$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9616acc1-d051-3148-b53e-b4dbc9a2f093.roa File: 9616acc1-d051-3148-b53e-b4dbc9a2f093.roa (raw, json) Hash identifier: oql2ajMr9xkP2GV22VxtD5TnkGBeeEWv6ifzH6lq96A= Subject key identifier: 0B:F3:B2:A6:D0:B3:9D:4E:CD:E7:6C:11:AF:20:5A:BB:BA:C7:FC:42 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3DF7D321A8A86AF849700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9616acc1-d051-3148-b53e-b4dbc9a2f093.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.103.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:df:7d:32:1a:8a:86:af:84:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=16a70f8c-683f-4b2a-a8b1-ce59022d633f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5b:5c:f6:0d:0b:0e:80:a0:f3:3c:e3:48:ed: 46:32:0d:b8:c4:3e:2b:71:48:99:cf:eb:39:56:ca: db:09:cb:09:99:c5:62:ec:b9:43:0e:19:20:3b:0b: b3:9f:3a:1d:7a:12:ba:ba:98:db:6c:7a:bb:65:e8: cf:a6:e6:94:41:b4:d5:46:bf:b2:28:50:ea:51:d3: e0:b0:f2:fc:53:9d:19:30:03:65:87:3a:27:3c:ad: e3:fc:10:a6:da:85:02:78:a4:d6:e9:1a:de:b0:4f: 8a:e5:44:3b:07:03:c3:19:7a:f3:e8:b7:8b:f1:73: b4:19:ce:2b:20:36:ac:f8:c9:3a:f5:df:26:92:7e: 36:79:e8:d8:0b:61:ca:64:00:f9:63:0b:71:fb:a1: 0e:95:f6:7e:ba:ee:f1:02:45:ce:cb:8b:c3:15:c7: 01:95:cb:ff:e8:f4:39:31:20:a4:53:e3:d3:5d:ee: b3:32:41:41:0c:9f:17:67:b6:94:86:0e:32:c7:3e: 8e:f7:3e:d2:65:70:62:fb:ce:cb:b9:9f:1f:86:7b: 6c:98:ac:ac:cd:b2:ef:f9:f8:e3:32:ba:c0:01:bb: 96:c1:01:96:4d:9d:de:43:80:ee:31:8b:12:aa:08: 14:27:49:4a:69:12:fe:aa:69:36:54:61:d8:07:96: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F3:B2:A6:D0:B3:9D:4E:CD:E7:6C:11:AF:20:5A:BB:BA:C7:FC:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9616acc1-d051-3148-b53e-b4dbc9a2f093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.103.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:44:a9:fb:85:6d:be:01:a4:52:dd:ec:5b:27:fd:61:00:5c: 0d:d3:92:5a:9c:88:af:35:b3:42:61:21:27:05:76:a9:79:23: 8b:65:f4:89:5e:5d:1e:61:f0:c5:c1:a0:ef:f6:38:e4:f7:17: 79:19:bb:0e:28:20:a9:fd:d0:f2:be:a4:cd:44:af:cc:d7:2b: 46:27:42:1d:f6:5b:27:6c:77:14:77:6a:45:34:bc:5d:ce:43: 4b:f6:42:4f:9b:a1:2e:4e:d7:ae:42:dd:7a:57:cc:fe:58:89: 8d:34:58:fb:a9:cc:06:8f:c2:64:b7:0e:9d:68:36:22:23:6d: 1c:4f:36:86:0b:69:a5:9a:d4:36:64:12:3f:7b:5b:79:24:13: 75:48:bc:0f:58:0e:2c:7d:a7:b7:52:0f:c4:85:f7:ef:ba:86: ec:6e:fc:0f:03:31:ac:fe:c8:96:1d:d9:a0:6a:ba:91:fb:a2: 50:ed:34:73:88:29:25:cb:09:2b:e9:72:d4:c1:30:4a:03:54: d3:53:51:b7:3b:87:65:df:6b:4c:f0:45:65:15:7a:50:ba:7f: 80:84:94:3a:38:45:ff:04:00:42:09:d1:75:63:3f:d6:80:a6: ec:66:fa:ff:f6:02:b9:57:41:7d:8f:e3:bc:fc:a0:76:61:c5: b2:bb:2d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0999MhqKhq+ElwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MTZhNzBmOGMtNjgzZi00YjJhLWE4YjEtY2U1OTAyMmQ2MzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVtc9g0LDoCg8zzjSO1GMg24xD4rcUiZz+s5 VsrbCcsJmcVi7LlDDhkgOwuznzodehK6upjbbHq7ZejPpuaUQbTVRr+yKFDqUdPg sPL8U50ZMANlhzonPK3j/BCm2oUCeKTW6RresE+K5UQ7BwPDGXrz6LeL8XO0Gc4r IDas+Mk69d8mkn42eejYC2HKZAD5Ywtx+6EOlfZ+uu7xAkXOy4vDFccBlcv/6PQ5 MSCkU+PTXe6zMkFBDJ8XZ7aUhg4yxz6O9z7SZXBi+87LuZ8fhntsmKyszbLv+fjj MrrAAbuWwQGWTZ3eQ4DuMYsSqggUJ0lKaRL+qmk2VGHYB5Zy1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvzsqbQs51OzedsEa8gWru6x/xCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTYxNmFjYzEtZDA1MS0z MTQ4LWI1M2UtYjRkYmM5YTJmMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1EqfuFbb4BpFLd7Fsn/WEAXA3TklqciK81s0JhIScFdql5I4tl9Ile XR5h8MXBoO/2OOT3F3kZuw4oIKn90PK+pM1Er8zXK0YnQh32WydsdxR3akU0vF3O Q0v2Qk+boS5O165C3XpXzP5YiY00WPupzAaPwmS3Dp1oNiIjbRxPNoYLaaWa1DZk Ej97W3kkE3VIvA9YDix9p7dSD8SF9++6huxu/A8DMaz+yJYd2aBqupH7olDtNHOI KSXLCSvpctTBMEoDVNNTUbc7h2Xfa0zwRWUVelC6f4CElDo4Rf8EAEIJ0XVjP9aA puxm+v/2ArlXQX2P47z8oHZhxbK7LV8= -----END CERTIFICATE-----Generated at Sat Apr 26 22:35:29 2025 by rpki-client