$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa File: 0f216025-08f0-3ed8-84c5-9f7904503c8e.roa (raw, json) Hash identifier: gt85FMzxu2SZC0MrySma0OYD81GUp5iI6OhiHJPAmQo= Subject key identifier: 3F:FF:4D:F0:B1:15:9E:1B:61:4C:04:17:BF:A1:C7:F9:77:FB:4D:92 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F43285849C904DDF8740C72D10287B460 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 14717 IP address blocks: 72.21.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:dd:f8:74:0c:72:d1:02:87:b4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=adc7f63b-8eeb-4359-a2a9-0a9a2ddd69b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:6f:3f:c3:21:d1:7c:81:33:fb:7b:9b:00: 37:82:33:de:fd:e1:bd:8d:56:42:23:ee:87:cf:88: 4a:3d:73:b7:76:55:94:76:86:b1:c9:de:28:dc:de: bc:2c:9d:9a:73:b2:82:f3:b8:e0:e0:3a:fd:e9:c5: a7:2a:ab:10:1c:5c:d3:fc:9d:6d:28:a5:1b:5a:6d: 8a:1a:e9:dd:0a:62:23:e7:b0:04:fe:fa:8d:3b:4a: a4:74:c1:cb:bd:cf:76:25:e2:47:27:54:83:47:54: d7:94:37:66:1c:68:42:d9:c2:f3:23:40:6e:08:d7: 00:98:de:c4:a8:c5:4a:0f:92:46:a8:4f:36:04:c9: 7a:64:e7:99:d3:15:1c:13:6c:8c:f6:e7:28:98:be: a7:59:f8:14:1d:07:cd:57:e8:91:05:19:52:c4:df: 2a:16:4f:3c:79:5c:5b:97:34:55:04:32:0e:7d:f7: ac:ac:41:e3:d5:6a:14:9a:c8:08:4d:7d:9e:0c:49: dd:fb:7c:e7:9b:d0:9f:70:45:2c:bc:5e:ac:fc:2d: dd:76:3b:1c:68:e1:e0:eb:02:90:00:5b:9a:ff:26: f3:a6:03:4d:8b:a1:f2:ae:56:65:de:76:50:34:1a: 52:b9:23:ec:d2:79:49:99:45:1e:4e:49:ef:ab:b1: 19:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FF:4D:F0:B1:15:9E:1B:61:4C:04:17:BF:A1:C7:F9:77:FB:4D:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f9:6a:e0:51:1b:74:8c:a5:6e:7f:5f:be:5d:dd:5f:70:a6: f9:fb:06:34:10:90:da:fc:da:8c:4b:83:ac:d9:c9:4e:57:49: 97:67:24:63:b5:3d:90:5a:39:c0:73:e7:10:dd:84:83:7b:b0: af:7a:c9:38:12:78:6c:a6:50:b1:fe:54:40:bb:77:8a:60:01: af:55:29:8d:84:89:00:65:b4:75:43:1b:a7:30:fe:9b:2c:31: 3f:ac:fd:6e:a1:3d:f4:4b:bb:37:f2:68:78:29:6f:c9:f3:1a: 0d:31:c5:ec:c1:41:bf:9d:1f:d9:d4:5a:a3:e4:96:ca:bb:1f: 9c:7f:a0:d0:4e:d8:93:be:1d:9b:44:89:bc:0e:49:bf:a1:c4: 2b:b6:16:82:94:84:14:3f:db:ee:62:68:bf:be:74:f8:b3:1f: 74:7f:9b:f9:9f:d3:5e:51:73:47:57:8b:f1:a5:5d:1d:8d:21: cc:24:5b:67:c2:79:9d:b8:86:af:bf:48:cf:78:a8:7f:2d:92: 33:f3:9b:36:14:4a:6d:22:66:81:70:48:67:a0:c9:0e:00:66: 3f:0c:28:71:b2:f1:f6:1c:59:4e:4c:78:61:78:b2:16:76:39: d2:b8:20:3f:c5:68:26:34:71:aa:79:66:66:8d:82:6b:d4:fc: c3:ed:f4:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBN34dAxy0QKHtGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk YWRjN2Y2M2ItOGVlYi00MzU5LWEyYTktMGE5YTJkZGQ2OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOVvP8Mh0XyBM/t7mwA3gjPe/eG9jVZCI+6H z4hKPXO3dlWUdoaxyd4o3N68LJ2ac7KC87jg4Dr96cWnKqsQHFzT/J1tKKUbWm2K GundCmIj57AE/vqNO0qkdMHLvc92JeJHJ1SDR1TXlDdmHGhC2cLzI0BuCNcAmN7E qMVKD5JGqE82BMl6ZOeZ0xUcE2yM9ucomL6nWfgUHQfNV+iRBRlSxN8qFk88eVxb lzRVBDIOffesrEHj1WoUmsgITX2eDEnd+3znm9CfcEUsvF6s/C3ddjscaOHg6wKQ AFua/ybzpgNNi6HyrlZl3nZQNBpSuSPs0nlJmUUeTknvq7EZJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD//TfCxFZ4bYUwEF7+hx/l3+02SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvMGYyMTYwMjUtMDhmMC0z ZWQ4LTg0YzUtOWY3OTA0NTAzYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz5auBRG3SMpW5/X75d3V9wpvn7BjQQkNr82oxLg6zZyU5XSZdnJGO1 PZBaOcBz5xDdhIN7sK96yTgSeGymULH+VEC7d4pgAa9VKY2EiQBltHVDG6cw/pss MT+s/W6hPfRLuzfyaHgpb8nzGg0xxezBQb+dH9nUWqPklsq7H5x/oNBO2JO+HZtE ibwOSb+hxCu2FoKUhBQ/2+5iaL++dPizH3R/m/mf015Rc0dXi/GlXR2NIcwkW2fC eZ24hq+/SM94qH8tkjPzmzYUSm0iZoFwSGegyQ4AZj8MKHGy8fYcWU5MeGF4shZ2 OdK4ID/FaCY0cap5ZmaNgmvU/MPt9Lc= -----END CERTIFICATE-----Generated at Sat May 10 05:06:50 2025 by rpki-client