$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/329e9fdd-67bd-333f-ab94-30b69ab41416.roa File: 329e9fdd-67bd-333f-ab94-30b69ab41416.roa (raw, json) Hash identifier: Jp5hb9caEopCuv1KJwzXtFk5Z0/DKxK7NOL8tZxyEzo= Subject key identifier: 93:0B:CD:81:67:2C:2A:F0:F5:15:B5:88:CD:E2:EA:D4:64:FA:3B:E1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246CF7ED455785626763FC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/329e9fdd-67bd-333f-ab94-30b69ab41416.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 71.168.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:cf:7e:d4:55:78:56:26:76:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=030d7584-5044-411e-9147-446f43da3c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:fa:df:9a:b4:be:d6:6d:32:2c:89:bf:a2: 01:03:f8:a1:6c:84:9b:44:a8:28:c0:f6:c6:77:a8: 61:6d:5f:e6:45:79:48:07:44:65:93:ca:d7:ff:23: d1:3d:e3:38:8c:66:31:1c:54:f0:6b:90:95:9a:1a: 0f:f2:06:0d:60:68:1d:9a:3d:4e:b5:3f:5a:5f:aa: a2:8c:c6:be:3d:af:f4:86:9e:cd:0e:45:fb:ba:4f: d9:1c:7e:07:66:88:72:08:f7:c0:a3:92:f7:88:2e: 86:32:31:5c:3d:d4:85:f1:94:79:07:7b:0f:09:14: 9d:ed:56:c1:b8:67:d2:dc:ea:96:3d:a9:8a:e6:d1: 75:87:d3:07:b0:9b:ec:50:6d:6d:04:95:1a:b4:97: 90:da:25:db:91:d7:2a:5e:42:98:7d:a4:34:c1:fb: 73:b1:a7:90:d3:e7:bb:af:dc:d5:8f:ab:46:03:63: ac:06:ad:76:1e:9e:bc:47:83:a6:25:22:44:33:e8: 0a:e7:0c:d9:46:8d:17:31:26:b2:b9:3f:c1:eb:79: 07:56:a5:74:60:03:56:d6:f9:75:f5:5e:1d:aa:05: bf:5d:a3:17:6c:1f:6f:b3:9e:c5:bd:f7:01:ce:fa: 58:ac:7f:dd:18:9e:22:0a:6f:2f:20:64:1e:a9:39: 2e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0B:CD:81:67:2C:2A:F0:F5:15:B5:88:CD:E2:EA:D4:64:FA:3B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/329e9fdd-67bd-333f-ab94-30b69ab41416.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.168.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:77:cd:db:63:d1:10:f0:c0:dd:12:af:65:d4:ed:93:4a:a9: 59:3c:d6:48:0d:ab:57:d3:02:9a:fa:fb:de:a6:e3:b2:09:45: 6b:c6:81:51:b0:e6:e5:ed:85:9a:e4:c8:51:b5:4b:48:45:6d: 11:37:06:ac:53:26:8e:56:00:43:1d:aa:99:ab:b0:ee:c2:5d: 4a:12:49:10:8f:67:9f:7a:5c:ff:d6:60:c0:39:cf:5b:1b:e9: 0e:fc:99:2d:fa:3e:b9:59:e2:7a:5e:07:c4:55:9a:8e:9f:07: aa:03:71:a6:84:b1:bd:79:8c:04:15:38:e0:0b:ec:3f:c6:0e: c2:79:7f:e9:3b:6b:3e:d6:cd:64:5d:72:8c:47:1f:bf:ab:67: 1f:5e:b8:6b:41:c7:22:cf:cc:be:3b:61:e8:83:de:d2:43:4f: 7f:a9:9d:ee:12:92:0f:37:1f:22:2b:75:7d:79:7f:24:9d:f8: fb:ec:d5:33:0c:03:18:74:06:15:66:b5:ee:8b:18:47:4b:8e: 6e:20:d3:46:ed:a3:ae:ff:ff:7a:57:e8:83:28:da:db:04:21: 36:e6:b0:90:1e:6a:69:fe:fb:e9:1e:27:a7:c7:53:4b:b7:c0: 21:dd:27:13:40:0c:87:b2:27:4a:52:6d:4b:46:07:f3:81:b0: fb:f1:63:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRs9+1FV4ViZ2P8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MDMwZDc1ODQtNTA0NC00MTFlLTkxNDctNDQ2ZjQzZGEzYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR/635q0vtZtMiyJv6IBA/ihbISbRKgowPbG d6hhbV/mRXlIB0Rlk8rX/yPRPeM4jGYxHFTwa5CVmhoP8gYNYGgdmj1OtT9aX6qi jMa+Pa/0hp7NDkX7uk/ZHH4HZohyCPfAo5L3iC6GMjFcPdSF8ZR5B3sPCRSd7VbB uGfS3OqWPamK5tF1h9MHsJvsUG1tBJUatJeQ2iXbkdcqXkKYfaQ0wftzsaeQ0+e7 r9zVj6tGA2OsBq12Hp68R4OmJSJEM+gK5wzZRo0XMSayuT/B63kHVqV0YANW1vl1 9V4dqgW/XaMXbB9vs57FvfcBzvpYrH/dGJ4iCm8vIGQeqTkuuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMLzYFnLCrw9RW1iM3i6tRk+jvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzI5ZTlmZGQtNjdiZC0z MzNmLWFiOTQtMzBiNjlhYjQxNDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR6gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH53zdtj0RDwwN0Sr2XU7ZNKqVk81kgNq1fTApr6+96m47IJRWvGgVGw 5uXthZrkyFG1S0hFbRE3BqxTJo5WAEMdqpmrsO7CXUoSSRCPZ596XP/WYMA5z1sb 6Q78mS36PrlZ4npeB8RVmo6fB6oDcaaEsb15jAQVOOAL7D/GDsJ5f+k7az7WzWRd coxHH7+rZx9euGtBxyLPzL47YeiD3tJDT3+pne4Skg83HyIrdX15fySd+Pvs1TMM Axh0BhVmte6LGEdLjm4g00bto67//3pX6IMo2tsEITbmsJAeamn+++keJ6fHU0u3 wCHdJxNADIeyJ0pSbUtGB/OBsPvxYxc= -----END CERTIFICATE-----Generated at Sun Apr 27 04:36:00 2025 by rpki-client