmZjctMDZmZC0z ODM2LTk1MzctZThlM2FiOTFmNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSBnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeU6pG02qKPZto5Oov0MoDRG4HwdCwz7sl0oC+U5VFdTn4dufnMIIjK f8OM4bZ0zF0/jEuQJp1td3D4XheSgHsAof0G1+iPCFMWx5sLFuDmDPvJsnUiS5/E YQxQbYSuXLMxztttl48WP5eGSjzOgGlZOLE7vQ4CH4Ra97ZOD53g552fwS9Q+uTA +KjtaxPdm1T4GTlhFuJdDyDwn16B99R2waS3yAATcmYVTnAKJsj5thIVlZtlWOrv s6U8zCNhDtUYFbr8fCi+MpdeH4N4oB6mddfuxH4mH7JNTsxIoJVrktHuCqCyOgiG LCWfU1yQ4eZDHtW3Es2+PuUkiKfJXDY= -----END CERTIFICATE-----Generated at Sun May 11 09:45:48 2025 by rpki-client