$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0223d4fe-1fb7-3e32-8033-bff52035a445.roa File: 0223d4fe-1fb7-3e32-8033-bff52035a445.roa (raw, json) Hash identifier: 3A9x1PMQmZNTGauSntDimDZZ4P8cAskBz+xRNtbx/MY= Subject key identifier: 04:C1:ED:8F:EE:28:F9:DC:67:31:2A:8A:85:5E:81:7C:2B:55:93:14 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3DFAC592E55EA67D01480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0223d4fe-1fb7-3e32-8033-bff52035a445.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.108.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:df:ac:59:2e:55:ea:67:d0:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=9356c9c7-008a-4768-aca3-083f7b75074c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:8d:c7:da:0e:3d:dd:5d:c6:c7:07:4a:54: 10:77:41:38:99:e7:a5:fb:a9:a7:78:fa:73:7b:16: 19:a2:95:bd:7c:a4:67:91:9c:32:28:f4:d5:bd:f7: 58:a4:ee:b8:74:7e:f6:30:ce:8b:ff:fb:73:5c:30: 80:83:14:3e:93:0f:41:16:b0:a0:f6:9c:07:11:67: 7f:38:27:4c:67:47:ab:4c:3b:a3:48:62:45:d6:de: b4:e0:41:6c:6d:ff:b7:93:f4:52:02:1e:91:6d:bb: 50:40:03:44:b3:e3:80:bd:41:39:5b:57:35:ce:e4: cb:c6:63:71:d2:99:dd:01:58:ec:43:69:11:42:58: d6:3a:ee:c5:9d:fd:7f:0f:0a:16:8f:8b:e9:38:65: da:63:ea:37:4c:57:01:65:46:86:49:a2:2b:64:ea: 4c:14:3c:e4:41:c4:da:25:4e:36:cf:81:5e:3e:64: 91:c2:ff:45:59:19:26:31:31:ee:ac:a3:05:c0:a7: 1e:6e:0a:3e:17:72:62:63:e5:40:64:c4:b1:0a:39: b9:3d:a1:14:ee:7b:18:15:7c:94:2f:bb:02:71:5d: 63:1a:78:a7:65:79:bc:11:fd:1b:47:1a:c7:09:2f: c5:59:d1:24:a3:2c:a8:a8:fb:e6:08:61:bd:22:cd: 9c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C1:ED:8F:EE:28:F9:DC:67:31:2A:8A:85:5E:81:7C:2B:55:93:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0223d4fe-1fb7-3e32-8033-bff52035a445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:4d:61:ce:5a:4d:ff:7c:a3:42:e9:22:19:3d:af:fe:8c:5b: 3b:0f:64:c7:3c:58:1f:ba:94:6d:9e:e2:7a:38:67:ae:a3:62: 27:7f:5b:d1:0c:c0:81:27:7b:f9:7c:eb:bd:c2:1a:4f:c4:cf: 30:e9:d6:67:c0:bf:d1:5b:d1:73:51:30:4a:ce:93:e4:d9:c3: b7:3a:c7:25:86:67:52:7e:f1:74:d4:3c:31:ff:4e:6d:97:e2: cf:67:ad:fc:d8:c0:eb:11:b2:dd:e2:9a:f8:1c:4d:8f:08:2f: 84:ed:29:23:95:45:6d:ad:3e:fc:5f:e8:9f:dc:b2:c2:09:87: 78:5a:cf:bf:4d:8b:e6:56:33:ee:15:bf:6c:cb:6c:bc:da:70: cc:83:41:b9:f9:c4:e9:12:35:f7:b6:76:b0:6b:2c:59:a0:49: dd:da:7f:e2:cf:10:c1:7f:29:60:3d:01:cf:b7:a3:92:3b:0f: ba:11:6e:96:d9:df:ef:62:cd:c7:79:e9:45:9b:a2:6b:8b:e4: a7:85:e0:31:9f:0a:9a:c5:2e:d4:25:d0:f2:2f:2e:f8:87:a0: 2a:b3:1e:b1:c3:21:36:4e:0d:95:b4:a2:6b:a1:ed:45:b2:62: 90:72:2a:01:65:5d:77:e5:49:2f:5c:f6:ce:b8:3a:4d:a0:52: 80:af:16:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09+sWS5V6mfQFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk OTM1NmM5YzctMDA4YS00NzY4LWFjYTMtMDgzZjdiNzUwNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunONx9oOPd1dxscHSlQQd0E4meel+6mnePpz exYZopW9fKRnkZwyKPTVvfdYpO64dH72MM6L//tzXDCAgxQ+kw9BFrCg9pwHEWd/ OCdMZ0erTDujSGJF1t604EFsbf+3k/RSAh6RbbtQQANEs+OAvUE5W1c1zuTLxmNx 0pndAVjsQ2kRQljWOu7Fnf1/DwoWj4vpOGXaY+o3TFcBZUaGSaIrZOpMFDzkQcTa JU42z4FePmSRwv9FWRkmMTHurKMFwKcebgo+F3JiY+VAZMSxCjm5PaEU7nsYFXyU L7sCcV1jGninZXm8Ef0bRxrHCS/FWdEkoyyoqPvmCGG9Is2c/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATB7Y/uKPncZzEqioVegXwrVZMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDIyM2Q0ZmUtMWZiNy0z ZTMyLTgwMzMtYmZmNTIwMzVhNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVNYc5aTf98o0LpIhk9r/6MWzsPZMc8WB+6lG2e4no4Z66jYid/W9EM wIEne/l8673CGk/EzzDp1mfAv9Fb0XNRMErOk+TZw7c6xyWGZ1J+8XTUPDH/Tm2X 4s9nrfzYwOsRst3imvgcTY8IL4TtKSOVRW2tPvxf6J/cssIJh3haz79Ni+ZWM+4V v2zLbLzacMyDQbn5xOkSNfe2drBrLFmgSd3af+LPEMF/KWA9Ac+3o5I7D7oRbpbZ 3+9izcd56UWbomuL5KeF4DGfCprFLtQl0PIvLviHoCqzHrHDITZODZW0omuh7UWy YpByKgFlXXflSS9c9s64Ok2gUoCvFnc= -----END CERTIFICATE-----Generated at Mon Apr 28 07:14:03 2025 by rpki-client