$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa File: a535c59e-2c45-3850-a45d-c635cd99514e.roa (raw, json) Hash identifier: C79AGytZfnrtQkkUyA9FZstlX0iIZJpdni/OiVV2idM= Subject key identifier: 64:3E:88:B9:9E:ED:C8:E2:D2:E5:40:5F:EC:95:4B:3C:84:3B:94:3F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D092C5D00DA6BD9B2B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 71.162.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d0:92:c5:d0:0d:a6:bd:9b:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=5869b8b4-eea0-4a20-9f64-48e00ae57532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:64:fd:51:b8:a4:63:8b:15:0d:32:1d:e3:38: 3a:a1:c4:48:84:f3:97:d9:40:c7:7a:21:ea:30:76: 90:84:e2:50:88:37:65:dd:8e:2d:b8:fe:ee:b9:ef: 34:1f:bb:9b:05:58:37:22:d5:d6:07:69:ed:4f:37: d3:27:6c:d4:f9:16:3f:aa:5e:b0:23:2d:c1:2b:a8: ea:2d:46:91:c1:0e:e9:54:07:a8:67:8f:4e:be:ec: 37:2e:10:cf:0b:9e:3a:18:78:51:cb:68:bf:fd:1f: 48:44:76:ed:29:28:7b:2a:82:77:83:2c:a7:7b:5a: 85:2b:50:65:72:db:3a:e8:df:0a:a0:03:f5:d7:27: 50:b7:74:33:f4:73:44:ba:dd:b1:7b:70:b2:d0:7f: b8:cb:62:c6:83:1c:00:2b:21:e3:b1:d5:cc:f1:bf: 70:7a:d2:3e:3d:3a:64:39:2b:f8:fa:f0:43:05:54: b8:d9:eb:dd:82:7c:a0:5e:b9:7b:29:14:f0:8b:a9: e9:c0:c8:7f:33:25:b4:d2:3d:ca:ce:ff:29:d9:a1: 5f:5e:a7:6f:fb:63:53:ac:d1:9c:42:d0:7f:17:59: 57:6b:14:80:41:ea:a5:8d:4e:ce:21:1f:72:5e:e2: 6b:90:5c:f6:8a:e2:61:79:7e:89:13:63:05:9d:9d: 90:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3E:88:B9:9E:ED:C8:E2:D2:E5:40:5F:EC:95:4B:3C:84:3B:94:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.162.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5f:31:92:3b:0e:30:12:5a:3f:e0:a2:d1:20:a9:39:0c:bb: 51:95:2a:f4:d3:d5:fd:0b:72:54:49:7a:87:a2:97:24:8d:3c: c3:86:a5:9d:20:f6:19:4c:37:f4:1b:c1:0b:d7:e7:17:fc:00: 6a:ab:6f:d4:5d:4c:3c:2f:95:5e:42:2d:8a:0f:80:35:36:68: 0d:73:cf:e1:47:d7:4a:bc:f2:5f:56:57:aa:f0:81:ab:9e:68: 59:b0:14:9b:77:53:39:a3:8b:ec:d9:9c:63:46:e2:3d:b8:4a: 56:52:67:89:64:22:e8:a9:53:e2:52:aa:23:d3:b1:f8:71:f2: ad:ca:96:74:46:8f:98:08:a3:2f:42:8b:f3:59:99:90:28:60: 6c:a2:5f:b7:9f:07:16:ae:c3:6e:18:d6:a1:23:8a:27:98:45: 46:46:1b:56:47:b1:76:6f:37:c5:fe:d2:96:0a:76:c5:d7:4d: c1:dd:ba:0a:4a:23:5c:c3:8a:4c:72:0f:5a:9a:f3:d4:41:f0: 9b:91:21:ea:6b:11:c2:43:4f:87:bb:dd:66:40:25:49:be:6f: 3a:ac:2d:9b:c0:c1:a4:25:b4:81:4d:65:05:da:7b:77:fc:11: b9:c9:72:5d:e0:f6:6e:70:ba:b5:eb:23:e2:fc:41:01:0f:0b: 7d:9d:37:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtCSxdANpr2bK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NTg2OWI4YjQtZWVhMC00YTIwLTlmNjQtNDhlMDBhZTU3NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGT9UbikY4sVDTId4zg6ocRIhPOX2UDHeiHq MHaQhOJQiDdl3Y4tuP7uue80H7ubBVg3ItXWB2ntTzfTJ2zU+RY/ql6wIy3BK6jq LUaRwQ7pVAeoZ49Ovuw3LhDPC546GHhRy2i//R9IRHbtKSh7KoJ3gyyne1qFK1Bl cts66N8KoAP11ydQt3Qz9HNEut2xe3Cy0H+4y2LGgxwAKyHjsdXM8b9wetI+PTpk OSv4+vBDBVS42evdgnygXrl7KRTwi6npwMh/MyW00j3Kzv8p2aFfXqdv+2NTrNGc QtB/F1lXaxSAQeqljU7OIR9yXuJrkFz2iuJheX6JE2MFnZ2QIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQ+iLme7cji0uVAX+yVSzyEO5Q/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTUzNWM1OWUtMmM0NS0z ODUwLWE0NWQtYzYzNWNkOTk1MTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR6KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANfMZI7DjASWj/gotEgqTkMu1GVKvTT1f0LclRJeoeilySNPMOGpZ0g 9hlMN/QbwQvX5xf8AGqrb9RdTDwvlV5CLYoPgDU2aA1zz+FH10q88l9WV6rwgaue aFmwFJt3Uzmji+zZnGNG4j24SlZSZ4lkIuipU+JSqiPTsfhx8q3KlnRGj5gIoy9C i/NZmZAoYGyiX7efBxauw24Y1qEjiieYRUZGG1ZHsXZvN8X+0pYKdsXXTcHdugpK I1zDikxyD1qa89RB8JuRIeprEcJDT4e73WZAJUm+bzqsLZvAwaQltIFNZQXae3f8 EbnJcl3g9m5wurXrI+L8QQEPC32dN5E= -----END CERTIFICATE-----Generated at Wed Apr 30 02:55:02 2025 by rpki-client