$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a36988b7-4a0a-31c4-98c5-64aebe1358e4.roa File: a36988b7-4a0a-31c4-98c5-64aebe1358e4.roa (raw, json) Hash identifier: 68YsTrtTgXS71v5Z48Bg7kJksL1SshOg7HC0LGg8ONk= Subject key identifier: C2:64:94:2B:01:45:7C:F3:10:D7:90:9D:1A:C6:55:B5:2B:E2:F4:60 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D30B6D6A358733A89880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a36988b7-4a0a-31c4-98c5-64aebe1358e4.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 173.75.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d3:0b:6d:6a:35:87:33:a8:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=c2ecc87c-ae26-4cc9-b227-b1fcad01975c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:65:1a:c0:6e:4a:4b:e6:08:b9:21:30:8b:e8: 42:6e:44:06:92:f6:00:a4:22:1e:25:5d:b0:b2:37: eb:57:de:3f:33:65:4c:2f:13:96:2f:cc:1b:1d:79: a9:6b:de:d0:d0:b6:c1:30:6f:75:4d:99:7c:ae:8e: 92:cf:03:c3:10:7b:4e:0a:d6:c2:83:ad:e8:bb:21: 09:36:33:7b:51:e9:12:03:20:b8:cf:42:df:5e:8d: 21:c9:de:2d:06:4c:28:81:10:0c:cc:f9:d5:58:2b: af:77:af:6c:49:f0:2a:bd:a1:12:14:49:5e:67:7b: 49:76:a7:5f:d3:26:f1:e2:ba:a7:dd:27:4a:60:e2: 81:7a:6b:92:b2:5b:3e:e9:ce:44:41:30:f1:a8:95: aa:37:77:79:90:87:82:9e:68:19:72:15:9c:87:c1: 06:d6:4e:bf:eb:6f:00:7b:31:1a:09:a1:0d:87:f9: 3c:fa:f1:9b:4e:4a:65:33:78:9f:20:d8:25:a4:48: 4c:4a:e1:17:fc:89:eb:a9:84:bf:b9:a7:2c:83:28: c2:97:f2:42:ff:14:c7:d0:f2:01:2a:5f:85:07:f9: 3b:49:50:50:40:79:0a:96:38:06:43:8f:6c:2c:5e: fe:08:8f:3b:a2:a9:55:47:1a:9c:94:24:c7:50:6a: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:64:94:2B:01:45:7C:F3:10:D7:90:9D:1A:C6:55:B5:2B:E2:F4:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a36988b7-4a0a-31c4-98c5-64aebe1358e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.75.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a6:80:5f:4d:fd:4e:2c:f2:ae:10:4e:f9:53:57:11:f6:fa: 52:63:82:ff:50:e3:69:03:cd:ca:c1:43:97:96:c6:ea:8c:a2: 8e:25:5e:5f:ef:7b:fc:32:41:b6:b5:00:67:28:f3:d8:f9:36: 92:9c:94:00:21:a9:60:00:8c:d1:92:4c:03:c0:8c:05:87:5f: 83:1a:60:5e:d2:f9:f9:55:dd:8f:c6:d9:00:74:74:c3:14:4e: 35:3d:80:7a:0b:e3:89:47:3d:66:6c:85:80:67:1d:82:83:3b: 3c:a0:88:1a:0a:cd:6a:3d:7f:44:1d:c9:f7:71:41:a6:a1:41: 32:2b:a1:ed:cf:67:b7:30:81:cc:1e:95:2e:6a:38:e6:b8:c9: ef:3d:ff:82:93:2a:35:05:49:d0:bc:db:b4:72:59:96:ea:b5: b1:b2:2a:a6:d0:e4:0f:6e:8d:35:bb:95:5e:37:ed:84:02:b9: 08:be:b0:c6:52:03:9d:cc:63:6c:f0:91:83:1b:f4:94:9c:13: ce:01:f1:f0:f1:4b:f4:91:59:49:5d:b4:77:fb:80:39:89:62: 5d:b5:80:3b:43:db:51:35:76:3c:66:f5:c3:01:d6:ba:42:ee: 2a:e2:72:4f:16:ee:e2:a0:ab:36:76:37:36:af:f0:9c:3f:3e: d4:c0:a7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtMLbWo1hzOomIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YzJlY2M4N2MtYWUyNi00Y2M5LWIyMjctYjFmY2FkMDE5NzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmUawG5KS+YIuSEwi+hCbkQGkvYApCIeJV2w sjfrV94/M2VMLxOWL8wbHXmpa97Q0LbBMG91TZl8ro6SzwPDEHtOCtbCg63ouyEJ NjN7UekSAyC4z0LfXo0hyd4tBkwogRAMzPnVWCuvd69sSfAqvaESFEleZ3tJdqdf 0ybx4rqn3SdKYOKBemuSsls+6c5EQTDxqJWqN3d5kIeCnmgZchWch8EG1k6/628A ezEaCaENh/k8+vGbTkplM3ifINglpEhMSuEX/InrqYS/uacsgyjCl/JC/xTH0PIB Kl+FB/k7SVBQQHkKljgGQ49sLF7+CI87oqlVRxqclCTHUGoSZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJklCsBRXzzENeQnRrGVbUr4vRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTM2OTg4YjctNGEwYS0z MWM0LTk4YzUtNjRhZWJlMTM1OGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrUugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASmgF9N/U4s8q4QTvlTVxH2+lJjgv9Q42kDzcrBQ5eWxuqMoo4lXl/v e/wyQba1AGco89j5NpKclAAhqWAAjNGSTAPAjAWHX4MaYF7S+flV3Y/G2QB0dMMU TjU9gHoL44lHPWZshYBnHYKDOzygiBoKzWo9f0QdyfdxQaahQTIroe3PZ7cwgcwe lS5qOOa4ye89/4KTKjUFSdC827RyWZbqtbGyKqbQ5A9ujTW7lV437YQCuQi+sMZS A53MY2zwkYMb9JScE84B8fDxS/SRWUldtHf7gDmJYl21gDtD21E1djxm9cMB1rpC 7irick8W7uKgqzZ2Nzav8Jw/PtTAp9Y= -----END CERTIFICATE-----Generated at Sat Apr 26 22:48:15 2025 by rpki-client