$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77fea8a5-65d2-3763-8908-9c8452de4d41.roa File: 77fea8a5-65d2-3763-8908-9c8452de4d41.roa (raw, json) Hash identifier: fZ5UdmjdMDWlXXfn8sGY+hqMJqEo0zQSz6SmCjFBqeo= Subject key identifier: AD:13:FE:42:D7:40:F0:A6:97:E5:AA:28:EB:65:60:8F:9D:24:6B:33 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F1A21206E59986838100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77fea8a5-65d2-3763-8908-9c8452de4d41.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 70.20.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f1:a2:12:06:e5:99:86:83:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=0bcb9e2e-ad7a-49ca-99da-63131f3a5bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5c:2d:10:dd:8f:60:5c:64:db:ce:b7:16:8e: f5:a1:b4:21:6c:22:e9:45:c1:63:28:f8:65:19:5a: 95:ab:cb:37:c6:af:34:d6:89:82:2a:fa:cf:3d:11: a9:70:e2:e7:43:76:60:ce:ea:15:3a:ac:8f:f7:f4: 6c:14:22:47:55:6b:af:ba:4b:85:9b:66:a8:99:3b: 39:ec:5b:a4:58:e5:10:bc:34:46:91:07:f4:69:64: 93:88:a4:f5:fd:e0:0d:f2:28:a8:64:ca:92:7b:7d: c6:4e:0c:1e:cc:ac:cc:57:a9:44:4a:c0:c8:69:8e: 6a:04:ae:de:8e:b4:82:a1:f0:91:73:8e:9c:c3:0d: 23:46:29:9d:40:1e:70:dc:8f:dc:e4:75:9d:91:a0: 3b:ce:15:6f:bf:3a:c7:6b:59:9c:b9:11:ad:9d:3c: f3:02:f7:a3:eb:9e:10:cb:1c:f5:ea:d6:56:9d:9b: 8d:15:61:af:93:50:8f:51:df:44:98:26:82:50:77: 74:23:3c:0d:0b:16:10:78:4a:5e:e4:a1:08:16:2c: a3:2c:18:73:16:00:ff:c5:83:23:1d:98:bf:f1:18: c1:ce:58:ec:e2:fe:2e:b1:ec:2a:c0:23:92:67:fe: ec:8e:5c:db:68:64:42:f4:c1:06:67:28:a4:c8:8a: 1d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:13:FE:42:D7:40:F0:A6:97:E5:AA:28:EB:65:60:8F:9D:24:6B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77fea8a5-65d2-3763-8908-9c8452de4d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.20.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:dd:d5:28:a9:f2:c7:9c:ea:5d:79:26:21:18:b6:92:21:90: 90:30:60:5e:c6:ae:23:0e:7a:35:2e:3c:3b:99:77:fe:b5:46: 6e:fa:d6:32:42:22:b1:22:df:70:11:76:cb:4a:41:d6:42:0d: 35:05:e4:4c:cf:e6:dc:95:b9:b6:20:b3:15:17:cd:ed:04:19: dd:10:0a:53:e4:76:0a:19:c5:4c:c5:12:ee:33:8c:d1:18:1d: 34:e4:12:82:8c:1a:07:2f:48:61:14:38:f5:0c:c2:12:17:f3: 22:52:fb:33:91:ad:0c:09:e3:39:b3:4e:2d:f2:74:2b:4f:d3: 64:9a:d4:cc:34:e0:87:e8:7e:54:d2:d5:de:ce:de:e8:ad:29: d5:19:87:0c:7a:c5:e3:3f:ca:44:b9:ae:aa:0c:01:a9:c1:65: 58:03:2c:8d:ee:b9:ba:1f:bc:ad:55:9f:d2:a5:58:fc:64:ea: 49:00:a0:a6:11:a7:1c:4b:c2:4c:e8:77:69:93:f1:71:95:e8: 91:63:b9:81:17:6b:1a:db:bc:c2:fc:dc:9c:e3:b8:28:a3:b2: 97:a8:e3:01:ad:14:93:cc:fe:d9:9c:52:a4:43:33:61:e2:b9: 32:da:12:24:ed:ef:a9:19:84:74:f3:95:68:86:2e:b6:7d:3c: 57:f8:1b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvGiEgblmYaDgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MGJjYjllMmUtYWQ3YS00OWNhLTk5ZGEtNjMxMzFmM2E1YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVwtEN2PYFxk2863Fo71obQhbCLpRcFjKPhl GVqVq8s3xq801omCKvrPPRGpcOLnQ3ZgzuoVOqyP9/RsFCJHVWuvukuFm2aomTs5 7FukWOUQvDRGkQf0aWSTiKT1/eAN8iioZMqSe33GTgwezKzMV6lESsDIaY5qBK7e jrSCofCRc46cww0jRimdQB5w3I/c5HWdkaA7zhVvvzrHa1mcuRGtnTzzAvej654Q yxz16tZWnZuNFWGvk1CPUd9EmCaCUHd0IzwNCxYQeEpe5KEIFiyjLBhzFgD/xYMj HZi/8RjBzljs4v4usewqwCOSZ/7sjlzbaGRC9MEGZyikyIodaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0T/kLXQPCml+WqKOtlYI+dJGszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzdmZWE4YTUtNjVkMi0z NzYzLTg5MDgtOWM4NDUyZGU0ZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERhQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXd1Sip8sec6l15JiEYtpIhkJAwYF7GriMOejUuPDuZd/61Rm761jJC IrEi33ARdstKQdZCDTUF5EzP5tyVubYgsxUXze0EGd0QClPkdgoZxUzFEu4zjNEY HTTkEoKMGgcvSGEUOPUMwhIX8yJS+zORrQwJ4zmzTi3ydCtP02Sa1Mw04IfoflTS 1d7O3uitKdUZhwx6xeM/ykS5rqoMAanBZVgDLI3uubofvK1Vn9KlWPxk6kkAoKYR pxxLwkzod2mT8XGV6JFjuYEXaxrbvML83JzjuCijspeo4wGtFJPM/tmcUqRDM2Hi uTLaEiTt76kZhHTzlWiGLrZ9PFf4Gzk= -----END CERTIFICATE-----Generated at Sun Apr 27 04:17:09 2025 by rpki-client