$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce0f56f8-64d0-38da-95e2-391f55a08721.roa File: ce0f56f8-64d0-38da-95e2-391f55a08721.roa (raw, json) Hash identifier: lbpLbMBixB+2cmJtbscb/E7i4MrdHIIqbj/vIkyQlBg= Subject key identifier: 6E:63:18:FD:D7:4F:16:41:F0:7D:CA:19:4E:3F:A2:01:22:3B:38:8F Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F97A0263FB294899A5700 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce0f56f8-64d0-38da-95e2-391f55a08721.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 33363 IP address blocks: 72.31.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:97:a0:26:3f:b2:94:89:9a:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=431a9643-7609-4d9c-be37-7daffd5d20b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:80:1d:d5:4f:b2:cd:44:6f:bb:c3:3c:e6:ac: 9a:ac:2e:a0:12:c0:c4:f7:64:c7:51:e8:fc:00:7e: d2:f7:67:5d:6f:b0:b5:b2:ee:0c:4d:0f:20:ed:db: fe:74:56:bf:4d:ad:bf:56:89:67:34:4e:44:e7:0a: fc:9e:a4:e8:cd:d1:6d:9e:46:65:a7:29:2a:49:bf: df:cc:ef:e0:87:6a:a7:53:10:11:48:e3:56:b4:96: d6:a2:38:78:b5:17:0a:63:d2:c9:a4:a0:a3:a5:9f: b3:f8:76:d8:0f:83:9a:47:c5:c6:e7:9d:f5:1c:c4: ba:d4:dc:e4:03:bb:55:6d:6a:63:b3:7d:01:4f:6a: 15:08:b4:97:0b:35:64:2e:a2:ba:40:8d:82:e1:cf: 1c:91:5f:f2:75:28:96:8b:5a:73:b4:78:14:3d:05: f4:f6:8e:eb:79:f0:3a:1e:49:c6:41:76:56:07:22: 13:4a:0f:6d:d7:0d:38:6c:d1:d3:81:e5:1a:53:ba: b9:89:87:5f:ec:79:ad:53:28:58:8b:e1:18:6f:78: b5:d7:66:ab:94:1c:c0:5b:68:34:44:95:cd:f0:4b: 1f:de:c1:cc:80:3c:e7:7f:50:e1:d9:90:6d:66:d2: d6:02:ab:ce:70:14:cf:b3:a0:fa:95:e3:90:57:92: 99:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:63:18:FD:D7:4F:16:41:F0:7D:CA:19:4E:3F:A2:01:22:3B:38:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce0f56f8-64d0-38da-95e2-391f55a08721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:08:1c:25:91:9c:f9:40:53:64:69:c5:8d:ea:f2:d8:06:45: fc:82:2b:b1:8b:69:18:2b:82:c6:da:4e:73:6e:74:99:09:ee: 15:0d:e9:3c:1a:41:8e:d7:b5:c9:03:e7:9d:a6:50:ec:3e:da: 4e:44:5b:67:11:07:13:b4:6a:a4:7c:4a:33:7b:38:66:8b:64: c4:ce:59:10:dc:cb:58:5f:99:d9:3a:a4:40:f4:20:34:d3:cd: 78:4a:40:d1:d4:2e:2d:24:90:55:5a:dc:e4:5e:aa:28:bd:4f: 1b:ac:cf:90:7b:9c:51:c1:69:c3:d1:1d:fe:77:66:91:22:c6: 36:20:31:e6:bc:e2:fc:72:0a:4a:32:34:20:49:a4:33:07:6f: c8:2c:4c:67:a4:82:aa:48:fb:4f:1e:bc:80:74:97:17:99:db: c0:38:b2:0d:4d:f5:42:33:e0:ab:c4:34:9c:b9:5c:48:91:c0: 78:38:e1:8a:25:4c:95:d2:9f:6c:18:31:a3:a4:1b:04:c6:91: 44:78:07:3f:db:b9:b6:15:e9:84:d4:4d:20:30:67:15:38:ce: 21:f1:b3:25:5b:d7:0b:1a:2e:5c:5a:66:22:26:5a:0c:c6:01: 80:08:8e:83:77:3d:66:e5:98:16:b8:d1:da:83:a8:c8:b7:33: 1f:80:eb:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5egJj+ylImaVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NDMxYTk2NDMtNzYwOS00ZDljLWJlMzctN2RhZmZkNWQyMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Ad1U+yzURvu8M85qyarC6gEsDE92THUej8 AH7S92ddb7C1su4MTQ8g7dv+dFa/Ta2/VolnNE5E5wr8nqTozdFtnkZlpykqSb/f zO/gh2qnUxARSONWtJbWojh4tRcKY9LJpKCjpZ+z+HbYD4OaR8XG5531HMS61Nzk A7tVbWpjs30BT2oVCLSXCzVkLqK6QI2C4c8ckV/ydSiWi1pztHgUPQX09o7refA6 HknGQXZWByITSg9t1w04bNHTgeUaU7q5iYdf7HmtUyhYi+EYb3i112arlBzAW2g0 RJXN8Esf3sHMgDznf1Dh2ZBtZtLWAqvOcBTPs6D6leOQV5KZrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5jGP3XTxZB8H3KGU4/ogEiOziPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2UwZjU2ZjgtNjRkMC0z OGRhLTk1ZTItMzkxZjU1YTA4NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoIHCWRnPlAU2RpxY3q8tgGRfyCK7GLaRgrgsbaTnNudJkJ7hUN6Twa QY7XtckD552mUOw+2k5EW2cRBxO0aqR8SjN7OGaLZMTOWRDcy1hfmdk6pED0IDTT zXhKQNHULi0kkFVa3OReqii9Txusz5B7nFHBacPRHf53ZpEixjYgMea84vxyCkoy NCBJpDMHb8gsTGekgqpI+08evIB0lxeZ28A4sg1N9UIz4KvENJy5XEiRwHg44Yol TJXSn2wYMaOkGwTGkUR4Bz/bubYV6YTUTSAwZxU4ziHxsyVb1wsaLlxaZiImWgzG AYAIjoN3PWblmBa40dqDqMi3Mx+A60Y= -----END CERTIFICATE-----Generated at Sat May 10 03:51:07 2025 by rpki-client