$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a805a121-7c4b-33f9-a5e6-0548145e9a7d.roa File: a805a121-7c4b-33f9-a5e6-0548145e9a7d.roa (raw, json) Hash identifier: tdYS/2LQWsfUmI7R7ydF9O5uaOTguUOYY4x6nKs4P2s= Subject key identifier: 0B:0F:BA:0E:F6:E3:50:34:C4:CC:F7:7D:21:6C:DB:96:2B:E9:79:25 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C2A296B57045B66C844C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a805a121-7c4b-33f9-a5e6-0548145e9a7d.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 72.75.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:2a:29:6b:57:04:5b:66:c8:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=5ddd1f50-d342-49ef-9fdd-1a51da316c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2d:43:85:bb:b1:72:0b:60:e6:e9:27:9c:8f: bf:4b:ac:da:44:63:c3:59:d7:c2:a8:e0:17:08:35: 42:7b:b8:b6:59:b9:a0:1a:10:ab:64:c1:8e:40:39: 83:f5:26:6d:84:28:09:97:84:f2:bc:a1:6e:b6:32: 19:7d:b7:15:4a:76:68:d5:c2:00:a4:ae:04:ef:e3: c4:82:3d:8b:48:e9:28:6e:8b:86:c0:4c:b8:9f:2e: 37:c5:06:5c:e2:f2:d8:21:0f:d4:a1:ee:ac:9a:06: 14:2d:59:d1:0d:3b:b4:a3:49:76:73:2c:b8:b5:3d: 61:46:1d:e3:f2:5a:58:a6:eb:b8:bb:ef:ef:eb:b1: 4a:fd:8b:43:13:7f:fd:c7:bc:7e:d6:e9:10:6c:05: 9a:ab:c4:bc:a5:3a:df:ab:c9:cb:4c:f5:ef:ee:44: cf:28:b9:dd:60:8b:be:6d:b7:ce:8e:8e:47:6d:ec: 8c:54:5a:e4:9b:2d:1f:c8:b5:04:4b:cb:e9:33:63: f7:0f:53:c1:70:8f:7f:c7:9e:66:9d:18:3c:30:68: a9:d7:55:50:90:6c:21:86:29:65:9c:e7:ea:4a:79: 4f:52:d6:44:a6:d1:44:03:f6:0c:9c:74:55:b2:88: 28:10:a1:bc:e5:73:0f:75:9f:8f:a3:3a:e2:c8:49: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0F:BA:0E:F6:E3:50:34:C4:CC:F7:7D:21:6C:DB:96:2B:E9:79:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a805a121-7c4b-33f9-a5e6-0548145e9a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.75.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e7:30:30:db:33:ed:66:6e:d2:1e:91:8e:e4:5a:bb:fe:5f: 83:8d:43:28:16:52:a5:25:a5:71:f0:cc:c0:4f:89:ce:de:bf: 46:18:2f:10:96:30:60:5c:81:ef:c7:bb:d2:56:2e:13:0e:f0: be:51:66:19:f6:ff:23:06:4b:a0:98:ef:8b:26:62:8a:d8:fc: cb:bb:6b:5a:19:e8:a8:5a:18:84:cd:a3:44:2f:8c:36:bc:70: 95:8c:6e:d6:20:43:14:3d:93:66:1f:9b:75:35:ba:22:c9:ee: 11:19:47:30:17:14:f0:8a:70:38:99:4e:06:07:54:c5:71:48: 10:48:71:b8:40:7b:2b:56:2d:8c:58:f8:3c:12:df:c2:37:55: 27:37:00:ba:c4:fd:1d:97:52:81:63:0b:93:f8:da:26:1a:f0: 3b:39:19:05:e2:c9:a7:02:95:3f:12:e4:c8:5b:80:2d:35:bb: c5:13:da:c7:d9:c4:ac:c5:a0:fe:9b:70:b0:10:8a:aa:0e:93: 0b:ad:63:b1:78:08:71:06:b0:5b:2d:39:b1:84:a5:4a:38:7b: ce:11:c6:5b:9d:bb:cf:bc:2f:3d:40:26:a1:ad:57:7a:36:24: aa:d8:46:45:5d:f8:7a:d4:22:7b:a8:fe:9a:1a:1f:9c:d8:d1: fa:7b:83:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCopa1cEW2bIRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NWRkZDFmNTAtZDM0Mi00OWVmLTlmZGQtMWE1MWRhMzE2YzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y1Dhbuxcgtg5uknnI+/S6zaRGPDWdfCqOAX CDVCe7i2WbmgGhCrZMGOQDmD9SZthCgJl4TyvKFutjIZfbcVSnZo1cIApK4E7+PE gj2LSOkobouGwEy4ny43xQZc4vLYIQ/Uoe6smgYULVnRDTu0o0l2cyy4tT1hRh3j 8lpYpuu4u+/v67FK/YtDE3/9x7x+1ukQbAWaq8S8pTrfq8nLTPXv7kTPKLndYIu+ bbfOjo5HbeyMVFrkmy0fyLUES8vpM2P3D1PBcI9/x55mnRg8MGip11VQkGwhhill nOfqSnlPUtZEptFEA/YMnHRVsogoEKG85XMPdZ+PozriyEn2pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsPug7241A0xMz3fSFs25Yr6XklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTgwNWExMjEtN2M0Yi0z M2Y5LWE1ZTYtMDU0ODE0NWU5YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSEuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHnMDDbM+1mbtIekY7kWrv+X4ONQygWUqUlpXHwzMBPic7ev0YYLxCW MGBcge/Hu9JWLhMO8L5RZhn2/yMGS6CY74smYorY/Mu7a1oZ6KhaGITNo0QvjDa8 cJWMbtYgQxQ9k2Yfm3U1uiLJ7hEZRzAXFPCKcDiZTgYHVMVxSBBIcbhAeytWLYxY +DwS38I3VSc3ALrE/R2XUoFjC5P42iYa8Ds5GQXiyacClT8S5MhbgC01u8UT2sfZ xKzFoP6bcLAQiqoOkwutY7F4CHEGsFstObGEpUo4e84Rxludu8+8Lz1AJqGtV3o2 JKrYRkVd+HrUInuo/poaH5zY0fp7g4Y= -----END CERTIFICATE-----Generated at Tue Apr 29 13:31:30 2025 by rpki-client