$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28ac0bee-45dc-3518-a38b-05a97ff4db29.roa File: 28ac0bee-45dc-3518-a38b-05a97ff4db29.roa (raw, json) Hash identifier: qFIjXh3ow6Za9B4P5jhAmIxJ6w/jY4Yjp9HEYORQf38= Subject key identifier: B9:6A:51:E5:AF:EB:7D:AF:FF:F8:35:38:BB:14:8F:45:F8:A4:93:16 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C2BC5F8EEE2B0AE99B280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28ac0bee-45dc-3518-a38b-05a97ff4db29.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 71.123.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:2b:c5:f8:ee:e2:b0:ae:99:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=c93c99d7-915b-418c-b582-548891d7327e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:53:75:26:f3:61:b9:f1:98:77:32:22:1b: 37:48:38:53:5e:3f:3d:22:73:6f:d9:99:75:20:ac: 8a:cf:aa:60:ce:80:ae:17:b2:ef:6b:9a:9c:24:f8: fb:96:eb:0c:70:b4:d4:93:69:20:b4:f8:cc:20:ee: 5e:f8:47:e4:34:d8:92:c5:b3:54:ae:83:40:4c:33: 1d:9f:1d:76:0a:d1:f4:fd:24:b4:a3:24:db:b3:93: db:37:c4:48:75:b6:13:55:bc:9e:53:7d:11:25:37: ef:f8:fa:1d:b1:9d:18:d2:ab:06:90:2b:43:e5:7a: 12:c9:45:76:56:6f:a5:62:80:65:92:f6:ca:87:f1: a1:e1:6f:b4:12:db:3d:db:56:f8:34:aa:15:76:fa: ad:5e:be:d2:6e:ec:f1:b1:11:9c:24:20:ed:51:0f: 28:35:c8:9d:28:44:41:da:a3:6f:2e:66:1a:8c:27: bc:dc:45:ce:6c:9e:2b:86:29:f8:9d:43:be:c9:15: 26:e0:9f:1c:8a:14:73:e0:28:65:ef:5b:15:d1:11: 50:88:84:ab:c6:99:20:2e:26:97:e8:bb:f0:85:fe: f6:59:b4:3d:8c:d8:81:0a:af:a0:b9:a2:29:13:5e: d9:0a:4b:bc:29:2b:df:56:c3:02:58:91:d7:ae:fc: 1b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6A:51:E5:AF:EB:7D:AF:FF:F8:35:38:BB:14:8F:45:F8:A4:93:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28ac0bee-45dc-3518-a38b-05a97ff4db29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.123.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d2:ed:4a:1d:ac:60:df:9b:2c:3a:bc:f5:75:52:0a:82:d5: bb:5e:70:f1:3b:de:26:d7:26:a5:55:eb:c9:d9:bf:61:0f:dc: 5b:f9:5a:c6:49:c0:0c:1b:e7:a2:05:9b:fc:8f:11:b0:2a:0a: d0:8b:45:b2:05:4f:9c:8b:83:84:f8:b8:5f:85:6f:66:03:b6: 1d:59:1e:e4:31:6b:00:c8:bb:98:ed:1f:3c:19:28:6e:85:f1: 9e:db:1a:5f:0f:20:8f:3e:87:5c:a8:93:a5:8e:d2:82:b1:39: 8b:c1:bf:12:0b:18:a6:fd:2f:db:3e:59:80:4f:60:4b:be:8f: 30:e2:60:8f:34:1e:f6:17:b3:cd:9e:48:14:79:81:4e:d5:e8: bf:7a:61:f0:14:a3:6c:d8:42:80:e9:45:b0:12:8f:f5:1e:76: 83:ca:4e:10:f3:5f:e3:81:60:64:d6:c5:3b:86:88:17:81:95: ba:2d:f2:51:5f:2b:2f:c9:f1:70:83:46:67:94:d5:7f:52:f5: 39:df:69:eb:80:86:fb:2b:63:8b:20:62:e3:e2:73:2b:bf:cd: a5:ee:e6:63:69:34:e3:35:09:61:6f:6b:63:88:0a:5d:c5:f0: 14:8d:25:4a:03:22:f6:3c:6c:6f:f0:34:0d:2a:2e:ce:5f:a6: 7b:e9:d0:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCvF+O7isK6ZsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YzkzYzk5ZDctOTE1Yi00MThjLWI1ODItNTQ4ODkxZDczMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK5TdSbzYbnxmHcyIhs3SDhTXj89InNv2Zl1 IKyKz6pgzoCuF7Lva5qcJPj7lusMcLTUk2kgtPjMIO5e+EfkNNiSxbNUroNATDMd nx12CtH0/SS0oyTbs5PbN8RIdbYTVbyeU30RJTfv+PodsZ0Y0qsGkCtD5XoSyUV2 Vm+lYoBlkvbKh/Gh4W+0Ets921b4NKoVdvqtXr7SbuzxsRGcJCDtUQ8oNcidKERB 2qNvLmYajCe83EXObJ4rhin4nUO+yRUm4J8cihRz4Chl71sV0RFQiISrxpkgLiaX 6Lvwhf72WbQ9jNiBCq+guaIpE17ZCku8KSvfVsMCWJHXrvwbkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlqUeWv632v//g1OLsUj0X4pJMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjhhYzBiZWUtNDVkYy0z NTE4LWEzOGItMDVhOTdmZjRkYjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR3tAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXS7UodrGDfmyw6vPV1UgqC1btecPE73ibXJqVV68nZv2EP3Fv5WsZJ wAwb56IFm/yPEbAqCtCLRbIFT5yLg4T4uF+Fb2YDth1ZHuQxawDIu5jtHzwZKG6F 8Z7bGl8PII8+h1yok6WO0oKxOYvBvxILGKb9L9s+WYBPYEu+jzDiYI80HvYXs82e SBR5gU7V6L96YfAUo2zYQoDpRbASj/UedoPKThDzX+OBYGTWxTuGiBeBlbot8lFf Ky/J8XCDRmeU1X9S9TnfaeuAhvsrY4sgYuPicyu/zaXu5mNpNOM1CWFva2OICl3F 8BSNJUoDIvY8bG/wNA0qLs5fpnvp0M4= -----END CERTIFICATE-----Generated at Sat Apr 26 23:01:22 2025 by rpki-client