$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74955ea1-c95c-3e03-8594-4e9406f667b1.roa File: 74955ea1-c95c-3e03-8594-4e9406f667b1.roa (raw, json) Hash identifier: uG+jae+p02AC0HvoP6C5BLf/bqhY9V4JeoavwDq3QwI= Subject key identifier: 09:8C:C0:E0:A5:62:FA:86:30:39:F1:25:1A:B4:28:58:0C:06:20:E9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C2ACE349E521720678B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74955ea1-c95c-3e03-8594-4e9406f667b1.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 71.162.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:2a:ce:34:9e:52:17:20:67:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=20bbccf2-2394-433a-a8e9-26440dea84ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:69:6a:1c:ad:47:c6:e4:12:e1:20:ef:26: b3:20:98:5d:0e:0c:9c:13:1f:10:22:59:51:42:af: a2:cc:99:75:9e:c6:e5:32:13:7a:71:fa:f5:12:50: b9:68:a4:67:86:ef:ff:2c:f9:2c:77:20:01:01:7f: 10:82:f5:29:c5:72:b8:07:00:74:a4:e9:44:0b:81: d2:14:13:83:42:da:c3:bd:ff:a5:a3:46:20:0a:f9: 77:48:94:ad:6b:2f:2f:3d:88:84:87:a0:cc:3e:35: d9:99:93:18:61:1f:39:c9:76:4a:65:ec:15:f9:03: 6e:db:50:dc:d6:dc:76:f5:6f:4d:33:d4:69:c1:a9: 5c:7b:5d:6b:f4:b8:ae:dd:f3:1d:3d:b5:3a:d7:55: 3a:6f:a4:8e:8a:59:cf:50:d3:4a:70:dd:35:6d:70: ce:d7:0f:25:29:f3:43:15:fd:f4:50:62:3e:b5:f0: 9d:61:d6:35:d7:64:98:e7:5b:2d:48:e8:86:44:2d: c6:e7:f1:46:4d:5c:4e:37:66:d1:ef:8e:05:50:58: ab:03:99:13:8e:c3:7d:34:62:0b:09:c8:ea:6e:b8: be:9f:a4:af:35:15:1b:a6:b7:b5:69:e4:b8:c4:28: 2b:35:22:a5:cd:ab:56:f1:32:46:12:22:c7:b0:19: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8C:C0:E0:A5:62:FA:86:30:39:F1:25:1A:B4:28:58:0C:06:20:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74955ea1-c95c-3e03-8594-4e9406f667b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.162.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7d:67:7a:6a:f7:67:b6:61:c2:b8:c4:a7:24:65:f8:7b:71: 35:78:d2:7c:cc:bd:8f:97:64:60:b1:13:74:53:6a:01:5a:b4: 60:b4:c0:83:01:4d:36:7d:f4:d7:dd:7b:82:3f:7f:39:b7:0e: 6f:7e:0c:dd:4b:5a:ad:e8:7d:ff:57:23:1a:e2:69:34:60:c8: 1f:9c:24:42:be:68:e2:10:3e:06:34:8b:c2:12:0a:81:04:29: 3a:43:31:b9:11:22:23:6c:a2:cd:80:23:63:05:d4:9d:99:cf: a7:88:75:83:ed:97:81:f4:e0:f0:af:90:bf:b7:b4:63:83:2e: 26:41:41:fa:8f:b3:11:26:a8:1a:d9:de:54:98:47:0d:0f:b4: a7:02:40:53:76:85:f9:30:1f:ca:37:39:95:02:6a:ab:16:a2: bb:3a:96:7b:49:0e:5c:b8:1d:7c:f6:2a:c5:66:ee:e9:78:d1: 05:26:86:cd:ad:a7:4a:fe:06:61:89:2d:e5:96:9c:65:bf:1d: dc:fa:2a:0b:45:d6:23:30:90:e6:fa:b7:51:f1:33:7d:eb:70: c4:86:e6:ef:57:78:18:7d:c0:c4:3c:17:b9:93:3a:7d:65:46: 51:2f:b9:44:59:b3:14:a3:8b:b5:b0:55:f5:4f:6e:3e:e3:97: 46:79:12:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCrONJ5SFyBni4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MjBiYmNjZjItMjM5NC00MzNhLWE4ZTktMjY0NDBkZWE4NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c1pahytR8bkEuEg7yazIJhdDgycEx8QIllR Qq+izJl1nsblMhN6cfr1ElC5aKRnhu//LPksdyABAX8QgvUpxXK4BwB0pOlEC4HS FBODQtrDvf+lo0YgCvl3SJStay8vPYiEh6DMPjXZmZMYYR85yXZKZewV+QNu21Dc 1tx29W9NM9Rpwalce11r9Liu3fMdPbU611U6b6SOilnPUNNKcN01bXDO1w8lKfND Ff30UGI+tfCdYdY112SY51stSOiGRC3G5/FGTVxON2bR744FUFirA5kTjsN9NGIL Ccjqbri+n6SvNRUbpre1aeS4xCgrNSKlzatW8TJGEiLHsBm3PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmMwOClYvqGMDnxJRq0KFgMBiDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzQ5NTVlYTEtYzk1Yy0z ZTAzLTg1OTQtNGU5NDA2ZjY2N2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR6IgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN9Z3pq92e2YcK4xKckZfh7cTV40nzMvY+XZGCxE3RTagFatGC0wIMB TTZ99Nfde4I/fzm3Dm9+DN1LWq3off9XIxriaTRgyB+cJEK+aOIQPgY0i8ISCoEE KTpDMbkRIiNsos2AI2MF1J2Zz6eIdYPtl4H04PCvkL+3tGODLiZBQfqPsxEmqBrZ 3lSYRw0PtKcCQFN2hfkwH8o3OZUCaqsWors6lntJDly4HXz2KsVm7ul40QUmhs2t p0r+BmGJLeWWnGW/Hdz6KgtF1iMwkOb6t1HxM33rcMSG5u9XeBh9wMQ8F7mTOn1l RlEvuURZsxSji7WwVfVPbj7jl0Z5Etw= -----END CERTIFICATE-----Generated at Mon Apr 28 18:14:55 2025 by rpki-client