$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b00aeef8-b710-36e5-a79f-67d1d8129595.roa File: b00aeef8-b710-36e5-a79f-67d1d8129595.roa (raw, json) Hash identifier: GLpj5thwvMqzVxM2luOOhEi5+IOcizVM0ASw+tXNykU= Subject key identifier: E6:9D:55:DE:2A:24:24:D0:30:FB:17:B6:15:5B:50:6F:FC:E9:69:AC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F2BFBD07201EB6F74B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b00aeef8-b710-36e5-a79f-67d1d8129595.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 71.245.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f2:bf:bd:07:20:1e:b6:f7:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=6de47591-6732-4341-9ca9-5c041509f678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:bf:bd:b7:64:c1:b4:c0:06:65:d4:d5:9b: 0f:3b:2e:f5:09:3c:95:34:98:3f:69:e6:89:90:4b: b6:2c:48:79:83:11:01:de:4f:7d:75:35:c9:fa:a4: f6:a5:f0:5a:9d:d8:df:8b:f1:9c:c9:de:2a:4d:6c: 94:01:3f:a9:7f:5f:9e:12:de:71:c8:12:44:8d:4f: ff:52:e8:ba:52:49:f1:95:26:f8:32:d2:76:17:10: 92:ce:93:77:16:bc:db:14:f4:ae:f3:24:c5:a5:81: 52:37:4f:33:03:ad:e2:3b:5f:97:98:f8:4f:89:aa: e6:1c:84:af:ec:59:4b:1e:28:0d:cd:ee:28:8a:08: 6c:97:46:b4:2d:69:72:e2:b0:91:d2:75:a0:1e:cc: f0:27:59:83:02:35:23:47:49:ee:94:42:9a:aa:c7: 72:16:3e:a3:a8:34:4e:21:3f:52:9a:29:21:da:60: b0:3b:9a:f7:f5:fe:49:80:91:7c:f5:9d:cf:db:e9: 7d:22:94:fa:49:ab:c4:af:22:26:ad:d0:d9:a8:e1: b2:ac:00:81:8b:f3:20:8d:5c:e6:e6:cd:33:d8:bc: 7a:2b:cf:4c:37:4e:f2:8b:f9:aa:e2:9a:8d:b4:33: 7f:ea:73:0f:8c:96:90:05:af:11:e3:7f:7d:0f:c6: 7b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9D:55:DE:2A:24:24:D0:30:FB:17:B6:15:5B:50:6F:FC:E9:69:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b00aeef8-b710-36e5-a79f-67d1d8129595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.245.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2d:91:f7:13:e6:b1:43:54:49:ba:7d:e1:27:86:cd:94:6f: 0a:4d:9d:a9:23:99:76:5a:68:ce:04:c6:78:7c:f0:de:72:74: 55:49:4e:34:e1:51:47:e7:d2:08:70:0b:2f:ff:55:95:e3:39: af:c0:6e:7e:24:73:51:0f:9d:4d:1b:49:9f:23:0a:57:85:ef: 9c:5d:b0:44:e7:a3:57:ee:11:66:23:4a:1b:17:58:b4:b3:4c: d6:a6:a0:33:a7:a5:70:59:5b:9c:f7:e9:bc:85:08:28:db:2c: 20:47:33:89:09:05:b0:7f:d7:e5:5e:21:d9:fa:07:fc:52:8a: 90:03:4f:7d:f3:8c:a4:f5:33:7d:f6:52:7c:79:94:90:49:8d: 2b:a5:98:9c:db:81:f3:1e:cc:5d:c6:43:e6:d3:5d:8e:ae:3f: eb:dd:26:92:08:97:c0:81:b8:39:e6:dc:3e:ba:5d:49:76:c7: 75:29:08:84:82:78:a7:30:88:94:a4:0c:b8:25:f1:fa:f7:69: 56:68:ae:30:0e:07:b8:9c:10:f9:05:42:f6:9e:2c:3b:16:f8: cf:85:21:29:20:0b:ce:2f:7a:e6:9f:2a:08:77:7a:8b:fd:93: b3:33:8b:fa:2b:a2:f5:4c:ce:44:b5:7b:46:57:f6:db:80:18: a1:76:7e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvK/vQcgHrb3S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NmRlNDc1OTEtNjczMi00MzQxLTljYTktNWMwNDE1MDlmNjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0+/vbdkwbTABmXU1ZsPOy71CTyVNJg/aeaJ kEu2LEh5gxEB3k99dTXJ+qT2pfBandjfi/Gcyd4qTWyUAT+pf1+eEt5xyBJEjU// Uui6UknxlSb4MtJ2FxCSzpN3FrzbFPSu8yTFpYFSN08zA63iO1+XmPhPiarmHISv 7FlLHigNze4oighsl0a0LWly4rCR0nWgHszwJ1mDAjUjR0nulEKaqsdyFj6jqDRO IT9Smikh2mCwO5r39f5JgJF89Z3P2+l9IpT6SavEryImrdDZqOGyrACBi/MgjVzm 5s0z2Lx6K89MN07yi/mq4pqNtDN/6nMPjJaQBa8R4399D8Z7NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOadVd4qJCTQMPsXthVbUG/86WmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjAwYWVlZjgtYjcxMC0z NmU1LWE3OWYtNjdkMWQ4MTI5NTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/VwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAtkfcT5rFDVEm6feEnhs2UbwpNnakjmXZaaM4Exnh88N5ydFVJTjTh UUfn0ghwCy//VZXjOa/Abn4kc1EPnU0bSZ8jCleF75xdsETno1fuEWYjShsXWLSz TNamoDOnpXBZW5z36byFCCjbLCBHM4kJBbB/1+VeIdn6B/xSipADT33zjKT1M332 Unx5lJBJjSulmJzbgfMezF3GQ+bTXY6uP+vdJpIIl8CBuDnm3D66XUl2x3UpCISC eKcwiJSkDLgl8fr3aVZorjAOB7icEPkFQvaeLDsW+M+FISkgC84veuafKgh3eov9 k7Mzi/orovVMzkS1e0ZX9tuAGKF2fk0= -----END CERTIFICATE-----Generated at Wed Apr 30 17:37:15 2025 by rpki-client