$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63e315a6-b138-3a66-ad2a-0c92cdb1f8f0.roa File: 63e315a6-b138-3a66-ad2a-0c92cdb1f8f0.roa (raw, json) Hash identifier: 8pFSIMM4SoDW6gh/vy5daJFYfUpxeNhWkBeKkpwmg8M= Subject key identifier: 71:E8:E2:3C:81:BF:82:64:2B:1D:46:94:47:B7:6F:CA:24:9D:D8:C3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3EAD5C376E28175A6FBC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63e315a6-b138-3a66-ad2a-0c92cdb1f8f0.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.108.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:ea:d5:c3:76:e2:81:75:a6:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=b706dd9c-6b07-433a-a89a-701c6e337720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c5:9a:e1:e4:bc:ca:1c:cd:6a:ec:fe:09:ca: 46:cf:5e:c6:ba:31:8a:b5:b1:c2:57:7e:47:de:2a: fc:77:e6:de:51:0e:2f:34:77:23:94:25:c2:de:1a: 3f:ec:a6:43:5d:9f:8d:d9:69:2d:43:e6:6f:a0:3c: ba:a7:7d:62:30:28:46:31:68:96:27:5b:82:61:21: 7e:80:25:61:76:bd:dc:f9:16:a4:d2:62:8e:fe:41: 47:d9:db:69:b4:85:7e:15:9d:68:31:eb:a1:01:54: 17:47:8a:ee:7b:8f:7d:69:c2:68:28:5e:51:ae:8b: d3:7e:de:33:e2:79:51:d1:ba:f4:06:b0:ae:2b:d1: de:eb:6b:c1:98:c0:07:6c:c7:46:43:07:d5:13:ed: 29:20:f0:d7:69:df:95:0c:f6:4b:35:02:9c:cf:ac: a0:53:cd:a3:e5:f1:de:50:04:9f:0d:3b:19:a1:ea: 14:24:1d:7b:be:7a:80:a6:41:16:9c:88:41:a5:a4: e0:bd:8f:a3:1f:83:96:2a:90:70:a5:ee:5b:69:bf: d2:eb:b0:62:a7:48:73:78:64:06:f8:1c:98:b9:b6: 64:a8:9d:ed:14:65:6a:41:2a:57:84:7a:e5:e5:1d: 16:f1:31:e6:bb:00:32:36:50:fe:4d:4f:45:c4:ad: d7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E8:E2:3C:81:BF:82:64:2B:1D:46:94:47:B7:6F:CA:24:9D:D8:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63e315a6-b138-3a66-ad2a-0c92cdb1f8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ff:88:96:8b:5e:02:a6:3a:82:77:99:84:1f:1b:0b:db:b3: da:32:2d:6c:3a:0d:45:35:3f:65:92:c2:88:b1:90:f8:2c:e0: 11:f4:14:a6:a3:b8:68:22:cc:62:08:57:c0:20:fd:94:59:88: 0a:3f:16:d1:02:31:db:59:d7:1b:37:a0:5b:fe:df:7e:2e:5b: 71:af:ed:22:af:65:67:58:77:ec:65:d3:b9:9f:cc:64:e0:58: 20:4d:f0:49:48:1b:95:08:aa:6d:bd:79:ce:3b:e4:84:b1:f3: d2:c3:9b:1c:87:0f:d5:91:5c:1b:aa:5b:f2:f4:75:35:8f:08: 2f:24:54:16:dc:3b:8e:ae:14:09:02:de:46:a4:9f:d5:42:60: 40:30:0a:e8:5f:5d:16:de:74:66:57:63:97:60:fa:e2:f2:a6: d9:b1:2c:c8:2b:58:18:75:e8:e4:1a:f0:e3:ee:d0:0d:7c:87: b7:56:59:1d:b8:b2:14:d3:5b:0c:6b:10:3c:b9:e4:f3:cb:b9: 1c:4f:e3:fc:17:02:4c:2e:58:fc:2a:fd:00:df:cc:f6:46:b0: ea:39:17:e7:73:c7:1d:f5:ed:a4:61:27:a5:ef:e2:3f:0a:17: 1e:5b:c7:a4:46:0e:ce:29:0d:c1:ac:10:e3:55:66:15:cb:27: d6:86:71:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+rVw3bigXWm+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk YjcwNmRkOWMtNmIwNy00MzNhLWE4OWEtNzAxYzZlMzM3NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsWa4eS8yhzNauz+CcpGz17GujGKtbHCV35H 3ir8d+beUQ4vNHcjlCXC3ho/7KZDXZ+N2WktQ+ZvoDy6p31iMChGMWiWJ1uCYSF+ gCVhdr3c+Rak0mKO/kFH2dtptIV+FZ1oMeuhAVQXR4rue499acJoKF5RrovTft4z 4nlR0br0BrCuK9He62vBmMAHbMdGQwfVE+0pIPDXad+VDPZLNQKcz6ygU82j5fHe UASfDTsZoeoUJB17vnqApkEWnIhBpaTgvY+jH4OWKpBwpe5bab/S67Bip0hzeGQG +ByYubZkqJ3tFGVqQSpXhHrl5R0W8THmuwAyNlD+TU9FxK3XrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHo4jyBv4JkKx1GlEe3b8okndjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjNlMzE1YTYtYjEzOC0z YTY2LWFkMmEtMGM5MmNkYjFmOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHT/iJaLXgKmOoJ3mYQfGwvbs9oyLWw6DUU1P2WSwoixkPgs4BH0FKaj uGgizGIIV8Ag/ZRZiAo/FtECMdtZ1xs3oFv+334uW3Gv7SKvZWdYd+xl07mfzGTg WCBN8ElIG5UIqm29ec475ISx89LDmxyHD9WRXBuqW/L0dTWPCC8kVBbcO46uFAkC 3kakn9VCYEAwCuhfXRbedGZXY5dg+uLyptmxLMgrWBh16OQa8OPu0A18h7dWWR24 shTTWwxrEDy55PPLuRxP4/wXAkwuWPwq/QDfzPZGsOo5F+dzxx317aRhJ6Xv4j8K Fx5bx6RGDs4pDcGsEONVZhXLJ9aGcWY= -----END CERTIFICATE-----Generated at Wed Apr 30 14:12:43 2025 by rpki-client