$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa File: 2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa (raw, json) Hash identifier: L6tqzzEwjc6PkxnhxY2zqxlHrTLZhBijxdT6TI5nrEk= Subject key identifier: B9:60:8B:C1:47:83:EE:EE:71:57:BD:5A:54:36:48:3B:17:29:7C:D4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C2CEDF56BEC7B8C6ADE80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 72.72.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:2c:ed:f5:6b:ec:7b:8c:6a:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=f3a211b1-c034-4925-b8ed-90125e8be48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:46:90:e5:ce:b2:f9:70:fb:19:97:44:09:dd: 64:43:5f:8e:71:cf:7f:c9:49:5a:f7:95:00:21:b5: 50:c4:a8:9e:34:36:f2:2c:b0:f4:89:9a:79:dc:af: 69:13:e3:a6:6e:a6:f4:54:36:f9:99:9b:ca:2f:ef: 17:d7:b0:52:67:d7:01:5e:fc:11:34:8f:52:27:63: d7:7a:0f:30:ad:a0:77:c1:cb:c5:2e:86:f5:7e:7e: 1e:6b:cc:81:6e:d1:7c:ca:c9:a3:43:67:d4:1c:5b: 01:7f:8f:45:44:27:c5:e7:fc:28:ea:bf:2c:91:4d: 58:22:e9:2e:cf:f8:8a:6d:4f:1c:97:71:40:55:24: 4e:2c:3c:75:08:56:e3:b8:14:78:64:f0:55:14:c2: 89:86:ec:e6:77:fe:f6:fb:36:e2:fa:15:ff:f7:f0: f6:33:cc:9e:e5:da:bf:a6:9f:46:36:d4:ca:71:21: 84:e3:c2:f5:c1:4c:4c:7b:80:45:b6:4d:27:9d:4b: cf:aa:49:a8:6f:8b:72:85:4d:7d:88:0a:ef:c1:d4: 65:36:08:bd:06:04:b6:e6:1d:ab:50:c2:92:8d:68: 57:4a:7a:0d:a0:d2:f9:1e:99:e5:e6:95:b5:96:44: 67:a3:42:6a:c2:5d:8a:68:4d:b2:24:36:87:b9:7a: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:60:8B:C1:47:83:EE:EE:71:57:BD:5A:54:36:48:3B:17:29:7C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.72.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6a:de:91:47:7f:b4:bc:70:b5:8d:e3:46:7f:12:20:40:eb: ef:55:38:ff:e3:63:b9:12:05:a8:19:af:13:ca:b1:00:98:b3: 64:97:5a:05:c1:5a:d3:da:a6:94:b1:64:54:38:eb:f1:dd:aa: 0c:2b:91:50:5d:ce:56:d8:89:fb:35:5a:50:a6:13:39:97:f8: bf:14:5d:29:fd:a4:ef:a4:ff:71:eb:bc:2e:d8:61:ff:47:d4: b1:f8:23:25:f7:5f:ab:35:ba:90:34:62:b4:81:3a:91:15:05: 0f:7c:41:00:74:fe:d2:f4:5b:f5:86:6e:cb:b3:a7:c0:f6:5a: f4:51:1e:77:6b:be:f7:d4:4a:3f:42:b4:71:f2:b2:53:e2:36: 08:1b:f7:d2:9b:46:4e:ef:93:6b:06:c2:cb:66:da:2f:fa:98: cc:b0:96:99:13:93:6a:18:af:30:fd:8a:e3:b0:d4:ad:40:2d: 1a:94:ee:49:48:21:9c:96:17:70:36:09:f4:9c:6e:f4:95:ce: d2:af:2c:8e:19:d3:4d:4d:7f:57:f4:9f:32:8b:95:09:5f:12: 27:5f:85:08:83:fa:cc:a5:19:20:bb:79:0d:6e:55:10:95:76: b7:bd:b3:f6:e0:5a:21:88:d9:ac:27:48:4e:bd:81:d0:e7:0a: e0:b6:f2:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCzt9Wvse4xq3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZjNhMjExYjEtYzAzNC00OTI1LWI4ZWQtOTAxMjVlOGJlNDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEaQ5c6y+XD7GZdECd1kQ1+Occ9/yUla95UA IbVQxKieNDbyLLD0iZp53K9pE+Ombqb0VDb5mZvKL+8X17BSZ9cBXvwRNI9SJ2PX eg8wraB3wcvFLob1fn4ea8yBbtF8ysmjQ2fUHFsBf49FRCfF5/wo6r8skU1YIuku z/iKbU8cl3FAVSROLDx1CFbjuBR4ZPBVFMKJhuzmd/72+zbi+hX/9/D2M8ye5dq/ pp9GNtTKcSGE48L1wUxMe4BFtk0nnUvPqkmob4tyhU19iArvwdRlNgi9BgS25h2r UMKSjWhXSnoNoNL5Hpnl5pW1lkRno0Jqwl2KaE2yJDaHuXqRxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlgi8FHg+7ucVe9WlQ2SDsXKXzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmM3ZGVhNWUtYWZkMC0z ZmVhLWI4YTYtNTI0YjIyMTJlZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSEgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBq3pFHf7S8cLWN40Z/EiBA6+9VOP/jY7kSBagZrxPKsQCYs2SXWgXB WtPappSxZFQ46/HdqgwrkVBdzlbYifs1WlCmEzmX+L8UXSn9pO+k/3HrvC7YYf9H 1LH4IyX3X6s1upA0YrSBOpEVBQ98QQB0/tL0W/WGbsuzp8D2WvRRHndrvvfUSj9C tHHyslPiNggb99KbRk7vk2sGwstm2i/6mMywlpkTk2oYrzD9iuOw1K1ALRqU7klI IZyWF3A2CfScbvSVztKvLI4Z001Nf1f0nzKLlQlfEidfhQiD+sylGSC7eQ1uVRCV dre9s/bgWiGI2awnSE69gdDnCuC28kQ= -----END CERTIFICATE-----Generated at Sun Apr 27 00:15:33 2025 by rpki-client