$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9623083f-8edc-3373-819c-497af219317c.roa File: 9623083f-8edc-3373-819c-497af219317c.roa (raw, json) Hash identifier: 5R2eafwp/rWKfjf8a2z5HCqh+Fz4ATHEubMat+3hXg4= Subject key identifier: 8C:DA:12:C3:6A:9C:9F:69:AD:84:43:80:AF:4C:C7:B8:30:66:24:D4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849D627F65E7DC118C76CA09700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9623083f-8edc-3373-819c-497af219317c.roa Signing time: Tue 13 May 2025 05:57:20 +0000 ROA not before: Tue 13 May 2025 05:57:20 +0000 ROA not after: Mon 11 Aug 2025 05:57:20 +0000 asID: 174 IP address blocks: 72.13.224.0/24 maxlen: 24 72.13.225.0/24 maxlen: 24 72.13.228.0/24 maxlen: 24 72.13.229.0/24 maxlen: 24 72.13.230.0/24 maxlen: 24 72.13.231.0/24 maxlen: 24 72.13.234.0/24 maxlen: 24 72.13.235.0/24 maxlen: 24 72.13.238.0/24 maxlen: 24 72.13.239.0/24 maxlen: 24 72.13.244.0/24 maxlen: 24 72.13.245.0/24 maxlen: 24 72.13.250.0/24 maxlen: 24 72.13.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:27:f6:5e:7d:c1:18:c7:6c:a0:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 13 05:57:20 2025 GMT Not After : Aug 11 05:57:20 2025 GMT Subject: CN=9e2bb1bb-2417-4331-b87e-09005585f3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:63:f8:a6:7f:ef:54:d0:c5:44:67:55:53:00: 9c:28:1d:c4:67:07:44:de:a2:09:5e:39:fc:f2:6e: 91:bc:44:1b:e4:e3:c2:60:8b:ee:16:f6:9e:8e:e6: 33:7a:54:9d:41:c9:a8:59:27:24:73:ff:42:73:bd: 38:cb:6e:cb:a3:12:da:dc:35:b1:b9:35:88:bc:44: 73:ff:9c:0a:33:ff:69:a0:05:02:d0:12:b4:ed:d9: 25:56:f4:59:ab:bc:7d:d3:13:90:d6:59:ff:25:7f: de:35:3c:7f:e8:2e:2c:1d:f1:73:6b:20:21:40:92: 47:c2:9e:73:a9:78:a8:d0:2b:04:1e:cc:86:1e:76: 90:37:9c:33:b2:4b:09:6f:2d:1b:c1:13:5d:c8:f5: ac:73:e0:d1:9d:21:83:31:e4:c5:81:29:f8:c6:56: 47:9d:29:6c:e1:fd:ca:38:71:62:a1:63:a6:82:42: fd:55:8a:85:40:bf:ba:28:77:36:0d:2f:2a:89:50: 35:5b:04:a5:77:14:0c:77:4d:8d:80:63:7b:8b:25: 71:56:9b:76:2e:ca:67:4f:ab:24:f6:5f:cf:34:3a: 50:7a:35:fd:01:76:37:24:87:8b:e9:7e:80:a2:48: 7d:12:e1:fb:95:78:e7:12:4e:3b:32:ca:18:f5:0a: 56:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DA:12:C3:6A:9C:9F:69:AD:84:43:80:AF:4C:C7:B8:30:66:24:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9623083f-8edc-3373-819c-497af219317c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.13.224.0/23 72.13.228.0/22 72.13.234.0/23 72.13.238.0/23 72.13.244.0/23 72.13.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ac:0d:17:e8:c4:7f:c0:b4:7a:ce:8e:e9:c2:04:7c:64:02: 78:93:cd:50:00:86:d1:e3:e4:dc:c4:63:e1:cf:e9:31:9a:47: 16:6c:10:bf:10:e7:61:68:27:47:16:48:8d:c4:f0:46:94:31: 63:71:1c:38:8b:50:13:87:00:34:34:f6:ad:96:9f:29:7b:95: 16:f2:88:24:5c:fd:85:ed:81:9a:20:c9:c6:71:86:e3:ca:6f: 6f:92:05:04:00:71:24:f8:a1:9d:75:92:e1:b6:93:ad:ac:12: b3:04:bb:af:f4:50:87:02:b0:65:94:0a:d9:f2:ad:60:7e:a2: cc:10:bb:18:8d:7d:67:c2:1a:47:51:db:4e:94:f6:d4:40:4c: 3f:67:2b:04:3c:ef:a9:50:73:3f:34:14:43:01:56:08:8c:c6: 2b:8f:48:28:aa:3e:03:d8:fb:7d:89:03:c1:a4:cf:06:4f:e2: ae:0d:a0:32:80:ca:94:41:39:fe:26:3f:ca:5a:b6:5f:87:58: ba:8a:1c:aa:44:32:94:b3:a7:28:6e:74:b6:c5:1a:f9:f9:db: 83:3a:74:19:a0:e7:0a:5f:3e:4f:9e:10:44:23:61:ac:00:b3: ca:7b:36:91:58:3c:33:b1:28:48:36:35:93:0a:5c:8d:c5:9f: 2a:4c:25:43 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEnWJ/ZefcEYx2yglwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUxMzA1NTcyMFoXDTI1MDgxMTA1NTcyMFowLzEtMCsGA1UEAxMk OWUyYmIxYmItMjQxNy00MzMxLWI4N2UtMDkwMDU1ODVmM2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGP4pn/vVNDFRGdVUwCcKB3EZwdE3qIJXjn8 8m6RvEQb5OPCYIvuFvaejuYzelSdQcmoWSckc/9Cc704y27LoxLa3DWxuTWIvERz /5wKM/9poAUC0BK07dklVvRZq7x90xOQ1ln/JX/eNTx/6C4sHfFzayAhQJJHwp5z qXio0CsEHsyGHnaQN5wzsksJby0bwRNdyPWsc+DRnSGDMeTFgSn4xlZHnSls4f3K OHFioWOmgkL9VYqFQL+6KHc2DS8qiVA1WwSldxQMd02NgGN7iyVxVpt2LspnT6sk 9l/PNDpQejX9AXY3JIeL6X6Aokh9EuH7lXjnEk47MsoY9QpWdwIDAQABo4IDczCC A28wHQYDVR0OBBYEFIzaEsNqnJ9prYRDgK9Mx7gwZiTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTYyMzA4M2YtOGVkYy0z MzczLTgxOWMtNDk3YWYyMTkzMTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBSA3gAwQC SA3kAwQBSA3qAwQBSA3uAwQBSA30AwQBSA36MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFesDRfoxH/AtHrO junCBHxkAniTzVAAhtHj5NzEY+HP6TGaRxZsEL8Q52FoJ0cWSI3E8EaUMWNxHDiL UBOHADQ09q2Wnyl7lRbyiCRc/YXtgZogycZxhuPKb2+SBQQAcST4oZ11kuG2k62s ErMEu6/0UIcCsGWUCtnyrWB+oswQuxiNfWfCGkdR206U9tRATD9nKwQ876lQcz80 FEMBVgiMxiuPSCiqPgPY+32JA8GkzwZP4q4NoDKAypRBOf4mP8patl+HWLqKHKpE MpSzpyhudLbFGvn524M6dBmg5wpfPk+eEEQjYawAs8p7NpFYPDOxKEg2NZMKXI3F nypMJUM= -----END CERTIFICATE-----Generated at Wed May 14 12:41:55 2025 by rpki-client