$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa File: 2382a434-cda8-3060-a542-ba56e0e0f17b.roa (raw, json) Hash identifier: +d0SvDVq9Y7ent5/Na9OW2yHCXPmRAdYTmD3qWh8wdk= Subject key identifier: 67:F6:02:6C:B8:D5:E0:8E:E6:A2:3D:9E:CB:31:B3:05:05:05:08:03 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849C67CAFD7EEE474089410BA40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa Signing time: Wed 07 May 2025 15:15:06 +0000 ROA not before: Wed 07 May 2025 15:15:06 +0000 ROA not after: Tue 05 Aug 2025 15:15:06 +0000 asID: 6079 IP address blocks: 72.1.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:7c:af:d7:ee:e4:74:08:94:10:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 15:15:06 2025 GMT Not After : Aug 5 15:15:06 2025 GMT Subject: CN=09870602-6d0a-4325-bcd8-9acb7810fefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:b1:e7:c6:ae:e8:e1:0a:02:2a:13:15:2b: 2a:c3:22:91:65:a8:27:a8:d9:83:56:9b:51:44:d8: 8f:95:90:21:a2:2c:1f:75:51:62:bf:bb:9d:2d:d7: fe:80:b1:32:45:79:9f:c4:a3:55:bf:77:1c:60:e3: a0:b1:cb:a2:20:70:09:61:2e:f7:6d:26:07:0d:d4: 74:36:f8:c9:ea:f8:3a:72:35:dc:1d:ef:10:e5:50: 0c:01:06:67:1b:25:d9:c5:a4:12:ac:f1:c5:b5:72: 67:f6:99:af:e6:3b:1c:d6:47:f6:e4:9e:37:b2:51: f2:2b:10:79:3e:20:a6:b4:be:d5:a1:d2:06:a9:d2: 1c:40:d7:ad:7e:62:22:55:5f:f3:77:c5:2b:64:5d: ae:e7:c1:c8:f0:f8:5c:22:0b:af:7a:b2:a2:03:e9: 0b:de:a2:df:a6:fa:77:d7:cf:98:91:54:b6:9c:40: b2:7a:fd:18:15:7d:c9:56:36:64:b4:81:90:7c:60: 73:14:03:93:39:f6:eb:0d:19:46:99:8e:c0:81:fe: c0:2d:d8:f6:03:6a:1f:bd:fe:3f:0a:24:5c:15:e3: 39:f5:51:f3:06:16:33:8f:ed:14:e0:43:46:e5:34: f9:6d:d1:81:3d:80:ac:c4:d9:6b:b7:44:a2:29:81: 64:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F6:02:6C:B8:D5:E0:8E:E6:A2:3D:9E:CB:31:B3:05:05:05:08:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.1.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:26:3c:06:71:c0:8e:a7:69:08:81:dd:1f:89:5c:cc:c8:04: c1:09:b2:66:37:19:54:6b:66:60:57:8d:10:20:64:48:a2:c3: a7:8c:d2:55:a9:7a:8c:13:97:4e:97:17:27:6b:a3:d0:47:a1: a7:b4:6b:f3:be:da:22:0e:47:ff:68:dd:53:50:bc:c6:35:90: 00:1c:b9:43:b4:4b:34:81:6a:dc:77:83:32:5b:e8:2d:fc:b1: 3d:79:b6:49:b4:e2:06:b9:b3:a9:b0:11:e7:71:7d:a0:63:dc: c2:61:7b:24:86:b4:32:43:ff:16:2d:e4:63:98:af:e8:8d:fb: f5:d4:b2:46:6a:7a:a0:57:eb:9c:57:14:ea:d5:e4:5d:c4:89: a4:e9:a1:8e:41:5d:6b:23:4f:b9:a1:ad:9d:c9:a2:57:38:71: 8e:b9:5f:89:24:42:38:33:62:bd:55:9e:cf:fd:aa:bf:fe:34: 9f:e6:af:c8:2d:0f:31:14:20:90:0b:53:95:46:70:40:81:b2: 72:37:9a:a4:25:5c:f9:e9:76:3d:16:cd:7e:7f:d4:07:03:cf: 89:b5:be:77:48:47:eb:34:67:93:9f:a2:96:05:98:e1:c8:9a: 34:5b:43:bc:0f:a4:f4:cf:3a:a6:f9:fc:7d:76:92:22:70:1b: 17:03:54:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnGfK/X7uR0CJQQukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUwNzE1MTUwNloXDTI1MDgwNTE1MTUwNlowLzEtMCsGA1UEAxMk MDk4NzA2MDItNmQwYS00MzI1LWJjZDgtOWFjYjc4MTBmZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+Gx58au6OEKAioTFSsqwyKRZagnqNmDVptR RNiPlZAhoiwfdVFiv7udLdf+gLEyRXmfxKNVv3ccYOOgscuiIHAJYS73bSYHDdR0 NvjJ6vg6cjXcHe8Q5VAMAQZnGyXZxaQSrPHFtXJn9pmv5jsc1kf25J43slHyKxB5 PiCmtL7VodIGqdIcQNetfmIiVV/zd8UrZF2u58HI8PhcIguverKiA+kL3qLfpvp3 18+YkVS2nECyev0YFX3JVjZktIGQfGBzFAOTOfbrDRlGmY7Agf7ALdj2A2ofvf4/ CiRcFeM59VHzBhYzj+0U4ENG5TT5bdGBPYCsxNlrt0SiKYFkhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGf2Amy41eCO5qI9nssxswUFBQgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjM4MmE0MzQtY2RhOC0z MDYwLWE1NDItYmE1NmUwZTBmMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcmPAZxwI6naQiB3R+JXMzIBMEJsmY3GVRrZmBXjRAgZEiiw6eM0lWp eowTl06XFydro9BHoae0a/O+2iIOR/9o3VNQvMY1kAAcuUO0SzSBatx3gzJb6C38 sT15tkm04ga5s6mwEedxfaBj3MJheySGtDJD/xYt5GOYr+iN+/XUskZqeqBX65xX FOrV5F3EiaTpoY5BXWsjT7mhrZ3Jolc4cY65X4kkQjgzYr1Vns/9qr/+NJ/mr8gt DzEUIJALU5VGcECBsnI3mqQlXPnpdj0WzX5/1AcDz4m1vndIR+s0Z5OfopYFmOHI mjRbQ7wPpPTPOqb5/H12kiJwGxcDVLQ= -----END CERTIFICATE-----Generated at Wed May 14 12:42:53 2025 by rpki-client