$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0b57f6e-b364-3e5f-a287-5570d9c98658.roa File: a0b57f6e-b364-3e5f-a287-5570d9c98658.roa (raw, json) Hash identifier: mkVZH2KJ5RCAe39XYttkqRYuUQ7D54lVJ2Ydgv1iIEg= Subject key identifier: E1:4A:8C:87:A3:9E:83:2E:02:8E:C8:AD:95:EC:B1:D0:03:71:C1:26 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D57A428A9597C8E3B520 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0b57f6e-b364-3e5f-a287-5570d9c98658.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 108.3.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d5:7a:42:8a:95:97:c8:e3:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=064c6194-5037-46d6-a074-0008d9dd98d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:19:71:23:01:2d:26:20:6b:c7:e3:66:51:83: b3:d9:87:44:88:0c:d4:71:03:79:fc:29:42:f7:8b: 45:20:af:bf:43:89:cd:67:ea:bf:f5:86:27:42:93: c6:18:a3:a4:0d:0a:84:ba:c7:3b:d8:7e:9e:ae:06: c3:ea:8a:cb:a5:aa:32:8f:83:6f:45:b1:51:55:09: 22:f9:40:50:b1:db:7f:83:43:65:e7:f8:8c:fd:34: c7:e9:62:20:16:15:ff:c5:50:82:1b:9d:42:32:b7: 96:13:cb:3e:e8:b9:f1:fe:60:8d:51:79:1c:d0:c5: e3:d5:77:d7:3f:96:cf:f0:c2:8f:34:50:ca:12:4b: b6:80:d6:59:ba:b5:13:6f:d3:39:fe:20:e8:07:eb: 85:f5:1e:f7:98:ae:c7:ba:2e:79:22:3a:20:1a:c3: 2d:e1:85:40:86:c9:db:d7:0a:a9:09:84:bc:ed:4c: b8:12:28:71:7d:16:cf:55:3c:7d:28:da:2e:d7:32: b1:b3:04:cb:73:cd:b2:4e:bd:92:ba:8c:a4:dc:9d: 16:2d:5f:dd:92:78:65:19:b1:97:f7:93:63:52:79: 84:a0:67:4b:75:7d:b4:39:5a:ef:32:2e:a5:43:28: c8:6e:61:06:f2:b7:4d:f2:29:5e:0f:52:86:b4:b0: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4A:8C:87:A3:9E:83:2E:02:8E:C8:AD:95:EC:B1:D0:03:71:C1:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0b57f6e-b364-3e5f-a287-5570d9c98658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.3.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:12:0d:d5:3e:2a:d2:30:39:59:97:fa:70:e7:c8:e1:e5:f2: 6a:0e:01:f3:2a:e7:55:ed:2d:f4:69:1b:3e:ed:57:4e:c4:6c: 87:ae:53:00:01:6f:78:3b:a1:27:a3:3f:17:e3:11:69:21:8d: 44:5c:76:81:0a:63:2d:c1:27:66:19:94:2b:d8:8a:b0:ef:6f: 73:d6:be:54:ea:6c:89:41:c5:52:ba:a2:ea:d2:43:5e:79:41: 41:01:f6:24:57:df:16:b8:09:e1:dc:bf:f2:51:4e:77:53:16: 8a:a5:60:8b:98:da:0b:56:56:45:d0:2c:50:6a:e0:50:f8:c3: 04:f3:f2:a4:87:92:e7:de:b7:14:0c:31:38:85:31:e3:bc:cd: ae:49:c5:92:61:a8:76:a0:59:e6:6f:63:09:26:d0:f4:dc:d1: ea:67:c1:25:1e:a2:bf:3d:7a:02:91:db:f4:ac:2f:65:cf:ea: e4:e2:d1:98:d2:2d:8d:8d:12:e7:51:5f:ac:2f:79:c8:43:08: 59:fa:12:5b:1e:8f:92:29:3b:7f:35:59:44:72:13:bc:84:3a: a8:85:85:ad:4a:1f:8b:b3:76:6b:e2:5f:88:1d:08:ae:c9:ab: ac:83:de:81:f8:32:0f:e3:c4:32:d4:db:18:73:8e:60:48:5c: fd:43:7e:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtV6QoqVl8jjtSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MDY0YzYxOTQtNTAzNy00NmQ2LWEwNzQtMDAwOGQ5ZGQ5OGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohlxIwEtJiBrx+NmUYOz2YdEiAzUcQN5/ClC 94tFIK+/Q4nNZ+q/9YYnQpPGGKOkDQqEusc72H6ergbD6orLpaoyj4NvRbFRVQki +UBQsdt/g0Nl5/iM/TTH6WIgFhX/xVCCG51CMreWE8s+6Lnx/mCNUXkc0MXj1XfX P5bP8MKPNFDKEku2gNZZurUTb9M5/iDoB+uF9R73mK7Hui55IjogGsMt4YVAhsnb 1wqpCYS87Uy4EihxfRbPVTx9KNou1zKxswTLc82yTr2Suoyk3J0WLV/dknhlGbGX 95NjUnmEoGdLdX20OVrvMi6lQyjIbmEG8rdN8ileD1KGtLCpGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFKjIejnoMuAo7IrZXssdADccEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTBiNTdmNmUtYjM2NC0z ZTVmLWEyODctNTU3MGQ5Yzk4NjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbAOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoSDdU+KtIwOVmX+nDnyOHl8moOAfMq51XtLfRpGz7tV07EbIeuUwAB b3g7oSejPxfjEWkhjURcdoEKYy3BJ2YZlCvYirDvb3PWvlTqbIlBxVK6ourSQ155 QUEB9iRX3xa4CeHcv/JRTndTFoqlYIuY2gtWVkXQLFBq4FD4wwTz8qSHkufetxQM MTiFMeO8za5JxZJhqHagWeZvYwkm0PTc0epnwSUeor89egKR2/SsL2XP6uTi0ZjS LY2NEudRX6wvechDCFn6Elsej5IpO381WURyE7yEOqiFha1KH4uzdmviX4gdCK7J q6yD3oH4Mg/jxDLU2xhzjmBIXP1Dfhc= -----END CERTIFICATE-----Generated at Sun Apr 27 16:01:30 2025 by rpki-client