$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/36891b6f-364a-36d2-91fd-846ddb4cdb41.roa File: 36891b6f-364a-36d2-91fd-846ddb4cdb41.roa (raw, json) Hash identifier: nal3reQi/iHjgJuQogVNawhLT2+RU5miTocu3OBjggM= Subject key identifier: A4:47:B8:D2:34:35:75:22:62:35:1A:70:DA:74:AE:B5:F5:D0:5A:20 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F43285849C904E07ADBF357D674FE0980 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/36891b6f-364a-36d2-91fd-846ddb4cdb41.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 22742 IP address blocks: 72.10.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:e0:7a:db:f3:57:d6:74:fe:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=94258c17-2e7b-4d31-9fe8-2675f5f4d7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:04:c8:c9:26:eb:92:0a:8e:1e:37:ee:e0: 79:83:c0:9f:c4:07:03:1c:09:42:8a:4d:3f:40:28: 36:96:0e:1f:2a:01:9c:c2:0d:6a:e4:df:12:b2:74: bb:0b:ab:27:9d:52:20:a8:4a:7f:ec:f0:8a:0b:89: c6:31:b3:43:f5:e4:b3:24:38:72:6e:ea:85:76:ed: 29:64:84:ec:8f:65:b5:8a:71:f9:8a:3a:f8:57:d5: 37:ae:e7:07:a3:69:04:13:3f:1d:69:35:a4:d1:ff: 34:b6:bd:43:3f:f2:d7:5e:06:c6:00:15:9b:27:f6: 37:45:13:ae:60:e0:8b:4d:9a:64:fe:c6:7b:ed:36: 8f:d2:80:2a:84:75:c8:40:d4:c9:a3:55:fd:7a:12: 91:45:ec:31:38:02:32:b8:06:c2:74:c8:ab:c3:89: a3:05:e9:d2:f1:f4:82:b0:4f:f8:fb:21:47:dc:20: b8:f7:51:f1:00:49:5a:df:f1:37:bf:f2:59:64:4c: 79:60:f7:f6:07:56:b6:ae:d1:b6:a1:a3:d4:a3:e8: 73:4c:91:99:be:b0:14:62:ab:a4:c8:45:ba:36:df: eb:1a:5e:15:e8:fa:6b:63:8a:c8:26:78:eb:0b:1b: 22:ef:5f:28:eb:7f:79:4d:ee:ab:47:90:ea:f8:f8: 24:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:47:B8:D2:34:35:75:22:62:35:1A:70:DA:74:AE:B5:F5:D0:5A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/36891b6f-364a-36d2-91fd-846ddb4cdb41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 72.10.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9b:b2:c7:7f:0d:1b:5f:81:c3:3b:42:a3:d9:e1:d3:27:21: ba:e2:99:47:cd:e8:96:d0:39:93:32:b6:a8:0c:ac:44:ae:89: 8b:ee:d5:d5:ef:27:89:8a:f6:48:e5:6a:3e:36:23:79:bd:02: 4d:29:b9:0c:ae:c9:63:28:db:b7:8a:aa:a5:d8:67:71:b5:0b: 67:2d:26:42:db:54:d7:af:eb:6c:2f:ac:7d:f2:f0:d6:f8:94: 11:4c:62:58:40:c3:58:be:ce:2b:d1:c6:77:5d:da:b4:44:02: d8:b1:c5:34:d8:31:1a:f5:14:9e:f3:37:23:0b:38:e1:5c:4f: 8c:3d:6d:12:af:41:98:24:c3:fa:f0:5d:74:41:4b:23:bb:50: 4e:a0:03:5c:a6:cf:ef:bb:42:aa:61:4a:76:68:cb:ac:80:60: a9:70:75:84:a8:3a:d3:e7:6a:8f:22:89:39:dd:0c:89:db:75: ea:38:af:d1:ad:6e:cb:8b:77:3e:7d:66:dc:c6:44:63:dd:9d: c4:84:26:12:79:b0:80:9e:e2:e9:aa:c3:24:fe:2d:18:e1:9c: cb:ad:53:fa:71:95:d4:76:4f:ef:12:21:bd:e6:dc:f6:34:cf: 73:8e:bf:c1:af:0e:c2:a7:3f:6d:3f:52:37:55:ec:1a:ba:e4: 57:d0:19:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBOB62/NX1nT+CYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk OTQyNThjMTctMmU3Yi00ZDMxLTlmZTgtMjY3NWY1ZjRkN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ekEyMkm65IKjh437uB5g8CfxAcDHAlCik0/ QCg2lg4fKgGcwg1q5N8SsnS7C6snnVIgqEp/7PCKC4nGMbND9eSzJDhybuqFdu0p ZITsj2W1inH5ijr4V9U3rucHo2kEEz8daTWk0f80tr1DP/LXXgbGABWbJ/Y3RROu YOCLTZpk/sZ77TaP0oAqhHXIQNTJo1X9ehKRRewxOAIyuAbCdMirw4mjBenS8fSC sE/4+yFH3CC491HxAEla3/E3v/JZZEx5YPf2B1a2rtG2oaPUo+hzTJGZvrAUYquk yEW6Nt/rGl4V6PprY4rIJnjrCxsi718o6395Te6rR5Dq+PgkAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRHuNI0NXUiYjUacNp0rrX10FogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvMzY4OTFiNmYtMzY0YS0z NmQyLTkxZmQtODQ2ZGRiNGNkYjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSApgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEubssd/DRtfgcM7QqPZ4dMnIbrimUfN6JbQOZMytqgMrESuiYvu1dXv J4mK9kjlaj42I3m9Ak0puQyuyWMo27eKqqXYZ3G1C2ctJkLbVNev62wvrH3y8Nb4 lBFMYlhAw1i+zivRxndd2rREAtixxTTYMRr1FJ7zNyMLOOFcT4w9bRKvQZgkw/rw XXRBSyO7UE6gA1ymz++7QqphSnZoy6yAYKlwdYSoOtPnao8iiTndDInbdeo4r9Gt bsuLdz59ZtzGRGPdncSEJhJ5sICe4umqwyT+LRjhnMutU/pxldR2T+8SIb3m3PY0 z3OOv8GvDsKnP20/UjdV7Bq65FfQGXM= -----END CERTIFICATE-----Generated at Sat May 10 13:13:07 2025 by rpki-client