$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa File: 15de4dc8-a657-3baf-8d71-7563142b8734.roa (raw, json) Hash identifier: 2OtEXbPMeg2J2Nxbg5H7kOvaB1RjCZ/tyAoEQ8rO2js= Subject key identifier: B7:2C:F9:03:9D:34:3F:32:D6:B2:B1:68:CC:BD:C0:61:2A:EE:D9:60 Certificate issuer: /CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3 Certificate serial: 010D0C9F43285849C20A18765D7E3700E641E700 Authority key identifier: 02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 11708 IP address blocks: 72.22.208.0/20 maxlen: 32 75.98.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:18:76:5d:7e:37:00:e6:41:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=ce0f427a-8fed-48a1-868c-910c8c8b3e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:21:f9:aa:46:95:66:af:01:79:d5:3f:46:cc: 12:38:08:fa:b6:06:a8:f3:25:4f:89:3b:b8:92:7a: 27:24:77:68:56:52:a7:4c:03:e1:5e:5b:7b:06:a2: e5:77:4d:40:c7:6a:7b:be:dd:25:95:72:b7:91:23: 86:ca:9f:50:5e:de:f0:e1:d0:27:9d:d6:06:1a:2b: d0:97:10:84:00:f8:66:e2:e7:24:a8:ea:d8:5e:a8: 12:1f:2c:35:37:cb:31:9a:ee:75:1b:07:7f:f7:27: 1a:5c:00:9f:c1:74:95:7d:7f:94:8c:3f:64:a2:e2: cc:4e:d1:12:fb:27:29:cf:51:67:7b:73:5a:bb:59: 5d:c2:77:7f:e2:e0:80:e4:cc:de:d6:e1:1b:53:7c: 9d:6a:84:cc:43:df:05:c7:dc:01:a0:55:09:b9:29: 6e:ce:2e:93:45:2f:90:39:f6:12:fb:1c:04:e6:ee: 0f:a0:d3:f4:94:a9:1c:32:d3:0e:a9:7a:2f:56:ac: e6:d9:40:7d:5b:53:9a:c4:0f:33:9f:67:8c:c5:b6: 83:0c:6b:db:26:9d:d2:42:48:c6:9b:fb:33:11:26: 0d:4d:c9:3e:14:80:33:85:8e:54:89:0d:5a:54:7c: 53:43:a9:7f:f6:84:5b:6b:e4:8c:37:26:e5:6c:60: 26:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2C:F9:03:9D:34:3F:32:D6:B2:B1:68:CC:BD:C0:61:2A:EE:D9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl X509v3 Authority Key Identifier: keyid:02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer sbgp-ipAddrBlock: critical IPv4: 72.22.208.0/20 75.98.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:76:e7:8d:44:4a:fe:17:94:d5:c9:73:3c:38:12:d2:f1:10: 98:83:8b:e5:b7:38:6f:64:24:02:af:cf:57:c4:c6:fa:1e:22: 53:dc:98:d9:31:6a:1f:2b:ac:3e:78:64:31:7c:f6:5e:58:0e: f2:70:49:e1:40:a1:2a:53:89:d1:1c:66:47:94:71:46:07:77: fe:44:50:79:be:57:a5:36:f9:39:d6:70:58:f1:c0:70:eb:6e: bc:5b:57:35:bd:d8:07:04:17:4c:ea:4b:9a:59:40:75:50:00: dc:3c:fd:aa:db:d4:d6:4f:22:ad:35:e6:aa:74:dc:30:d3:c0: 49:f4:40:eb:c0:65:ae:3f:6e:55:20:52:b8:cb:17:7c:cc:08: e7:c3:09:a2:31:c9:24:d0:fe:15:01:78:21:0a:15:42:80:a1: df:da:56:ab:e9:12:d6:80:1f:17:ce:c8:fe:f9:a7:22:88:a4: 09:c1:9f:62:0d:5d:ea:b1:e7:0f:51:b2:68:d1:6c:13:64:0e: c9:ab:ad:64:90:72:0a:38:1d:b7:b9:eb:82:83:15:d8:86:26: b9:5d:45:50:4a:e7:5b:ea:e2:d4:b5:01:de:73:cb:c4:b6:60: 76:57:e7:b4:46:35:10:88:9e:2a:0a:89:d8:95:f2:d8:f2:62: 44:9b:52:a9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnCChh2XX43AOZB5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA3ZThjNzUtNzVlNC00NjRjLTg4YzAtMGY4YzZkODc1 N2EzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk Y2UwZjQyN2EtOGZlZC00OGExLTg2OGMtOTEwYzhjOGIzZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCH5qkaVZq8BedU/RswSOAj6tgao8yVPiTu4 knonJHdoVlKnTAPhXlt7BqLld01Ax2p7vt0llXK3kSOGyp9QXt7w4dAnndYGGivQ lxCEAPhm4uckqOrYXqgSHyw1N8sxmu51Gwd/9ycaXACfwXSVfX+UjD9kouLMTtES +ycpz1Fne3Nau1ldwnd/4uCA5Mze1uEbU3ydaoTMQ98Fx9wBoFUJuSluzi6TRS+Q OfYS+xwE5u4PoNP0lKkcMtMOqXovVqzm2UB9W1OaxA8zn2eMxbaDDGvbJp3SQkjG m/szESYNTck+FIAzhY5UiQ1aVHxTQ6l/9oRba+SMNyblbGAmRQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLcs+QOdND8y1rKxaMy9wGEq7tlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDdl OGM3NS03NWU0LTQ2NGMtODhjMC0wZjhjNmQ4NzU3YTMvMTVkZTRkYzgtYTY1Ny0z YmFmLThkNzEtNzU2MzE0MmI4NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDA3ZThjNzUtNzVlNC00NjRjLTg4 YzAtMGY4YzZkODc1N2EzL2QwN2U4Yzc1LTc1ZTQtNDY0Yy04OGMwLTBmOGM2ZDg3 NTdhMy5jcmwwHwYDVR0jBBgwFoAUAjwHSGYDD0Ag9gR4pn9ZKBTI9OgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDdlOGM3NS03NWU0LTQ2NGMtODhjMC0wZjhj NmQ4NzU3YTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQESBbQAwQE S2JwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB12541ESv4XlNXJczw4EtLxEJiDi+W3OG9kJAKvz1fExvoe IlPcmNkxah8rrD54ZDF89l5YDvJwSeFAoSpTidEcZkeUcUYHd/5EUHm+V6U2+TnW cFjxwHDrbrxbVzW92AcEF0zqS5pZQHVQANw8/arb1NZPIq015qp03DDTwEn0QOvA Za4/blUgUrjLF3zMCOfDCaIxySTQ/hUBeCEKFUKAod/aVqvpEtaAHxfOyP75pyKI pAnBn2INXeqx5w9RsmjRbBNkDsmrrWSQcgo4Hbe564KDFdiGJrldRVBK51vq4tS1 Ad5zy8S2YHZX57RGNRCInioKidiV8tjyYkSbUqk= -----END CERTIFICATE-----Generated at Tue May 6 03:07:29 2025 by rpki-client