$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9a9f2061-c2bc-3b19-b132-b30712eed4f5.roa File: 9a9f2061-c2bc-3b19-b132-b30712eed4f5.roa (raw, json) Hash identifier: FAXsQM3h8MsHnpQJ+/7HHH59R+GQOyNykvltv47J+tk= Subject key identifier: D2:05:04:07:14:5E:AC:71:FB:A8:0C:D9:45:AA:EB:53:8B:35:87:B4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849C67CB0141FBEE0C652B10E00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9a9f2061-c2bc-3b19-b132-b30712eed4f5.roa Signing time: Wed 07 May 2025 15:15:07 +0000 ROA not before: Wed 07 May 2025 15:15:07 +0000 ROA not after: Tue 05 Aug 2025 15:15:07 +0000 asID: 7018 IP address blocks: 72.1.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:7c:b0:14:1f:be:e0:c6:52:b1:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 15:15:07 2025 GMT Not After : Aug 5 15:15:07 2025 GMT Subject: CN=68fac3e6-c8ce-4fa5-95ce-345d2188e0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:33:1d:fe:cf:7d:7c:74:63:47:7a:2d:5f:b6: 0a:4d:eb:19:53:3e:25:65:0a:88:6a:2c:a4:e6:16: 0a:1d:51:62:ca:63:d5:50:34:01:7f:d4:03:86:50: 5d:9f:29:98:c9:1d:59:2a:ca:87:77:c2:54:02:44: 95:ee:58:1a:7d:43:a9:7e:c4:e1:96:de:0e:a8:09: c3:05:66:f0:8c:17:38:4a:7c:42:c8:1c:0d:36:a6: 58:94:30:1a:5b:b3:8e:1b:53:b3:91:6e:ca:5a:39: 1d:ed:5c:f5:8a:58:3b:84:87:21:82:4c:6b:35:54: a8:3f:98:85:8b:84:3f:e2:71:57:0a:94:d5:f9:dc: f2:07:28:9c:4e:06:7a:c9:db:7d:8e:1d:41:89:96: 5a:b9:a5:72:bd:ab:46:e6:d9:93:c2:c6:cd:60:0e: 00:b0:ad:32:77:53:44:ad:53:c9:06:0c:0b:9f:b1: b6:35:44:d5:a3:75:fe:f2:d9:72:0d:35:14:ed:56: 5c:2c:64:cb:36:e6:19:3c:a5:99:75:b8:89:8e:11: 63:9b:88:12:a4:da:c0:d6:21:77:6d:af:3d:c4:a4: ad:98:7f:6d:63:2b:1e:25:4a:3c:97:16:33:2f:01: e6:50:b6:85:36:9f:33:9b:9b:e8:13:28:6b:be:28: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:05:04:07:14:5E:AC:71:FB:A8:0C:D9:45:AA:EB:53:8B:35:87:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9a9f2061-c2bc-3b19-b132-b30712eed4f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.1.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:01:c9:8e:6b:4e:c6:e9:59:cf:25:f2:64:2d:11:89:ab:67: fe:02:49:96:68:20:2c:e6:89:31:aa:e7:30:a8:c0:46:49:1a: d0:90:9a:dd:b8:ce:f6:bd:2c:7f:17:99:d3:c2:17:51:92:a9: 50:fe:87:7f:8c:95:9f:d8:ec:bc:e7:8a:b2:34:11:6e:5c:bb: f1:e5:49:4e:cd:e6:33:b0:a7:53:0a:db:3a:39:c0:71:69:92: bc:5a:26:46:cc:d7:a4:04:19:33:fd:cd:97:85:9f:8a:ca:15: 30:68:14:bc:2d:72:e9:61:b3:f9:65:9c:b3:bd:ce:c2:69:1e: 81:74:cb:cf:96:90:ca:8f:c0:f2:17:a1:f8:04:90:5d:0f:67: 58:f2:3e:d1:91:a6:75:1e:f5:50:ec:bc:f6:4f:a1:6a:79:8d: 19:bf:ee:89:d2:1c:17:45:46:6a:5e:cc:1c:f9:a7:93:9c:c0: 00:b3:6c:7f:cc:c7:2b:7c:07:e8:c2:60:ef:0c:68:ac:19:17: cd:cf:b8:31:f9:2a:dc:a2:49:eb:81:c5:5a:81:d0:31:e9:c7: e2:57:81:98:2c:bc:3f:eb:66:c5:fc:a9:fc:a8:00:3a:02:d0: cf:0f:50:8b:1a:9c:45:a7:4c:54:77:a1:e0:5b:b6:27:14:4f: 01:f2:f8:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnGfLAUH77gxlKxDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUwNzE1MTUwN1oXDTI1MDgwNTE1MTUwN1owLzEtMCsGA1UEAxMk NjhmYWMzZTYtYzhjZS00ZmE1LTk1Y2UtMzQ1ZDIxODhlMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzMd/s99fHRjR3otX7YKTesZUz4lZQqIaiyk 5hYKHVFiymPVUDQBf9QDhlBdnymYyR1ZKsqHd8JUAkSV7lgafUOpfsThlt4OqAnD BWbwjBc4SnxCyBwNNqZYlDAaW7OOG1OzkW7KWjkd7Vz1ilg7hIchgkxrNVSoP5iF i4Q/4nFXCpTV+dzyByicTgZ6ydt9jh1BiZZauaVyvatG5tmTwsbNYA4AsK0yd1NE rVPJBgwLn7G2NUTVo3X+8tlyDTUU7VZcLGTLNuYZPKWZdbiJjhFjm4gSpNrA1iF3 ba89xKStmH9tYyseJUo8lxYzLwHmULaFNp8zm5voEyhrvihyvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIFBAcUXqxx+6gM2UWq61OLNYe0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWE5ZjIwNjEtYzJiYy0z YjE5LWIxMzItYjMwNzEyZWVkNGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSAGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcByY5rTsbpWc8l8mQtEYmrZ/4CSZZoICzmiTGq5zCowEZJGtCQmt24 zva9LH8XmdPCF1GSqVD+h3+MlZ/Y7LznirI0EW5cu/HlSU7N5jOwp1MK2zo5wHFp krxaJkbM16QEGTP9zZeFn4rKFTBoFLwtculhs/llnLO9zsJpHoF0y8+WkMqPwPIX ofgEkF0PZ1jyPtGRpnUe9VDsvPZPoWp5jRm/7onSHBdFRmpezBz5p5OcwACzbH/M xyt8B+jCYO8MaKwZF83PuDH5KtyiSeuBxVqB0DHpx+JXgZgsvD/rZsX8qfyoADoC 0M8PUIsanEWnTFR3oeBbticUTwHy+Fg= -----END CERTIFICATE-----Generated at Wed May 14 12:41:43 2025 by rpki-client