$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c653d29-3ae2-334a-a734-b80722690ac3.roa File: 3c653d29-3ae2-334a-a734-b80722690ac3.roa (raw, json) Hash identifier: 0yPtd9MJ0XXH41Sr1QaSSgK6SpfeyvspubxENaqS/Qg= Subject key identifier: 00:BE:A5:E5:34:60:C2:50:BA:92:9C:24:47:A7:EA:5F:D2:B0:44:01 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC067F8E51233FA88C9F20 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c653d29-3ae2-334a-a734-b80722690ac3.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.104.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:06:7f:8e:51:23:3f:a8:8c:9f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=d88d3a57-b7de-48c9-bfb8-23d6cbf372c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2e:ae:bf:71:53:41:b9:14:04:06:c9:aa:59: 00:53:ec:ae:7f:91:26:62:c0:f2:5b:c8:76:4a:c3: a1:f0:76:1c:95:c5:8b:91:cc:0c:4c:99:a4:05:1b: 4b:bf:08:3c:15:41:d8:14:a7:af:b6:29:43:c3:59: 76:f9:e0:2a:2a:bd:66:cb:19:47:5e:23:76:85:8f: d7:89:c2:b6:05:01:38:39:4c:3e:9e:6c:16:7c:7e: 25:ea:04:36:3d:c4:d7:e3:d1:fe:79:e9:6a:bb:6f: 94:97:b8:39:10:97:a4:59:af:c2:45:8e:41:b1:a4: 64:25:13:62:14:f3:f5:6c:5a:10:01:27:ae:1e:e7: d8:5c:c9:f5:05:1c:aa:d2:39:e2:37:28:ce:ba:5a: 6e:a3:38:02:29:d9:2e:e7:83:17:83:0b:08:40:b9: 38:d2:07:4e:3e:5f:c9:ad:72:38:84:a8:2e:86:eb: 88:09:b7:bd:f4:1a:2c:2b:98:31:6a:9e:6a:07:14: 3b:03:c0:b2:ae:5d:6a:f5:c3:1c:72:ff:1d:7e:ba: db:ef:c0:09:ca:27:9b:50:63:c3:8a:57:8f:52:7d: 80:2e:5f:e4:ed:b6:a2:73:81:db:b6:ad:fe:c2:5c: 08:58:67:c9:e8:39:fa:3b:6d:88:19:4f:07:9d:ec: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BE:A5:E5:34:60:C2:50:BA:92:9C:24:47:A7:EA:5F:D2:B0:44:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c653d29-3ae2-334a-a734-b80722690ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.104.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:63:78:28:06:64:c4:b4:78:f3:60:e9:93:c6:ae:08:ef:a3: 1f:32:04:dc:1e:20:32:7c:c0:af:63:fe:2b:22:46:01:c9:a5: 5f:38:77:86:d0:91:4f:62:5c:0e:72:3a:e7:9b:16:25:06:bc: bd:6c:07:2a:af:ae:ec:2c:78:d8:91:41:5b:98:d7:bc:15:cc: 9b:f7:25:ee:63:3e:f4:22:29:48:96:03:24:fe:b8:4a:75:0d: 00:2c:96:35:a9:a6:32:27:11:24:0b:5c:ff:e4:c5:82:44:3a: a7:6d:4a:e9:47:74:d6:a5:83:a4:b7:30:b6:91:42:15:8b:2d: 9c:4d:bf:d8:b9:ba:8e:78:78:9b:28:f1:af:13:3d:6c:48:98: e2:63:a7:ed:6f:74:77:b4:93:e3:a4:35:29:70:67:1e:c2:34: 3e:56:a4:dd:4c:2a:58:9d:e1:62:65:7e:13:f3:d9:9d:8a:ba: de:6c:82:4c:14:db:ce:21:1a:74:fd:8d:be:30:51:c1:cf:6f: 3d:a7:7d:4d:a2:1a:f9:fb:60:8d:76:b0:b3:73:d7:39:5a:06: 49:d3:9f:5d:c5:e6:74:45:1e:e3:f0:89:b5:d6:e5:3a:eb:71: 41:f8:da:97:1a:63:63:c7:4f:a8:66:7d:8b:99:21:2f:a6:01: 69:2c:6c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AZ/jlEjP6iMnyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDg4ZDNhNTctYjdkZS00OGM5LWJmYjgtMjNkNmNiZjM3MmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi6uv3FTQbkUBAbJqlkAU+yuf5EmYsDyW8h2 SsOh8HYclcWLkcwMTJmkBRtLvwg8FUHYFKevtilDw1l2+eAqKr1myxlHXiN2hY/X icK2BQE4OUw+nmwWfH4l6gQ2PcTX49H+eelqu2+Ul7g5EJekWa/CRY5BsaRkJRNi FPP1bFoQASeuHufYXMn1BRyq0jniNyjOulpuozgCKdku54MXgwsIQLk40gdOPl/J rXI4hKguhuuICbe99BosK5gxap5qBxQ7A8Cyrl1q9cMccv8dfrrb78AJyiebUGPD ilePUn2ALl/k7baic4Hbtq3+wlwIWGfJ6Dn6O22IGU8HnexSGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC+peU0YMJQupKcJEen6l/SsEQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2M2NTNkMjktM2FlMi0z MzRhLWE3MzQtYjgwNzIyNjkwYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEljeCgGZMS0ePNg6ZPGrgjvox8yBNweIDJ8wK9j/isiRgHJpV84d4bQ kU9iXA5yOuebFiUGvL1sByqvruwseNiRQVuY17wVzJv3Je5jPvQiKUiWAyT+uEp1 DQAsljWppjInESQLXP/kxYJEOqdtSulHdNalg6S3MLaRQhWLLZxNv9i5uo54eJso 8a8TPWxImOJjp+1vdHe0k+OkNSlwZx7CND5WpN1MKlid4WJlfhPz2Z2Kut5sgkwU 284hGnT9jb4wUcHPbz2nfU2iGvn7YI12sLNz1zlaBknTn13F5nRFHuPwibXW5Trr cUH42pcaY2PHT6hmfYuZIS+mAWksbAI= -----END CERTIFICATE-----Generated at Sat Apr 26 22:59:36 2025 by rpki-client