$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/303e7c7b-498d-38d1-b248-ea2a6afa1787.roa File: 303e7c7b-498d-38d1-b248-ea2a6afa1787.roa (raw, json) Hash identifier: GR4ZbWTCke8yGvaNX+6INEpQYAw3qSHuQnB+7QgpRk4= Subject key identifier: 86:C2:A9:19:06:07:B5:22:7B:F9:AA:E0:6F:B2:CD:41:6D:95:8C:70 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3EA672F6F1F65F35B0580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/303e7c7b-498d-38d1-b248-ea2a6afa1787.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.106.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:ea:67:2f:6f:1f:65:f3:5b:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=3fc3ed1a-4ff5-4f19-8ec9-f730e02fcd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:2c:63:54:dc:e2:dd:80:b5:ea:a5:85:fd: 53:9d:d7:e8:77:3a:06:9c:fe:89:d2:21:02:8f:06: b8:5f:8a:ff:cf:c5:80:d3:be:46:16:e4:35:cd:5d: 2d:fb:60:6c:23:27:cf:7d:4f:95:8f:b2:ff:86:51: f2:ff:0b:c8:70:70:06:89:dc:66:ea:67:f5:0a:c7: e1:da:21:3a:77:6f:27:45:43:f7:17:ec:1e:c4:b1: 7a:20:6a:2b:5e:ac:c5:24:ae:ba:79:dd:78:d9:8e: 34:c3:8f:e0:ef:79:8c:c5:08:da:43:63:9a:c9:73: dd:6e:c3:43:42:e4:34:00:19:50:0a:a5:85:d3:f6: 6b:ae:28:d2:6c:12:23:ea:08:46:95:b2:10:47:e0: a7:0e:b6:5f:ed:b0:d5:92:a9:59:13:90:01:13:58: a3:e0:0b:ec:cb:c7:17:98:d1:7f:5b:ea:43:28:3c: 11:3a:58:15:22:91:46:cc:a2:a2:34:84:47:f9:2e: fe:54:55:84:1b:90:4c:b1:3c:0f:a6:80:9e:79:55: b7:09:9b:a9:60:06:f5:33:3d:3f:44:ed:fa:3f:45: 73:65:e1:a7:c1:a3:dc:e0:4b:09:99:c5:8b:f8:72: c7:2e:27:ee:c2:32:80:2c:20:6f:89:5d:a4:3a:f0: 7b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C2:A9:19:06:07:B5:22:7B:F9:AA:E0:6F:B2:CD:41:6D:95:8C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/303e7c7b-498d-38d1-b248-ea2a6afa1787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.106.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2c:56:c9:4b:48:a7:d9:b1:e7:85:af:ca:78:ed:38:4f:71: 55:9a:bf:af:e7:82:42:3f:02:67:c5:6b:58:82:17:f0:08:b8: 1b:11:2c:7b:37:cf:a7:c5:e4:8b:f2:fd:d1:37:aa:e8:87:ca: 73:1e:54:b6:34:4e:fc:b4:8b:17:9e:f7:ae:0e:4e:33:20:ff: 43:15:70:a9:25:29:04:a6:47:08:70:e5:21:6f:f9:08:61:19: a6:57:bf:d9:ac:f9:fe:27:76:0c:c3:fa:96:26:72:78:69:2f: d4:20:79:c6:1c:35:0e:18:d5:37:3e:e5:8e:b5:ef:15:39:e1: 17:32:af:49:0e:a2:44:10:5e:9b:34:2d:02:c2:3a:28:54:f1: 41:1b:0f:a6:68:51:4d:99:58:3f:11:18:72:fd:f6:6c:bf:5d: 1e:9a:af:70:73:bf:94:43:ef:32:79:5c:37:e9:e7:f1:cd:19: 69:42:42:ac:a6:65:52:d4:2d:62:8b:ec:9b:d6:5b:78:c2:71: 7a:ba:0d:1d:50:bd:3f:78:0b:4a:38:40:1d:73:b3:60:0f:da: fa:a9:bf:73:76:59:4d:da:5a:e8:de:fc:88:55:4b:c4:e1:c5: af:10:d0:b0:69:41:81:c3:51:5a:ca:24:59:65:22:dd:da:1a: 5a:cb:4d:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+pnL28fZfNbBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk M2ZjM2VkMWEtNGZmNS00ZjE5LThlYzktZjczMGUwMmZjZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui0sY1Tc4t2Ateqlhf1TndfodzoGnP6J0iEC jwa4X4r/z8WA075GFuQ1zV0t+2BsIyfPfU+Vj7L/hlHy/wvIcHAGidxm6mf1Csfh 2iE6d28nRUP3F+wexLF6IGorXqzFJK66ed142Y40w4/g73mMxQjaQ2OayXPdbsND QuQ0ABlQCqWF0/ZrrijSbBIj6ghGlbIQR+CnDrZf7bDVkqlZE5ABE1ij4Avsy8cX mNF/W+pDKDwROlgVIpFGzKKiNIRH+S7+VFWEG5BMsTwPpoCeeVW3CZupYAb1Mz0/ RO36P0VzZeGnwaPc4EsJmcWL+HLHLifuwjKALCBviV2kOvB72QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbCqRkGB7Uie/mq4G+yzUFtlYxwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzAzZTdjN2ItNDk4ZC0z OGQxLWIyNDgtZWEyYTZhZmExNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESGqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0sVslLSKfZseeFr8p47ThPcVWav6/ngkI/AmfFa1iCF/AIuBsRLHs3 z6fF5Ivy/dE3quiHynMeVLY0Tvy0ixee964OTjMg/0MVcKklKQSmRwhw5SFv+Qhh GaZXv9ms+f4ndgzD+pYmcnhpL9QgecYcNQ4Y1Tc+5Y617xU54Rcyr0kOokQQXps0 LQLCOihU8UEbD6ZoUU2ZWD8RGHL99my/XR6ar3Bzv5RD7zJ5XDfp5/HNGWlCQqym ZVLULWKL7JvWW3jCcXq6DR1QvT94C0o4QB1zs2AP2vqpv3N2WU3aWuje/IhVS8Th xa8Q0LBpQYHDUVrKJFllIt3aGlrLTTU= -----END CERTIFICATE-----Generated at Sat Apr 26 23:07:57 2025 by rpki-client