$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5116f738-3a7a-36b6-ac6e-1500d371e106.roa File: 5116f738-3a7a-36b6-ac6e-1500d371e106.roa (raw, json) Hash identifier: x1TmCDdedXi5knMg2wHUkeB81BOeCG3cYykahD8tLl8= Subject key identifier: 3F:06:DF:37:00:37:65:6B:B3:8C:6C:85:BF:45:72:0C:5F:3F:89:6B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C34DCA52F07520C73C2C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5116f738-3a7a-36b6-ac6e-1500d371e106.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 72.65.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:34:dc:a5:2f:07:52:0c:73:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=022dbf8c-0573-403a-a6f5-426ad5a95baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:a5:a7:86:2c:76:7b:8e:2d:3a:ed:76:e0: 41:3a:f9:c4:2b:15:1e:99:f8:b8:48:79:59:18:dc: 1f:93:8d:d6:02:f1:8d:c4:62:d9:fe:6f:62:fb:81: c3:67:80:ad:cb:ee:3e:06:1c:87:f4:66:c8:f5:af: 64:67:73:34:40:3e:41:fa:5a:c2:2d:a1:a6:2d:30: 0c:1e:01:3a:de:c9:16:46:1f:b2:ee:bb:87:a6:0b: c9:b3:0a:0a:20:c3:a9:e2:05:c6:d2:61:48:71:81: 8e:1e:c5:65:b9:c1:8d:c2:5a:3a:f6:d4:c3:68:73: 2c:20:db:20:8d:99:39:15:68:25:dd:3e:d1:be:a3: bc:a3:a2:fb:7d:c6:5f:cc:ba:45:75:e1:8e:10:5e: d3:c4:3d:3f:3a:59:a8:d6:ff:37:f0:16:4c:a2:9f: b8:23:b0:f9:e1:d8:91:f9:50:e9:45:c6:49:f5:d7: d0:b4:d8:22:01:ec:a8:93:08:cc:c3:49:be:54:cf: 43:90:49:01:36:83:2f:72:a8:7a:1a:15:91:01:f3: 20:c2:30:cc:21:72:03:84:fa:3a:e3:f9:56:32:1d: 26:75:d6:c7:f8:a4:0f:fe:70:72:d2:6d:cb:79:83: cf:8b:fa:53:05:67:54:6c:7d:bd:af:b0:51:fd:ad: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:06:DF:37:00:37:65:6B:B3:8C:6C:85:BF:45:72:0C:5F:3F:89:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5116f738-3a7a-36b6-ac6e-1500d371e106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.65.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:34:fb:65:86:23:49:fc:d9:c2:19:d5:9d:32:80:83:56:2a: 81:ad:95:c2:3a:3d:6c:48:31:67:8e:9d:70:e9:eb:6d:cf:2b: a0:22:18:a2:2a:3d:d7:59:d7:67:17:66:ed:6a:6b:39:00:da: e3:66:28:cd:7e:36:c0:a6:dc:da:ba:37:ca:d7:e7:f1:55:db: a8:49:08:dd:23:76:08:5b:88:4a:7d:eb:d9:b7:57:69:59:47: 92:de:c9:0e:b3:ef:05:c0:c5:ec:0f:85:5e:34:04:cf:f0:e8: e9:5d:2a:2f:7b:31:56:92:b5:32:ba:eb:85:df:bc:61:4f:98: 64:87:c3:69:fb:aa:8d:5d:24:0b:0f:cc:9a:cd:73:67:4c:f0: c2:2c:96:14:88:a7:11:52:de:f0:73:a0:79:27:6b:dc:94:34: 71:58:3c:47:82:c5:fa:c0:37:81:71:42:d7:54:24:e3:c5:96: 3f:b3:a5:ec:b2:1e:a6:d8:71:40:d2:ac:3a:a0:9d:fd:c6:05: 38:68:0d:b8:91:c0:6b:42:b3:f4:33:74:a4:21:08:8d:1f:52: 98:2d:7f:91:d1:f6:d8:d6:8f:bc:00:0c:db:e8:be:e4:45:97: de:32:97:46:2f:9b:97:8a:fa:40:e8:43:d2:04:af:b9:33:fa: 1c:51:3b:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDTcpS8HUgxzwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MDIyZGJmOGMtMDU3My00MDNhLWE2ZjUtNDI2YWQ1YTk1YmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1ylp4YsdnuOLTrtduBBOvnEKxUemfi4SHlZ GNwfk43WAvGNxGLZ/m9i+4HDZ4Cty+4+BhyH9GbI9a9kZ3M0QD5B+lrCLaGmLTAM HgE63skWRh+y7ruHpgvJswoKIMOp4gXG0mFIcYGOHsVlucGNwlo69tTDaHMsINsg jZk5FWgl3T7RvqO8o6L7fcZfzLpFdeGOEF7TxD0/Olmo1v838BZMop+4I7D54diR +VDpRcZJ9dfQtNgiAeyokwjMw0m+VM9DkEkBNoMvcqh6GhWRAfMgwjDMIXIDhPo6 4/lWMh0mddbH+KQP/nBy0m3LeYPPi/pTBWdUbH29r7BR/a0lTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8G3zcAN2Vrs4xshb9FcgxfP4lrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTExNmY3MzgtM2E3YS0z NmI2LWFjNmUtMTUwMGQzNzFlMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSEEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC40+2WGI0n82cIZ1Z0ygINWKoGtlcI6PWxIMWeOnXDp623PK6AiGKIq PddZ12cXZu1qazkA2uNmKM1+NsCm3Nq6N8rX5/FV26hJCN0jdghbiEp969m3V2lZ R5LeyQ6z7wXAxewPhV40BM/w6OldKi97MVaStTK664XfvGFPmGSHw2n7qo1dJAsP zJrNc2dM8MIslhSIpxFS3vBzoHkna9yUNHFYPEeCxfrAN4FxQtdUJOPFlj+zpeyy HqbYcUDSrDqgnf3GBThoDbiRwGtCs/QzdKQhCI0fUpgtf5HR9tjWj7wADNvovuRF l94yl0Yvm5eK+kDoQ9IEr7kz+hxRO0g= -----END CERTIFICATE-----Generated at Sat Apr 26 22:57:30 2025 by rpki-client