$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa File: 1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa (raw, json) Hash identifier: /BXlU/e9ZZ5DW/y34GlPMUe+4tpx8gvFokw3djQTQis= Subject key identifier: B1:BD:8D:E6:8A:46:F8:26:97:1A:44:61:ED:3C:D7:73:1E:01:04:0B Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F43285848E9CBE81B10CC11F20CEBE340 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 54032 IP address blocks: 72.233.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e8:1b:10:cc:11:f2:0c:eb:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=8718dc41-c681-454f-95c2-1b14245380d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:13:d3:f9:40:5c:a9:af:66:74:03:02:3e:c2: f0:df:e7:b1:60:05:0d:03:26:27:99:2a:26:2a:69: 8c:fa:c0:41:78:43:95:a5:c5:1b:bf:1e:d4:d8:71: 25:6a:d7:53:ec:be:7a:a9:a9:78:23:d6:71:ab:ef: 1c:7e:11:35:a9:47:77:f6:6a:ae:97:3c:04:eb:7b: 79:92:f4:75:cb:78:9c:10:8f:bb:3d:23:a5:62:b4: e2:a9:53:76:9f:7f:c2:68:76:8a:cd:d2:58:54:22: 53:00:c5:5f:ff:88:2a:26:87:53:7e:46:07:fb:ce: 26:49:56:15:43:1b:8c:cf:0d:64:47:93:14:15:dd: 87:d0:d5:cd:b8:65:ea:c4:09:92:32:e1:99:04:c2: 06:3b:17:a4:40:47:e3:36:36:e9:60:c6:d7:01:71: ba:80:c2:b8:ae:51:69:86:ea:05:99:0c:21:85:a0: 87:2b:90:79:15:4e:ff:50:33:41:5d:26:40:2e:61: 88:e3:0f:6c:29:c6:5a:11:3d:34:d7:90:9b:98:4b: f9:86:28:49:20:8a:bb:c3:6f:12:55:9d:25:f6:eb: cd:59:13:4e:bc:8e:92:e9:42:c6:90:12:93:27:b2: 4a:a8:ac:b8:f9:72:96:86:0f:23:ff:36:2b:5f:3c: 7c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BD:8D:E6:8A:46:F8:26:97:1A:44:61:ED:3C:D7:73:1E:01:04:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b7:e9:b0:4f:db:33:fa:9a:b3:ed:f9:24:13:80:e4:4c:4c: c6:d2:1c:a1:f6:96:8d:e0:63:7c:18:33:32:25:32:c5:91:67: 40:1e:61:1f:c6:03:ef:60:e1:60:22:ca:77:c8:06:b8:18:0d: 72:1d:56:b5:7e:c3:bc:2f:03:68:e0:68:96:ad:60:bd:d2:97: 7e:45:1a:52:3f:80:f3:b3:d3:66:a9:2d:f4:90:ab:b6:f0:6b: 32:e4:ba:5a:d5:65:ac:39:e0:3f:f6:fd:70:e9:e4:51:3b:a8: 22:f7:a0:f4:b0:b3:43:2b:43:f0:9a:b0:ae:ef:44:cf:9d:e9: be:d5:02:00:d9:44:d7:60:6b:15:83:85:ea:c9:4d:ca:ad:a4: e4:27:43:c3:1f:a0:2e:f7:59:ee:11:a5:f6:ed:07:f8:a1:ba: d9:78:02:c4:a2:03:90:6f:a4:a7:a5:57:4e:92:bf:89:29:22: 5d:26:0b:db:9f:c8:3c:43:27:1b:07:9a:29:8e:e9:fe:24:c2: 0c:18:bd:68:ad:98:ca:c6:01:a7:99:ce:6b:5c:b1:b3:c1:79: 23:1b:ee:33:2a:f8:85:24:9e:4a:29:fb:8f:4c:96:da:68:9b: 5b:41:7b:50:a5:1f:38:7c:f8:08:a1:7e:52:78:1d:f0:87:1f: 7b:e2:06:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+gbEMwR8gzr40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk ODcxOGRjNDEtYzY4MS00NTRmLTk1YzItMWIxNDI0NTM4MGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxPT+UBcqa9mdAMCPsLw3+exYAUNAyYnmSom KmmM+sBBeEOVpcUbvx7U2HElatdT7L56qal4I9Zxq+8cfhE1qUd39mqulzwE63t5 kvR1y3icEI+7PSOlYrTiqVN2n3/CaHaKzdJYVCJTAMVf/4gqJodTfkYH+84mSVYV QxuMzw1kR5MUFd2H0NXNuGXqxAmSMuGZBMIGOxekQEfjNjbpYMbXAXG6gMK4rlFp huoFmQwhhaCHK5B5FU7/UDNBXSZALmGI4w9sKcZaET0015CbmEv5hihJIIq7w28S VZ0l9uvNWRNOvI6S6ULGkBKTJ7JKqKy4+XKWhg8j/zYrXzx8HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLG9jeaKRvgmlxpEYe0813MeAQQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMWE1MjI5YjQtMDZiOS0z MWM2LThjNDEtOWNjYzhkMDc2MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW36bBP2zP6mrPt+SQTgORMTMbSHKH2lo3gY3wYMzIlMsWRZ0AeYR/G A+9g4WAiynfIBrgYDXIdVrV+w7wvA2jgaJatYL3Sl35FGlI/gPOz02apLfSQq7bw azLkulrVZaw54D/2/XDp5FE7qCL3oPSws0MrQ/CasK7vRM+d6b7VAgDZRNdgaxWD herJTcqtpOQnQ8MfoC73We4RpfbtB/ihutl4AsSiA5BvpKelV06Sv4kpIl0mC9uf yDxDJxsHmimO6f4kwgwYvWitmMrGAaeZzmtcsbPBeSMb7jMq+IUknkop+49Mltpo m1tBe1ClHzh8+AihflJ4HfCHH3viBjc= -----END CERTIFICATE-----Generated at Wed May 7 15:12:23 2025 by rpki-client