$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/a72132db-d78f-356a-8864-94bcb97cca83.roa File: a72132db-d78f-356a-8864-94bcb97cca83.roa (raw, json) Hash identifier: GLHGy9u+f+ES5Q6Uj6SMWqBq+ZT2DntC6mlK8Xmqr4M= Subject key identifier: 66:10:B9:3D:B8:C4:3D:93:3E:D7:1E:86:04:00:8F:48:72:88:4E:1D Certificate issuer: /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea Certificate serial: 010D0C9F432858498769BA9D97AA4626C8799080 Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/a72132db-d78f-356a-8864-94bcb97cca83.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 10753 IP address blocks: 66.128.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ba:9d:97:aa:46:26:c8:79:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=813d231f-2364-452c-9b0b-06431fe08c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:ee:76:3f:25:3a:9c:f5:fd:67:8f:32:13: 45:8e:94:a6:1e:9e:96:2c:85:53:7b:88:a5:d1:e1: ff:bc:44:53:ec:f2:23:82:fc:b5:cf:8f:83:20:1f: f2:2f:f3:94:f3:4e:fe:3c:a1:12:46:57:44:bc:52: a8:e9:d9:a6:1e:39:7d:4d:a0:d8:93:6e:34:55:3e: 73:12:fa:0d:5e:8b:85:2a:2a:00:0a:33:c4:fc:82: 7a:a0:88:83:fb:d7:26:2c:a9:3d:86:a5:75:86:c4: 2a:54:dd:26:8c:87:b0:8b:b4:c9:c6:0d:5f:69:ce: f9:92:9a:8a:74:ee:62:7d:0f:7b:25:e2:5a:12:42: 5b:70:cf:e4:eb:bc:3f:a0:5e:b9:fd:5d:cf:bb:3b: 2d:a6:2d:4d:62:64:b8:96:9c:b1:f4:c9:94:1b:eb: 6c:e7:34:08:25:ed:87:45:c3:16:06:42:02:ee:9b: ce:50:80:0f:dd:06:5e:d0:cd:3e:6c:fe:5f:8c:fb: 19:b9:01:6a:14:62:e7:46:60:cd:a7:c1:73:9a:01: e5:e2:ab:76:d4:66:3b:52:4d:3f:1e:ef:ea:d2:d3: 75:23:de:56:16:21:a6:d6:9a:0e:34:f0:cb:02:07: b5:e1:dd:6e:71:0f:cf:7e:e3:76:79:7e:b3:56:99: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:10:B9:3D:B8:C4:3D:93:3E:D7:1E:86:04:00:8F:48:72:88:4E:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/a72132db-d78f-356a-8864-94bcb97cca83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl X509v3 Authority Key Identifier: keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer sbgp-ipAddrBlock: critical IPv4: 66.128.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:83:04:24:f9:24:6f:f3:34:a5:e8:4c:a8:cf:bf:24:3c:70: 84:0b:83:23:ec:c7:4a:42:17:3b:df:70:31:db:8e:49:4c:2c: c9:70:a0:f8:d6:81:6c:a9:43:26:0d:0c:48:67:86:24:6c:42: f1:00:f2:4a:c6:08:91:90:41:1a:4f:3a:89:7d:97:33:92:9b: f1:1a:f5:13:83:27:2b:42:3c:1f:a9:11:c2:e3:6c:04:b7:18: 38:b3:0b:b7:34:c9:e9:6b:02:9a:45:2a:51:21:14:3d:f2:4e: aa:b8:6a:f3:92:61:29:db:06:ff:77:73:92:fb:3b:7f:b3:2a: 4c:66:8c:14:e6:ca:a1:69:2c:80:0f:8a:3d:f2:2e:2b:7a:d1: d0:a1:27:77:29:c5:f8:b3:7f:be:e5:ad:c0:4b:32:b3:bf:f9: f7:ec:d3:ec:48:f2:e9:ed:04:5c:94:ef:56:84:fa:ff:1a:b2: 77:b6:3c:8f:bd:f1:d7:8a:c5:44:20:40:63:4f:a8:47:52:d6: 43:ae:e1:b6:4f:01:a5:e4:21:6f:c7:fe:9a:a5:4b:d6:eb:1f: 33:cf:70:a5:52:9b:8e:27:ff:de:fd:c4:6b:74:13:fe:de:bb: c8:92:d4:65:70:04:3e:86:de:c4:d0:f5:a6:33:01:72:0c:43: 30:ee:ce:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabqdl6pGJsh5kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJhMzkyOTMtNWRkYi00Y2MwLTgzNTMtMmIyNThlMmU3 OGVhMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ODEzZDIzMWYtMjM2NC00NTJjLTliMGItMDY0MzFmZTA4YzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDTudj8lOpz1/WePMhNFjpSmHp6WLIVTe4il 0eH/vERT7PIjgvy1z4+DIB/yL/OU807+PKESRldEvFKo6dmmHjl9TaDYk240VT5z EvoNXouFKioACjPE/IJ6oIiD+9cmLKk9hqV1hsQqVN0mjIewi7TJxg1fac75kpqK dO5ifQ97JeJaEkJbcM/k67w/oF65/V3Puzstpi1NYmS4lpyx9MmUG+ts5zQIJe2H RcMWBkIC7pvOUIAP3QZe0M0+bP5fjPsZuQFqFGLnRmDNp8FzmgHl4qt21GY7Uk0/ Hu/q0tN1I95WFiGm1poONPDLAge14d1ucQ/PfuN2eX6zVplV5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYQuT24xD2TPtcehgQAj0hyiE4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MmEz OTI5My01ZGRiLTRjYzAtODM1My0yYjI1OGUyZTc4ZWEvYTcyMTMyZGItZDc4Zi0z NTZhLTg4NjQtOTRiY2I5N2NjYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzJhMzkyOTMtNWRkYi00Y2MwLTgz NTMtMmIyNThlMmU3OGVhLzcyYTM5MjkzLTVkZGItNGNjMC04MzUzLTJiMjU4ZTJl NzhlYS5jcmwwHwYDVR0jBBgwFoAUVOojygUguMpCgH0pZ/g+ofnu28MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MmEzOTI5My01ZGRiLTRjYzAtODM1My0yYjI1 OGUyZTc4ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQoDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWDBCT5JG/zNKXoTKjPvyQ8cIQLgyPsx0pCFzvfcDHbjklMLMlwoPjW gWypQyYNDEhnhiRsQvEA8krGCJGQQRpPOol9lzOSm/Ea9RODJytCPB+pEcLjbAS3 GDizC7c0yelrAppFKlEhFD3yTqq4avOSYSnbBv93c5L7O3+zKkxmjBTmyqFpLIAP ij3yLit60dChJ3cpxfizf77lrcBLMrO/+ffs0+xI8untBFyU71aE+v8asne2PI+9 8deKxUQgQGNPqEdS1kOu4bZPAaXkIW/H/pqlS9brHzPPcKVSm44n/979xGt0E/7e u8iS1GVwBD6G3sTQ9aYzAXIMQzDuzvA= -----END CERTIFICATE-----Generated at Fri May 9 07:26:22 2025 by rpki-client