$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ac5ec2e-a74b-3007-a0d7-37a634bf1338.roa File: 4ac5ec2e-a74b-3007-a0d7-37a634bf1338.roa (raw, json) Hash identifier: NQilW7hvV2l3pc6Hjhz/rkdtIlovSkK+65c4Vo3TGCg= Subject key identifier: F4:39:72:C9:E6:4B:F6:B4:53:53:35:EC:A8:C5:B9:D9:F5:13:76:D6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C2B915BE43C9410CAEA80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ac5ec2e-a74b-3007-a0d7-37a634bf1338.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 70.18.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:2b:91:5b:e4:3c:94:10:ca:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=3edd750a-83bb-49cb-b0d0-bd8e26afbb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:16:9e:dc:25:c8:26:8a:af:9d:09:8a:0d:8c: 81:46:87:2b:c3:a6:9b:ca:99:ab:04:5e:fe:a0:11: 9d:be:89:40:96:d7:f2:aa:06:4c:5b:bd:10:7e:91: ca:1a:a2:38:ab:ef:df:f5:37:ed:87:4b:7b:54:f3: 39:d4:75:90:ed:91:e3:6a:56:c4:2d:b3:55:3e:70: cd:c0:f9:0b:88:51:a6:d4:91:61:e2:7c:87:a0:30: 72:3b:a4:7b:04:9c:59:d4:ae:b5:3b:ad:3d:bf:6b: 83:30:37:5d:55:cf:d9:b8:4b:05:c8:82:6c:b1:47: 77:36:06:b2:d3:a0:0a:8f:1c:62:8c:4f:70:02:9a: 7a:07:a4:31:ed:97:97:bc:35:1c:02:5c:64:3e:12: a6:1d:e0:70:6b:70:ea:2d:a4:1c:6c:ca:13:30:9a: 23:03:d7:69:7e:b8:0b:ea:35:25:ab:1e:4f:69:4d: bc:e1:69:5e:32:1a:ef:f8:47:fa:6d:a9:3f:bb:7f: 2b:94:c1:22:51:b0:d8:4a:3f:ea:7d:a9:a8:c7:b4: 5e:f9:3c:45:7f:a1:f2:93:71:29:0d:58:53:08:64: a8:2a:8d:fb:ea:b7:06:e7:13:ee:22:5d:b2:e5:c1: de:1b:b9:f1:be:d2:3f:cf:f9:5e:ab:34:e6:cb:58: f4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:39:72:C9:E6:4B:F6:B4:53:53:35:EC:A8:C5:B9:D9:F5:13:76:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ac5ec2e-a74b-3007-a0d7-37a634bf1338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.18.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a4:7e:59:da:8e:e9:51:28:07:8b:b6:2a:9f:4a:32:90:6b: 3a:ee:e1:c5:b1:da:58:ff:28:b2:54:bb:93:f0:e8:9a:e5:b0: 6a:5e:be:5f:bd:ff:23:fe:f0:5b:ff:6b:28:cf:50:0d:b3:3c: 91:68:a6:44:da:57:f1:5b:e6:ce:13:ea:6b:ec:c2:9d:df:80: 89:df:e5:c5:85:f8:a5:54:b7:8a:ca:24:cb:89:d6:2a:5c:a1: 43:0a:5d:e6:df:da:9c:c1:23:c9:38:e4:f0:53:ac:e5:8c:84: 6e:1a:7d:e2:6e:37:d9:ca:40:35:ef:26:d3:4c:d2:67:1b:3a: 90:bc:2a:20:77:9c:44:16:9c:23:9b:4f:5e:16:9b:76:3a:db: 24:2f:af:e8:d3:17:2f:57:c7:43:80:c5:59:f2:61:85:4d:cb: 28:1d:8a:e4:dd:32:e4:a1:67:1c:18:42:e3:d8:39:2e:92:d2: 9a:94:03:43:c9:4d:5a:a6:fb:85:d7:c3:97:a5:12:28:76:19: 7d:09:36:da:f8:2f:f1:57:45:52:65:93:ef:0b:69:9f:d6:8b: c4:c0:9f:65:04:8b:77:96:59:d6:f0:87:47:ed:5c:c4:0c:56: 98:b3:18:4e:b2:c4:0b:ab:21:8c:7b:b6:23:26:cd:8e:45:33: ea:3c:8d:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCuRW+Q8lBDK6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk M2VkZDc1MGEtODNiYi00OWNiLWIwZDAtYmQ4ZTI2YWZiYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBae3CXIJoqvnQmKDYyBRocrw6abypmrBF7+ oBGdvolAltfyqgZMW70QfpHKGqI4q+/f9Tfth0t7VPM51HWQ7ZHjalbELbNVPnDN wPkLiFGm1JFh4nyHoDByO6R7BJxZ1K61O609v2uDMDddVc/ZuEsFyIJssUd3Ngay 06AKjxxijE9wApp6B6Qx7ZeXvDUcAlxkPhKmHeBwa3DqLaQcbMoTMJojA9dpfrgL 6jUlqx5PaU284WleMhrv+Ef6bak/u38rlMEiUbDYSj/qfamox7Re+TxFf6Hyk3Ep DVhTCGSoKo376rcG5xPuIl2y5cHeG7nxvtI/z/leqzTmy1j0PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ5csnmS/a0U1M17KjFudn1E3bWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGFjNWVjMmUtYTc0Yi0z MDA3LWEwZDctMzdhNjM0YmYxMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRhIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOkflnajulRKAeLtiqfSjKQazru4cWx2lj/KLJUu5Pw6JrlsGpevl+9 /yP+8Fv/ayjPUA2zPJFopkTaV/Fb5s4T6mvswp3fgInf5cWF+KVUt4rKJMuJ1ipc oUMKXebf2pzBI8k45PBTrOWMhG4afeJuN9nKQDXvJtNM0mcbOpC8KiB3nEQWnCOb T14Wm3Y62yQvr+jTFy9Xx0OAxVnyYYVNyygdiuTdMuShZxwYQuPYOS6S0pqUA0PJ TVqm+4XXw5elEih2GX0JNtr4L/FXRVJlk+8LaZ/Wi8TAn2UEi3eWWdbwh0ftXMQM VpizGE6yxAurIYx7tiMmzY5FM+o8jcA= -----END CERTIFICATE-----Generated at Sun Apr 27 13:09:42 2025 by rpki-client