$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/536ae49e-dd8e-3258-9632-12418f5ff32b.roa File: 536ae49e-dd8e-3258-9632-12418f5ff32b.roa (raw, json) Hash identifier: Aa/+tQvijSJYIJ73OljstwF4sYPS4LDqXgQnCHBBrlE= Subject key identifier: FB:38:75:C7:70:2B:C4:F1:6A:F0:09:A2:35:DA:67:80:95:2E:52:33 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D00AB82F144A46BE7300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/536ae49e-dd8e-3258-9632-12418f5ff32b.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 96.248.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d0:0a:b8:2f:14:4a:46:be:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=df929d13-6e8a-4d9b-ae04-6403dce2961a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:28:78:34:73:6e:fa:02:ab:55:40:36:f5: 97:22:10:d0:a4:a3:e0:4f:05:9e:62:42:15:9a:73: e5:4b:5b:61:8d:e9:b5:fe:61:bb:e7:df:02:c7:85: 31:7f:41:d5:d3:b7:a6:8a:b9:98:d9:24:8d:9f:f5: 4d:52:46:c8:e8:50:f7:71:eb:7d:2b:24:f9:a2:27: 58:4b:25:21:c4:36:65:4c:1a:d7:7d:06:d2:44:2f: 10:93:06:07:d0:8c:37:4c:50:6b:03:aa:2f:18:63: e5:0e:56:4d:f2:24:17:a4:11:a8:4a:6e:7f:27:f3: 20:3a:68:49:c5:b1:8c:61:39:61:3e:a9:7c:92:3c: e8:cd:c1:9b:e2:91:7d:9b:cf:6f:b7:95:5c:2d:21: 69:73:10:b7:b3:b7:f9:80:41:c9:61:c9:3f:08:28: 4b:42:a7:1d:e5:51:28:62:c3:96:de:7b:60:37:0a: 3d:9f:b3:7a:18:5b:b8:cb:28:e3:cc:5a:11:af:79: 92:ec:b3:95:3e:3e:10:f6:61:f7:67:1d:41:b9:e4: 30:a8:9a:9c:aa:80:f5:dc:21:e1:8f:f1:78:b3:c7: b1:10:bf:75:66:62:02:b1:e4:84:8d:01:29:dd:de: d3:9c:99:bf:c0:0c:8a:0a:cd:0e:e8:92:0e:77:d9: 30:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:38:75:C7:70:2B:C4:F1:6A:F0:09:A2:35:DA:67:80:95:2E:52:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/536ae49e-dd8e-3258-9632-12418f5ff32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.248.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5c:0f:bc:92:0b:ed:ca:b4:2b:a0:ab:5c:2f:30:cf:20:28: af:01:d5:10:fd:89:bd:ff:be:ea:70:16:49:28:7b:3b:5d:8d: 80:eb:73:75:ac:69:12:66:a6:f5:0e:3b:ff:8f:31:f0:43:4e: 9a:e7:09:d9:2e:ca:2f:de:93:4f:66:07:69:de:f7:42:64:b6: 98:b9:33:35:fe:23:ba:e6:cd:23:8f:ba:17:1c:68:23:4d:57: 84:7d:1f:c8:e5:13:98:04:cd:0d:45:90:ea:9e:62:ea:8f:3b: ac:7e:b4:b6:19:15:d3:f9:e1:ed:d5:da:55:59:f1:63:18:fd: 30:7e:77:04:f0:3b:f7:8d:c7:84:52:2f:61:f5:86:75:64:84: f3:2c:a8:6b:c5:f7:27:ec:dc:1f:a4:90:d1:b2:0e:f7:a8:08: 22:06:df:67:61:a0:4b:45:52:0c:9d:6d:c5:96:c6:9e:61:b4: 4a:8d:c6:88:17:16:5c:6b:ac:03:77:eb:98:02:37:cc:52:84: c1:22:f8:fc:b0:9c:df:e8:8a:c7:67:1f:81:9a:ba:dd:c7:7d: ad:a2:53:4f:b4:6d:59:40:8c:2d:54:c6:ef:e6:ff:14:b6:27: da:b0:52:3b:f0:67:77:9e:16:53:8c:df:f4:b5:c4:61:9a:97: a9:70:06:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtAKuC8USka+cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZGY5MjlkMTMtNmU4YS00ZDliLWFlMDQtNjQwM2RjZTI5NjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcEoeDRzbvoCq1VANvWXIhDQpKPgTwWeYkIV mnPlS1thjem1/mG7598Cx4Uxf0HV07emirmY2SSNn/VNUkbI6FD3cet9KyT5oidY SyUhxDZlTBrXfQbSRC8QkwYH0Iw3TFBrA6ovGGPlDlZN8iQXpBGoSm5/J/MgOmhJ xbGMYTlhPql8kjzozcGb4pF9m89vt5VcLSFpcxC3s7f5gEHJYck/CChLQqcd5VEo YsOW3ntgNwo9n7N6GFu4yyjjzFoRr3mS7LOVPj4Q9mH3Zx1BueQwqJqcqoD13CHh j/F4s8exEL91ZmICseSEjQEp3d7TnJm/wAyKCs0O6JIOd9kw6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPs4dcdwK8TxavAJojXaZ4CVLlIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTM2YWU0OWUtZGQ4ZS0z MjU4LTk2MzItMTI0MThmNWZmMzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYPhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFcD7ySC+3KtCugq1wvMM8gKK8B1RD9ib3/vupwFkkoeztdjYDrc3Ws aRJmpvUOO/+PMfBDTprnCdkuyi/ek09mB2ne90Jktpi5MzX+I7rmzSOPuhccaCNN V4R9H8jlE5gEzQ1FkOqeYuqPO6x+tLYZFdP54e3V2lVZ8WMY/TB+dwTwO/eNx4RS L2H1hnVkhPMsqGvF9yfs3B+kkNGyDveoCCIG32dhoEtFUgydbcWWxp5htEqNxogX FlxrrAN365gCN8xShMEi+PywnN/oisdnH4Gaut3Hfa2iU0+0bVlAjC1Uxu/m/xS2 J9qwUjvwZ3eeFlOM3/S1xGGal6lwBgo= -----END CERTIFICATE-----Generated at Sun Apr 27 00:18:40 2025 by rpki-client