$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8da12-f8f5-3746-a362-c6834b9b3d69.roa File: 96d8da12-f8f5-3746-a362-c6834b9b3d69.roa (raw, json) Hash identifier: tFQdd/Qjgu3CU9a7e2oVhucNMOO4r4RIEjEoWkVDh/o= Subject key identifier: AE:69:D3:A1:AE:6A:4C:F1:CB:6E:2A:32:C3:EA:43:A2:43:60:72:CF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C2ADB3E58E1BE3519A500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8da12-f8f5-3746-a362-c6834b9b3d69.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 71.168.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:2a:db:3e:58:e1:be:35:19:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=f52cf0a9-b314-4f6a-8605-5027e2f70d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8c:53:e8:37:01:64:6e:29:df:8b:a5:d6:d6: f7:71:7d:83:46:22:76:30:09:a0:9b:a6:c2:93:37: dc:a6:3b:78:4d:47:c1:6d:f2:f1:a9:b6:9a:ed:c6: a6:41:91:9d:97:c5:cb:09:56:59:90:ac:60:65:55: 73:55:86:53:34:54:03:0c:4d:86:02:4d:34:de:13: 6c:7d:d7:94:da:37:54:1e:7c:02:c4:db:11:72:e4: 2f:c5:9c:3b:e1:2b:e0:b4:50:ec:a6:15:2d:24:13: 1c:61:89:df:1c:9c:0e:c2:89:94:bb:15:4a:07:ec: b0:1a:93:d0:6e:a6:b1:bb:19:69:16:a2:67:30:49: 38:c5:79:33:a0:2e:83:bc:b7:d5:f2:92:22:ce:47: 34:16:ee:43:c3:19:93:5b:5c:12:b9:97:1a:86:87: 6d:c9:63:c6:84:97:e6:46:c9:32:1f:80:61:d8:48: 11:d6:08:0d:50:1e:62:28:ce:93:7f:08:89:f7:a7: 7d:3c:d5:48:9b:85:8f:1a:63:94:ed:6a:f7:d5:cd: 9c:9b:d3:df:64:14:a7:e5:b6:e7:ec:8a:bb:25:3d: 63:1b:23:2c:ab:bd:1c:af:5c:53:b6:42:50:91:9c: 07:90:1c:42:18:6f:2e:56:81:c3:37:10:4b:a3:fe: 81:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:69:D3:A1:AE:6A:4C:F1:CB:6E:2A:32:C3:EA:43:A2:43:60:72:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8da12-f8f5-3746-a362-c6834b9b3d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.168.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:24:de:cd:f5:c9:68:f3:f7:0d:b4:e7:c2:a6:6f:ea:07:64: aa:24:da:f8:48:2f:a8:b2:39:a9:2a:3a:1d:03:e0:28:bb:01: 65:9a:97:1e:36:e0:d0:cb:96:96:0d:f5:41:2c:ab:87:68:91: b6:f3:9b:26:a1:0b:e0:1f:11:11:8e:35:34:4f:9e:4e:a1:6f: be:b1:d3:29:54:ef:29:0f:b4:d4:e5:6e:26:fc:82:fc:19:28: 11:45:29:72:8f:6c:a5:89:27:a6:36:87:14:7d:fa:61:df:e8: 6e:3d:60:82:60:93:01:81:42:e8:65:f9:17:18:cf:fe:d4:d1: ba:fc:38:bf:7e:16:73:c5:77:90:0b:86:c6:72:be:9d:c1:3b: 08:e9:ff:b7:a7:e7:fd:b7:bf:5d:22:6e:be:b1:15:de:5f:b5: 1c:20:29:bf:3b:a2:bb:db:1e:6d:3a:03:38:b9:22:55:4b:ab: 82:50:10:03:c2:2c:df:65:dc:4f:b9:c2:aa:ce:a0:0f:ab:b9: 1a:d0:a7:c2:02:21:5c:bb:29:6f:5a:d4:9f:3c:c0:71:1f:cb: 13:49:d2:cc:e7:b2:84:b1:ee:d0:27:9c:78:36:1e:7d:de:a4: 49:6e:4d:b9:05:a6:10:f8:df:26:33:4c:b0:d4:a1:4f:c2:8c: 68:e4:00:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCrbPljhvjUZpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZjUyY2YwYTktYjMxNC00ZjZhLTg2MDUtNTAyN2UyZjcwZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYxT6DcBZG4p34ul1tb3cX2DRiJ2MAmgm6bC kzfcpjt4TUfBbfLxqbaa7camQZGdl8XLCVZZkKxgZVVzVYZTNFQDDE2GAk003hNs fdeU2jdUHnwCxNsRcuQvxZw74SvgtFDsphUtJBMcYYnfHJwOwomUuxVKB+ywGpPQ bqaxuxlpFqJnMEk4xXkzoC6DvLfV8pIizkc0Fu5DwxmTW1wSuZcahodtyWPGhJfm RskyH4Bh2EgR1ggNUB5iKM6TfwiJ96d9PNVIm4WPGmOU7Wr31c2cm9PfZBSn5bbn 7Iq7JT1jGyMsq70cr1xTtkJQkZwHkBxCGG8uVoHDNxBLo/6BxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5p06Guakzxy24qMsPqQ6JDYHLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTZkOGRhMTItZjhmNS0z NzQ2LWEzNjItYzY4MzRiOWIzZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR6ggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIk3s31yWjz9w2058Kmb+oHZKok2vhIL6iyOakqOh0D4Ci7AWWalx42 4NDLlpYN9UEsq4dokbbzmyahC+AfERGONTRPnk6hb76x0ylU7ykPtNTlbib8gvwZ KBFFKXKPbKWJJ6Y2hxR9+mHf6G49YIJgkwGBQuhl+RcYz/7U0br8OL9+FnPFd5AL hsZyvp3BOwjp/7en5/23v10ibr6xFd5ftRwgKb87orvbHm06Azi5IlVLq4JQEAPC LN9l3E+5wqrOoA+ruRrQp8ICIVy7KW9a1J88wHEfyxNJ0sznsoSx7tAnnHg2Hn3e pEluTbkFphD43yYzTLDUoU/CjGjkAJE= -----END CERTIFICATE-----Generated at Mon Apr 28 08:34:58 2025 by rpki-client