$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71bf8c6f-429c-3ca3-adf3-005f6ab5a4c9.roa File: 71bf8c6f-429c-3ca3-adf3-005f6ab5a4c9.roa (raw, json) Hash identifier: lgXFMst1shsPX8fWKVPqAlo57I03zstfSfGKhW8gZAI= Subject key identifier: E0:07:58:03:57:B1:27:3E:22:40:AE:B6:FE:78:D4:9E:A1:C8:B8:17 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3E1DDF845B723638FB380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71bf8c6f-429c-3ca3-adf3-005f6ab5a4c9.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.109.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:e1:dd:f8:45:b7:23:63:8f:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=e37a3de2-3b45-4dcc-92e1-d6d55fbbeec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:10:52:79:05:6d:6d:02:f0:73:80:ca:67: 74:ed:5d:7e:f3:90:cd:dc:b6:d8:cb:08:6d:6c:7e: 60:73:0c:ae:d3:bd:66:d7:cf:fc:39:d4:7f:b7:bb: 3e:f0:74:54:3b:e7:18:ff:b4:97:ea:f8:d1:5b:a0: 4c:41:cf:88:6d:e0:7f:db:d2:a0:bf:c5:d1:4e:5a: 99:d4:f1:1f:80:5f:e8:bd:c2:be:51:18:c9:64:8f: 3c:c7:89:26:c3:57:f0:b2:70:ae:37:5d:a9:cc:ba: 36:cb:96:b7:64:88:c8:fd:cb:a0:e7:bb:d5:f3:8e: 67:84:e2:37:e6:e8:a3:db:c1:4d:bd:6e:5b:43:d6: c0:2b:be:28:84:75:63:bb:f8:f3:c6:9f:77:02:7d: 0c:86:3e:b2:56:99:e8:a1:a6:75:a3:52:42:6c:5d: da:94:25:ed:e2:1a:ff:77:f3:00:10:9f:3b:8f:45: c8:20:5e:c0:6b:35:1e:c8:21:7e:5c:78:1a:01:c6: 70:a6:14:03:77:98:3f:c6:46:b0:59:5f:23:e1:3b: 14:a1:4c:12:1a:57:77:98:57:dc:11:b7:80:4f:ec: 0b:8a:a1:8b:56:13:4c:88:cd:8a:27:39:72:ac:61: 9c:11:53:24:40:15:2f:69:12:87:2c:64:4e:71:2c: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:07:58:03:57:B1:27:3E:22:40:AE:B6:FE:78:D4:9E:A1:C8:B8:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71bf8c6f-429c-3ca3-adf3-005f6ab5a4c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.109.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f8:3b:73:52:b1:7f:b9:07:13:bd:f5:e3:57:7d:6c:87:55: 11:9d:a3:54:61:38:3a:01:30:06:1a:7a:18:de:d4:b9:5a:24: 52:4c:ff:29:32:ec:08:fd:12:b0:01:2a:f7:aa:94:32:9a:1d: 66:f2:2c:d4:fa:81:45:fa:67:11:a6:4d:cd:0d:54:34:b4:85: bc:cc:f9:06:6d:68:70:e7:82:ec:1c:57:82:a2:f5:a9:4c:fb: ca:d5:05:f0:8a:6a:10:ae:22:56:98:e2:97:4b:36:83:b0:0e: 91:d5:6b:a3:a6:b2:a6:7e:8a:6b:af:f9:f7:3f:b1:d1:5f:08: 0d:32:09:47:71:80:d1:52:e4:cd:a6:c2:0a:1f:6c:20:8e:44: 09:f6:3e:d8:da:e8:31:e2:db:a1:b6:99:e7:20:bb:66:b8:ef: 1f:b1:03:0c:87:e8:b3:d4:69:46:7d:81:6a:40:a2:2e:c7:9d: dc:a0:7a:4b:45:a1:81:c2:1f:37:71:85:0a:9e:6b:cf:68:55: 53:05:e6:ad:ce:48:fa:ed:f4:bd:5a:62:cd:21:73:9e:21:f8: 7f:72:e6:01:b0:00:eb:f1:86:c3:86:98:0a:db:d8:5c:9c:61: 9d:a3:a0:09:cb:1b:fc:2d:63:2a:82:3e:af:c5:5c:c6:61:17: 91:c0:35:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+Hd+EW3I2OPs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk ZTM3YTNkZTItM2I0NS00ZGNjLTkyZTEtZDZkNTVmYmJlZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb0QUnkFbW0C8HOAymd07V1+85DN3LbYywht bH5gcwyu071m18/8OdR/t7s+8HRUO+cY/7SX6vjRW6BMQc+IbeB/29Kgv8XRTlqZ 1PEfgF/ovcK+URjJZI88x4kmw1fwsnCuN12pzLo2y5a3ZIjI/cug57vV845nhOI3 5uij28FNvW5bQ9bAK74ohHVju/jzxp93An0Mhj6yVpnooaZ1o1JCbF3alCXt4hr/ d/MAEJ87j0XIIF7AazUeyCF+XHgaAcZwphQDd5g/xkawWV8j4TsUoUwSGld3mFfc EbeAT+wLiqGLVhNMiM2KJzlyrGGcEVMkQBUvaRKHLGROcSwR0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAHWANXsSc+IkCutv541J6hyLgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzFiZjhjNmYtNDI5Yy0z Y2EzLWFkZjMtMDA1ZjZhYjVhNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSG2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH4O3NSsX+5BxO99eNXfWyHVRGdo1RhODoBMAYaehje1LlaJFJM/yky 7Aj9ErABKveqlDKaHWbyLNT6gUX6ZxGmTc0NVDS0hbzM+QZtaHDnguwcV4Ki9alM +8rVBfCKahCuIlaY4pdLNoOwDpHVa6OmsqZ+imuv+fc/sdFfCA0yCUdxgNFS5M2m wgofbCCORAn2Ptja6DHi26G2mecgu2a47x+xAwyH6LPUaUZ9gWpAoi7HndygektF oYHCHzdxhQqea89oVVMF5q3OSPrt9L1aYs0hc54h+H9y5gGwAOvxhsOGmArb2Fyc YZ2joAnLG/wtYyqCPq/FXMZhF5HANZE= -----END CERTIFICATE-----Generated at Sun Apr 27 11:41:35 2025 by rpki-client