$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa File: 93579c5a-1fbb-393d-942f-b4c14c01265d.roa (raw, json) Hash identifier: /wPSC+x5rB9XhcuKKY6wBAErEXig7y03/acasWGTtlQ= Subject key identifier: 44:20:AD:23:F7:DA:18:08:31:07:C3:2D:4D:62:57:21:BE:91:F6:30 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849AA4F6755B5D0B8D11FBEB800 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 16433 IP address blocks: 72.22.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:67:55:b5:d0:b8:d1:1f:be:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=689778dd-d652-4e4c-8ad0-4c54dce111c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5f:56:53:d8:07:a6:60:75:7e:23:fa:93:09: e4:c1:78:6f:6b:4f:9b:1f:ca:8d:ec:60:8e:78:86: 87:5d:07:ac:a3:7c:5d:16:0f:1d:58:c2:f4:ff:ed: ec:3d:a2:0e:b9:a5:44:48:d6:a7:fc:51:28:c5:43: 09:b6:38:5b:d1:76:6c:8a:bc:b0:84:62:24:16:7c: f7:01:f5:15:69:04:d5:d1:03:ad:90:87:b9:1b:fc: 36:08:33:d8:53:cd:d5:ed:2f:a6:a3:69:bb:e6:ae: 95:60:3d:bb:a9:28:8f:a5:2c:5e:16:0d:bd:c5:9a: 78:28:0b:9c:02:6e:cf:e9:9c:72:7a:86:e7:38:88: 66:04:57:00:72:50:aa:4b:8a:17:df:8c:e3:58:7d: 4f:d3:eb:29:3e:1b:82:35:87:99:9d:e5:b7:bd:9b: f9:82:ad:63:41:b2:52:b8:29:3b:0c:37:87:08:f2: 97:98:3c:b4:11:4b:e0:8b:69:61:49:38:67:06:94: c4:aa:3e:2c:d9:74:11:45:dc:fd:81:57:35:84:2f: 67:3e:a4:a4:d7:97:95:54:50:41:f3:6e:c8:f3:43: 1b:63:2e:86:e8:e6:00:e1:08:01:f6:46:79:59:8e: 9d:5a:7c:39:39:50:34:fe:89:47:21:e4:ea:67:72: 00:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:20:AD:23:F7:DA:18:08:31:07:C3:2D:4D:62:57:21:BE:91:F6:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 72.22.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3c:36:da:95:33:ab:9d:b1:1c:7b:1e:59:7b:0e:d9:9a:ad: 69:e4:3b:10:28:57:34:db:64:5e:55:ff:af:29:2b:21:c3:47: cd:17:d9:63:16:41:37:4f:79:0e:6b:f1:fd:fe:31:16:d8:f3: ed:29:d7:6e:f0:4b:e0:0d:f4:f4:c4:2c:f0:2b:71:2b:b2:53: 0e:e1:41:6a:a3:74:fe:a4:c6:ab:08:b1:09:24:0b:d8:07:6e: 6d:8b:89:37:02:08:4a:db:02:ae:76:14:09:99:92:e6:d0:b8: 61:db:a4:17:d2:3f:ed:2b:25:6c:74:b6:2a:76:cf:ea:76:2a: 35:9e:50:c5:12:70:04:03:8d:6e:f4:81:2f:94:cd:da:f4:89: 00:58:08:e2:0a:ff:a8:da:5e:eb:a1:b0:5e:f0:15:10:54:51: 29:c0:40:7c:fa:e0:0a:38:e4:bf:2e:91:3c:4e:a1:b1:76:50: ca:16:ed:db:ad:88:83:73:06:56:18:09:e0:1f:f7:55:0b:a8: 46:d3:11:b6:51:e1:66:c9:ea:a7:d8:41:55:cf:94:de:fc:28: 4b:53:18:7b:a2:a3:1f:11:11:8f:74:be:c5:0d:09:00:23:1a: b4:48:48:d6:af:23:53:01:fe:07:12:16:a3:94:be:cd:8c:3c: 3e:e8:92:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2dVtdC40R++uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk Njg5Nzc4ZGQtZDY1Mi00ZTRjLThhZDAtNGM1NGRjZTExMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l9WU9gHpmB1fiP6kwnkwXhva0+bH8qN7GCO eIaHXQeso3xdFg8dWML0/+3sPaIOuaVESNan/FEoxUMJtjhb0XZsirywhGIkFnz3 AfUVaQTV0QOtkIe5G/w2CDPYU83V7S+mo2m75q6VYD27qSiPpSxeFg29xZp4KAuc Am7P6ZxyeobnOIhmBFcAclCqS4oX34zjWH1P0+spPhuCNYeZneW3vZv5gq1jQbJS uCk7DDeHCPKXmDy0EUvgi2lhSThnBpTEqj4s2XQRRdz9gVc1hC9nPqSk15eVVFBB 827I80MbYy6G6OYA4QgB9kZ5WY6dWnw5OVA0/olHIeTqZ3IAsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQgrSP32hgIMQfDLU1iVyG+kfYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvOTM1NzljNWEtMWZiYi0z OTNkLTk0MmYtYjRjMTRjMDEyNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB08NtqVM6udsRx7Hll7DtmarWnkOxAoVzTbZF5V/68pKyHDR80X2WMW QTdPeQ5r8f3+MRbY8+0p127wS+AN9PTELPArcSuyUw7hQWqjdP6kxqsIsQkkC9gH bm2LiTcCCErbAq52FAmZkubQuGHbpBfSP+0rJWx0tip2z+p2KjWeUMUScAQDjW70 gS+Uzdr0iQBYCOIK/6jaXuuhsF7wFRBUUSnAQHz64Ao45L8ukTxOobF2UMoW7dut iINzBlYYCeAf91ULqEbTEbZR4WbJ6qfYQVXPlN78KEtTGHuiox8REY90vsUNCQAj GrRISNavI1MB/gcSFqOUvs2MPD7okqs= -----END CERTIFICATE-----Generated at Tue May 6 21:10:43 2025 by rpki-client