$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4c8f1eda-3531-3cf9-b7e3-1127391f3f28.roa File: 4c8f1eda-3531-3cf9-b7e3-1127391f3f28.roa (raw, json) Hash identifier: ybq9dLmumzIkvi7swEa0UKt72AtpmwkBqSkuHqmrn48= Subject key identifier: 7D:4C:C0:CB:45:23:BE:41:9D:1F:0A:94:BB:F1:E9:D0:73:BA:C0:AE Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F43285849C20A191D51AB657EA9073760 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4c8f1eda-3531-3cf9-b7e3-1127391f3f28.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 54032 IP address blocks: 72.233.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:19:1d:51:ab:65:7e:a9:07:37:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=ead40ece-61a7-4f71-bc09-131acec01d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:fa:a5:f4:47:31:b1:5d:b2:37:fa:64:26: 6d:df:c9:a6:cd:88:9e:bb:9e:1e:00:fb:5f:61:f4: 7b:a9:89:71:37:54:a6:14:6b:33:e2:4e:30:b5:40: 45:bc:81:9d:87:41:b9:03:6e:35:e5:93:a3:72:3c: 79:d4:f8:7a:cb:be:30:73:40:28:d5:c8:78:da:81: 5f:7a:7e:79:0f:ce:f4:3f:49:e2:c6:d8:bd:f2:63: 43:ae:9f:ed:27:9f:f4:23:1b:4d:41:b9:e1:46:5b: 89:2e:c6:97:a4:4f:6a:59:fb:6a:b2:7d:a4:47:ae: 4b:97:99:98:47:3e:ad:3e:9c:ca:45:22:d2:bf:57: f2:4d:92:c6:9d:45:89:15:1a:e3:43:2b:25:ba:30: 81:9f:15:3d:29:60:0c:52:f2:02:df:7c:99:c6:9d: 18:af:b5:73:78:a8:50:1d:43:f0:22:9d:cd:ea:26: 88:a8:48:2c:94:97:22:f5:70:51:3e:52:76:1f:0d: da:66:4a:cd:2a:9b:6c:92:a0:d3:4d:c4:89:51:56: 43:2c:2c:3d:42:5d:41:33:9f:0a:7e:75:e1:d9:95: a5:3d:40:22:ff:c5:8e:5c:67:8d:65:22:42:75:54: 36:72:0f:6f:0a:51:0d:a9:b3:53:32:c8:d8:ab:ff: 03:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4C:C0:CB:45:23:BE:41:9D:1F:0A:94:BB:F1:E9:D0:73:BA:C0:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4c8f1eda-3531-3cf9-b7e3-1127391f3f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5e:34:9e:22:19:4c:df:86:a1:05:a6:ee:fd:b6:8e:1a:f0: f1:20:86:5b:49:b5:08:54:d8:ba:93:28:9e:ba:16:b0:78:cc: c6:72:84:46:7a:2c:ca:da:e0:ed:1a:a3:87:b0:04:80:73:9f: c7:5c:f5:e7:a1:32:7c:0e:92:8e:a0:41:5f:a9:72:4d:49:00: 5e:44:c5:55:88:4e:2a:04:46:85:42:ba:62:c5:de:20:96:08: bf:1d:71:c7:40:70:41:a1:a3:d7:04:a9:16:0e:38:d8:2b:b3: 53:32:a5:55:f0:96:fd:b7:24:77:2c:0c:b3:c8:5f:88:8a:ac: 4d:a6:a3:5e:57:16:ef:b0:7e:cb:2f:a4:35:37:81:2c:d6:a8: d8:ac:91:50:06:71:c0:93:30:a4:07:93:03:1f:c0:cc:da:de: ca:e2:9c:88:1a:dc:93:c0:31:42:44:f7:8c:3e:52:1d:0c:5b: 6a:4c:29:7e:cd:f4:e1:ab:8c:5f:40:c2:5f:9a:d6:42:7a:e1: 9b:2b:1f:da:dc:89:7b:aa:ed:86:b7:1a:a3:19:2d:04:aa:3b: c5:94:e9:05:13:7d:c2:ea:ae:ff:28:f2:89:cf:fd:ee:9a:7b: 96:c9:1e:42:09:d7:9e:00:73:d1:03:75:99:2e:84:65:25:d4: 90:5b:57:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChkdUatlfqkHN2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZWFkNDBlY2UtNjFhNy00ZjcxLWJjMDktMTMxYWNlYzAxZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rT6pfRHMbFdsjf6ZCZt38mmzYieu54eAPtf YfR7qYlxN1SmFGsz4k4wtUBFvIGdh0G5A2415ZOjcjx51Ph6y74wc0Ao1ch42oFf en55D870P0nixti98mNDrp/tJ5/0IxtNQbnhRluJLsaXpE9qWftqsn2kR65Ll5mY Rz6tPpzKRSLSv1fyTZLGnUWJFRrjQyslujCBnxU9KWAMUvIC33yZxp0Yr7VzeKhQ HUPwIp3N6iaIqEgslJci9XBRPlJ2Hw3aZkrNKptskqDTTcSJUVZDLCw9Ql1BM58K fnXh2ZWlPUAi/8WOXGeNZSJCdVQ2cg9vClENqbNTMsjYq/8DhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1MwMtFI75BnR8KlLvx6dBzusCuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNGM4ZjFlZGEtMzUzMS0z Y2Y5LWI3ZTMtMTEyNzM5MWYzZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSOmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZeNJ4iGUzfhqEFpu79to4a8PEghltJtQhU2LqTKJ66FrB4zMZyhEZ6 LMra4O0ao4ewBIBzn8dc9eehMnwOko6gQV+pck1JAF5ExVWITioERoVCumLF3iCW CL8dccdAcEGho9cEqRYOONgrs1MypVXwlv23JHcsDLPIX4iKrE2mo15XFu+wfssv pDU3gSzWqNiskVAGccCTMKQHkwMfwMza3srinIga3JPAMUJE94w+Uh0MW2pMKX7N 9OGrjF9Awl+a1kJ64ZsrH9rciXuq7Ya3GqMZLQSqO8WU6QUTfcLqrv8o8onP/e6a e5bJHkIJ154Ac9EDdZkuhGUl1JBbV68= -----END CERTIFICATE-----Generated at Wed May 7 05:39:46 2025 by rpki-client