$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/028288d8-6c12-376f-b374-b3c61996c1c3.roa File: 028288d8-6c12-376f-b374-b3c61996c1c3.roa (raw, json) Hash identifier: yCbZge6XQ8/2xlVWdlVngemvEW3DrggcAC37kO9ndoQ= Subject key identifier: BB:AF:78:85:CE:A3:33:FC:59:D3:F9:28:94:52:31:D6:81:FA:C2:B9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D621C7FEAD96CB420840 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/028288d8-6c12-376f-b374-b3c61996c1c3.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 108.6.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d6:21:c7:fe:ad:96:cb:42:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=a41192f1-a9d6-4afa-a2fb-007b124ae94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1c:7c:26:22:58:94:71:77:f7:29:22:7e:9c: 79:0f:55:dd:fc:aa:b8:2d:78:eb:a4:ae:7c:f1:48: 04:77:50:dd:ed:6d:26:b9:95:ab:14:d8:8f:8e:d9: 4f:a2:e1:b1:2c:33:55:cc:d3:2a:8e:36:a2:8a:aa: 02:98:d8:b7:b9:2b:fd:4c:24:50:55:da:09:f3:d2: 33:7b:fa:0b:6b:ad:cc:97:41:b7:ef:5a:d8:16:b6: 18:22:e0:45:fd:7f:1c:c0:8b:c9:1a:a1:f9:79:6d: 66:b2:4b:57:bd:2a:1a:da:13:22:47:b6:7a:ac:98: 93:41:5c:27:29:ff:8f:f9:a5:ea:92:04:80:85:f8: cc:fe:cd:24:a1:6f:09:a4:c8:36:77:aa:11:0a:f8: ae:23:1d:d3:3c:b5:79:14:39:00:9f:e9:89:89:42: e4:4d:e8:44:05:77:41:0e:c4:e0:a2:09:d8:33:56: 94:ec:84:29:5f:83:a6:18:dd:db:7e:2d:c5:8d:c9: 50:31:23:40:e9:a7:80:d5:8e:48:0a:75:e7:03:4a: 04:62:32:55:10:61:57:04:f1:61:2b:a1:93:a5:92: 63:54:6d:da:f3:0c:e7:e1:64:83:71:23:7f:c0:7f: d1:6d:60:a0:4b:08:2a:62:12:99:6a:6c:33:dc:78: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AF:78:85:CE:A3:33:FC:59:D3:F9:28:94:52:31:D6:81:FA:C2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/028288d8-6c12-376f-b374-b3c61996c1c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.6.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e1:16:e8:4e:60:0c:48:9e:33:54:74:7c:9d:7e:f5:77:8b: 22:30:64:a7:e7:4b:35:b4:0c:cb:2c:63:0e:70:40:a6:c0:6a: 95:f9:f9:cf:31:ca:71:40:6f:4a:7b:07:13:75:33:4f:aa:00: 08:44:fd:c6:69:13:e6:5b:5d:4b:45:90:03:d2:90:40:8a:4b: c8:56:01:4e:dd:32:35:af:5f:6d:8e:05:7f:29:85:d9:8a:2a: b4:c3:3f:45:07:55:91:0b:83:4b:b5:a3:99:9a:ad:eb:9d:11: 78:7c:36:39:f1:1b:bb:a7:d3:40:db:be:12:11:15:fb:3e:5f: 97:2a:01:45:0e:55:4b:0d:5d:43:0b:d3:2f:c2:5c:13:dc:24: f3:fd:de:99:eb:35:1c:aa:e3:aa:9a:e1:ce:a6:a5:f9:a5:f8: 0c:93:1a:eb:b9:e4:14:87:32:7b:d4:fb:12:86:69:66:a2:e6: 47:bd:d6:61:b2:49:08:2c:85:83:68:f3:e8:bf:c1:c3:f3:da: 02:d1:24:e8:b8:da:c9:5c:36:c9:96:a3:40:8a:c0:f3:72:6c: 2e:6d:c9:df:bf:40:92:d4:6c:71:30:30:cc:79:95:1a:26:f3: 79:7d:4b:b1:1c:b3:3e:8f:0c:33:f9:34:7a:ff:c1:32:10:fe: 8a:89:c9:4c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRtYhx/6tlstCCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YTQxMTkyZjEtYTlkNi00YWZhLWEyZmItMDA3YjEyNGFlOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxx8JiJYlHF39ykifpx5D1Xd/Kq4LXjrpK58 8UgEd1Dd7W0muZWrFNiPjtlPouGxLDNVzNMqjjaiiqoCmNi3uSv9TCRQVdoJ89Iz e/oLa63Ml0G371rYFrYYIuBF/X8cwIvJGqH5eW1msktXvSoa2hMiR7Z6rJiTQVwn Kf+P+aXqkgSAhfjM/s0koW8JpMg2d6oRCviuIx3TPLV5FDkAn+mJiULkTehEBXdB DsTgognYM1aU7IQpX4OmGN3bfi3FjclQMSNA6aeA1Y5ICnXnA0oEYjJVEGFXBPFh K6GTpZJjVG3a8wzn4WSDcSN/wH/RbWCgSwgqYhKZamwz3Hif2wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLuveIXOozP8WdP5KJRSMdaB+sK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDI4Mjg4ZDgtNmMxMi0z NzZmLWIzNzQtYjNjNjE5OTZjMWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbAYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAmOEW6E5gDEieM1R0fJ1+9XeLIjBkp+dLNbQMyyxjDnBApsBqlfn5zzHK cUBvSnsHE3UzT6oACET9xmkT5ltdS0WQA9KQQIpLyFYBTt0yNa9fbY4FfymF2Yoq tMM/RQdVkQuDS7WjmZqt650ReHw2OfEbu6fTQNu+EhEV+z5flyoBRQ5VSw1dQwvT L8JcE9wk8/3emes1HKrjqprhzqal+aX4DJMa67nkFIcye9T7EoZpZqLmR73WYbJJ CCyFg2jz6L/Bw/PaAtEk6LjayVw2yZajQIrA83JsLm3J379AktRscTAwzHmVGibz eX1LsRyzPo8MM/k0ev/BMhD+ionJTA== -----END CERTIFICATE-----Generated at Sun Apr 27 04:28:46 2025 by rpki-client