$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa File: 0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa (raw, json) Hash identifier: wvYf6OH1v3GAAkA7NBcGdXd5vRd0baBbgxy4yquP4k4= Subject key identifier: 5B:9C:B4:7C:74:2A:DD:F4:97:7A:04:A9:DD:9F:64:D7:75:0E:72:C8 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F6EEFA33CB1C3EC6DDF70 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 33363 IP address blocks: 72.31.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:6e:ef:a3:3c:b1:c3:ec:6d:df:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=5f2c8967-2687-45b9-9368-2d2f9ff7f8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:17:93:7f:8e:cd:c6:e9:29:0c:a8:a1:50:63: 38:e6:a4:b2:da:4a:c0:d3:9e:75:09:d5:ca:b9:dc: d3:79:5c:63:2c:fe:ef:fb:23:65:c4:68:d0:b6:65: c9:d4:ec:5d:41:21:57:3a:0b:4a:42:84:a4:0b:a8: f7:6f:ce:59:c5:10:49:0c:3d:1b:3c:b5:24:21:cd: 6f:9e:07:89:53:3f:1a:4b:a8:8c:46:7e:57:7c:8b: 36:f6:ca:c4:9e:27:9c:11:7f:62:e5:ee:4c:61:e8: ac:6d:bc:a1:ab:36:b5:2c:52:fa:19:88:f3:ce:49: 5b:e4:0f:29:9c:92:7a:64:dd:f6:91:e5:ac:be:de: a7:98:2d:99:cb:00:dc:6b:30:a7:01:d0:6f:ce:d6: f3:aa:88:2a:c1:19:aa:54:f9:b0:6a:5c:41:99:31: 91:4f:18:fd:fe:b4:e1:f1:86:06:b1:a5:b0:46:2f: 3d:8b:43:80:53:6e:56:ab:75:5a:4e:0e:4f:d7:dc: 9b:a9:be:02:d9:13:e7:2b:8e:3a:66:f8:9a:03:96: b4:f7:ab:ff:f8:e1:4c:e8:14:fd:7d:29:cf:91:37: 66:40:d4:82:6f:3d:5c:fc:2c:1b:54:73:e9:fb:58: da:e1:9e:b8:43:2b:88:79:72:9a:41:5d:06:31:a4: 0f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9C:B4:7C:74:2A:DD:F4:97:7A:04:A9:DD:9F:64:D7:75:0E:72:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e4:68:45:93:4b:6b:d6:9e:f4:33:59:a6:18:7f:33:51:fe: 31:0a:fb:f7:1a:9c:a4:dd:86:08:72:ba:c9:6a:1c:3e:6c:43: 35:2c:78:3d:35:4b:36:2a:4e:b8:69:f9:30:78:3f:ff:30:b4: df:18:ba:5d:15:60:eb:9a:10:f4:43:e4:14:64:88:58:1b:b8: 52:8d:2e:42:5f:18:73:ae:5e:3f:39:3b:4d:f2:02:c8:af:38: c5:b1:a7:ec:50:6f:23:e5:16:8b:ca:b0:2e:44:3f:21:61:a0: b5:a0:66:a4:f7:3a:b0:fe:7c:ad:ab:04:bd:ee:7a:eb:40:58: 2e:de:26:d7:2a:91:f3:13:d8:d8:be:cd:08:bb:e4:a7:b0:c9: 35:6e:c8:28:51:4c:66:cc:3c:90:09:90:73:d3:7c:07:2c:eb: 3d:4e:21:5a:52:b1:a6:d0:82:c7:a1:5b:d4:ba:af:d1:6f:71: 14:00:67:3e:33:fe:a0:a0:07:97:37:11:fc:e0:27:08:3e:7b: 6f:6d:0b:a8:47:34:f0:91:a9:d4:f3:37:90:2e:5a:af:96:00: 90:f5:ef:a9:d4:48:e8:65:53:9f:2a:58:2f:71:42:86:0b:ac: e9:b0:50:2c:b4:29:7d:71:27:8e:33:16:e6:37:11:f7:30:0b: 9e:dd:07:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P27vozyxw+xt33AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NWYyYzg5NjctMjY4Ny00NWI5LTkzNjgtMmQyZjlmZjdmOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoheTf47NxukpDKihUGM45qSy2krA0551CdXK udzTeVxjLP7v+yNlxGjQtmXJ1OxdQSFXOgtKQoSkC6j3b85ZxRBJDD0bPLUkIc1v ngeJUz8aS6iMRn5XfIs29srEniecEX9i5e5MYeisbbyhqza1LFL6GYjzzklb5A8p nJJ6ZN32keWsvt6nmC2ZywDcazCnAdBvztbzqogqwRmqVPmwalxBmTGRTxj9/rTh 8YYGsaWwRi89i0OAU25Wq3VaTg5P19ybqb4C2RPnK446ZviaA5a096v/+OFM6BT9 fSnPkTdmQNSCbz1c/CwbVHPp+1ja4Z64QyuIeXKaQV0GMaQPwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuctHx0Kt30l3oEqd2fZNd1DnLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMGE1OTZlMjMtMGViYi0z YjBmLThiZWEtY2EwOTUzZjAwOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrkaEWTS2vWnvQzWaYYfzNR/jEK+/canKTdhghyuslqHD5sQzUseD01 SzYqTrhp+TB4P/8wtN8Yul0VYOuaEPRD5BRkiFgbuFKNLkJfGHOuXj85O03yAsiv OMWxp+xQbyPlFovKsC5EPyFhoLWgZqT3OrD+fK2rBL3ueutAWC7eJtcqkfMT2Ni+ zQi75KewyTVuyChRTGbMPJAJkHPTfAcs6z1OIVpSsabQgsehW9S6r9FvcRQAZz4z /qCgB5c3EfzgJwg+e29tC6hHNPCRqdTzN5AuWq+WAJD176nUSOhlU58qWC9xQoYL rOmwUCy0KX1xJ44zFuY3EfcwC57dBys= -----END CERTIFICATE-----Generated at Mon May 5 20:04:44 2025 by rpki-client