$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39f30301-e56b-37ed-93fc-a5cf90f2ec7a.roa File: 39f30301-e56b-37ed-93fc-a5cf90f2ec7a.roa (raw, json) Hash identifier: QC1tQ25WoiMfjWlRByacxPB6CTTYMNv2xeSPOdiy75U= Subject key identifier: 89:45:73:4A:2D:56:A6:AD:DE:75:70:17:89:26:B1:D2:B5:1F:1B:79 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858498986736302B769365B954D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39f30301-e56b-37ed-93fc-a5cf90f2ec7a.roa Signing time: Tue 15 Apr 2025 19:10:28 +0000 ROA not before: Tue 15 Apr 2025 19:10:28 +0000 ROA not after: Mon 14 Jul 2025 19:10:28 +0000 asID: 17119 IP address blocks: 208.239.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:89:86:73:63:02:b7:69:36:5b:95:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 15 19:10:28 2025 GMT Not After : Jul 14 19:10:28 2025 GMT Subject: CN=62760d42-3d2c-4554-b235-eb0cd8798a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2c:d4:93:73:97:9d:9f:1d:dc:95:ac:44:26: a1:72:7a:2b:4c:ca:02:95:87:0b:25:20:68:4c:6a: f7:21:dd:15:7f:d7:9f:80:97:47:a5:3f:5c:48:86: e4:0b:0f:62:9d:58:d8:c6:ce:49:53:35:6e:2e:d5: 09:f0:d6:73:5d:45:07:cc:ec:1b:42:b3:bf:8f:a0: 59:4d:aa:ef:a0:6e:20:68:9f:5c:ee:57:77:14:7e: ba:ae:25:93:77:e7:e4:1e:a6:7b:fb:98:c0:ff:96: c5:64:e5:b2:95:58:a1:ef:b1:3c:9a:e0:ba:37:03: b3:b6:f7:bc:94:9d:e1:b6:f8:27:83:ef:0d:a3:09: 21:eb:3b:ea:d1:f3:4b:af:14:fe:9e:44:31:24:82: b7:24:65:6b:fe:d4:66:28:32:98:a5:99:d7:1e:3a: 3b:40:03:e7:b6:41:f3:0c:2f:df:ba:d5:54:33:32: c8:31:b2:9c:a7:fd:72:4c:d3:67:c3:bd:3f:44:37: c0:8e:89:8c:c6:e1:3a:9c:9a:da:67:60:93:be:ee: 52:59:bd:ae:84:19:59:aa:82:9b:d0:6e:66:89:15: 9a:6e:80:2a:c0:fa:ef:87:ef:41:65:72:08:6d:00: 58:7f:43:83:d4:0d:19:42:3d:59:83:76:8e:b5:52: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:45:73:4A:2D:56:A6:AD:DE:75:70:17:89:26:B1:D2:B5:1F:1B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39f30301-e56b-37ed-93fc-a5cf90f2ec7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.239.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b1:28:0f:11:24:1a:58:d7:d2:d7:06:64:cb:bb:05:7f:e7: 36:67:31:d8:7a:d3:36:1a:95:fa:a7:1c:89:f0:05:22:03:c7: 8e:31:3b:60:bc:c4:83:47:27:63:dc:36:2c:93:66:a1:48:84: 52:8c:43:9e:a7:12:b1:72:ee:39:98:06:7f:ec:c2:ae:52:cf: 44:56:a3:4d:77:08:6a:9b:62:18:42:c5:30:4f:dd:00:8f:42: df:35:ce:b0:63:3a:57:8e:c6:c8:db:da:66:5e:6a:29:36:c6: fe:31:41:6a:4e:8b:96:88:85:d6:55:09:3d:82:12:b2:94:4e: 7b:74:11:2a:8b:ed:32:12:5c:23:d4:6e:07:13:68:93:90:69: ef:1c:73:c8:51:11:3f:21:b9:00:06:f7:9e:60:c6:41:99:de: 14:d1:5e:01:87:11:54:de:68:1a:4b:9f:9e:cf:4b:b7:94:7f: 94:13:8d:df:cc:5b:b7:9e:51:d8:6b:8f:1f:39:7f:a3:5f:fb: a2:60:fe:ff:e0:92:40:e9:93:8d:c4:8a:af:cb:6d:e7:9b:36: 46:2b:eb:b4:a3:cd:01:b9:fb:5b:89:70:6a:35:18:1a:70:5a: ae:d5:9e:57:38:4e:ed:15:6c:75:48:66:90:0a:d8:47:e9:a3: ba:da:74:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmJhnNjArdpNluVTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxNTE5MTAyOFoXDTI1MDcxNDE5MTAyOFowLzEtMCsGA1UEAxMk NjI3NjBkNDItM2QyYy00NTU0LWIyMzUtZWIwY2Q4Nzk4YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SzUk3OXnZ8d3JWsRCahcnorTMoClYcLJSBo TGr3Id0Vf9efgJdHpT9cSIbkCw9inVjYxs5JUzVuLtUJ8NZzXUUHzOwbQrO/j6BZ TarvoG4gaJ9c7ld3FH66riWTd+fkHqZ7+5jA/5bFZOWylVih77E8muC6NwOztve8 lJ3htvgng+8Nowkh6zvq0fNLrxT+nkQxJIK3JGVr/tRmKDKYpZnXHjo7QAPntkHz DC/futVUMzLIMbKcp/1yTNNnw70/RDfAjomMxuE6nJraZ2CTvu5SWb2uhBlZqoKb 0G5miRWaboAqwPrvh+9BZXIIbQBYf0OD1A0ZQj1Zg3aOtVKCkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlFc0otVqat3nVwF4kmsdK1Hxt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzlmMzAzMDEtZTU2Yi0z N2VkLTkzZmMtYTVjZjkwZjJlYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0O9MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEexKA8RJBpY19LXBmTLuwV/5zZnMdh60zYalfqnHInwBSIDx44xO2C8 xINHJ2PcNiyTZqFIhFKMQ56nErFy7jmYBn/swq5Sz0RWo013CGqbYhhCxTBP3QCP Qt81zrBjOleOxsjb2mZeaik2xv4xQWpOi5aIhdZVCT2CErKUTnt0ESqL7TISXCPU bgcTaJOQae8cc8hRET8huQAG955gxkGZ3hTRXgGHEVTeaBpLn57PS7eUf5QTjd/M W7eeUdhrjx85f6Nf+6Jg/v/gkkDpk43Eiq/LbeebNkYr67SjzQG5+1uJcGo1GBpw Wq7Vnlc4Tu0VbHVIZpAK2Efpo7radKQ= -----END CERTIFICATE-----Generated at Sun Apr 27 00:11:20 2025 by rpki-client