$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be2b4709-f250-3be3-b3c2-b101643bd3a3.roa File: be2b4709-f250-3be3-b3c2-b101643bd3a3.roa (raw, json) Hash identifier: cU14gCGZ49Mc3hOmR5FYU9u/59SX4/ll7lg2kmKuzfs= Subject key identifier: C3:A0:44:F1:FA:BA:4F:0C:91:30:77:CA:37:74:EE:50:D4:BA:6C:C0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C3689707BBAC6C39F1BA0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be2b4709-f250-3be3-b3c2-b101643bd3a3.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 72.90.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:36:89:70:7b:ba:c6:c3:9f:1b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=b54bb08d-d773-40c9-806b-493b4ed37adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1f:b8:5e:0e:df:84:da:2c:c7:81:64:3e:c7: b0:d4:a4:23:ad:d3:06:b6:0c:8d:ff:c6:9b:66:b0: 6a:52:c0:41:0d:ff:cb:e4:4f:b9:29:24:a6:13:7f: 0e:0b:fe:19:cf:83:ed:5f:09:c7:6b:09:96:36:1b: 9d:29:6c:0e:00:84:da:70:5a:fe:7a:88:af:02:f5: df:07:1c:92:b5:2d:50:d8:38:cf:f6:22:95:c0:51: 4f:98:af:3f:b1:9b:49:6c:8e:21:7f:ae:ff:4c:57: 36:cc:93:fd:c8:14:7e:df:ff:a0:fd:79:12:9f:6d: d7:62:0b:bc:15:2f:e4:8f:26:51:4b:8b:a9:49:66: 36:ac:50:66:23:d7:89:ca:fb:91:24:90:65:7e:2d: 41:88:76:97:a1:21:2c:da:66:95:1d:d9:44:7a:82: 22:06:f4:d1:2a:ce:e0:dc:d7:bf:7c:2e:b0:e2:35: ec:50:27:dc:ec:aa:c8:9f:7b:b4:a0:27:9c:3b:b1: 30:19:eb:bd:d7:97:94:44:22:ea:53:37:dc:88:40: 49:57:6d:d6:a8:f1:ed:56:ad:af:d6:b8:b4:08:51: cc:29:15:0a:8a:57:72:8e:e6:a6:aa:62:8a:6e:82: 2c:95:9a:f9:e3:d6:3e:18:0d:e7:dc:2c:8f:ff:0a: 69:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A0:44:F1:FA:BA:4F:0C:91:30:77:CA:37:74:EE:50:D4:BA:6C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be2b4709-f250-3be3-b3c2-b101643bd3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.90.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9a:1b:08:5d:1c:7a:fb:07:b4:db:e5:ab:ca:5e:c0:c0:3e: f0:96:99:9c:bf:3b:6f:0c:2f:82:3e:52:61:2f:5c:06:61:fc: 94:3d:14:14:84:64:cb:b8:59:fd:97:f5:d2:b0:86:d2:a4:dc: ab:da:61:62:98:03:1e:a2:38:38:a7:4d:19:32:77:f1:68:7e: e3:47:f6:c4:5d:d2:46:b2:eb:3d:ea:74:6e:30:54:55:51:cf: 9a:7d:8b:5b:61:02:a3:4c:62:e3:6d:c0:eb:74:ec:75:01:48: 34:d3:fc:c8:52:f0:03:51:46:35:ca:c5:0a:15:6e:eb:78:56: 0a:c0:ae:36:09:71:c9:04:50:17:af:50:1a:b6:98:9e:54:af: ff:33:ac:5c:2f:df:66:93:d0:33:09:8d:ca:c8:b0:37:3a:ef: b2:cb:7b:c0:76:6b:b2:ae:d9:0d:d3:a2:b7:1b:c4:9c:d5:90: 47:76:e6:b0:e7:d5:ee:7e:44:59:fe:96:46:62:6d:04:e6:18: 37:8a:3a:7a:96:0b:92:09:ef:ec:09:21:83:27:50:c1:ba:c5: e0:81:08:b7:c5:98:10:46:c9:ca:07:ca:83:a6:b8:6d:a3:10: 9a:aa:7c:f0:33:a1:20:df:ef:b1:85:e5:7c:14:74:de:c5:ec: f2:6e:56:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDaJcHu6xsOfG6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YjU0YmIwOGQtZDc3My00MGM5LTgwNmItNDkzYjRlZDM3YWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR+4Xg7fhNosx4FkPsew1KQjrdMGtgyN/8ab ZrBqUsBBDf/L5E+5KSSmE38OC/4Zz4PtXwnHawmWNhudKWwOAITacFr+eoivAvXf BxyStS1Q2DjP9iKVwFFPmK8/sZtJbI4hf67/TFc2zJP9yBR+3/+g/XkSn23XYgu8 FS/kjyZRS4upSWY2rFBmI9eJyvuRJJBlfi1BiHaXoSEs2maVHdlEeoIiBvTRKs7g 3Ne/fC6w4jXsUCfc7KrIn3u0oCecO7EwGeu915eURCLqUzfciEBJV23WqPHtVq2v 1ri0CFHMKRUKildyjuamqmKKboIslZr549Y+GA3n3CyP/wppKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOgRPH6uk8MkTB3yjd07lDUumzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmUyYjQ3MDktZjI1MC0z YmUzLWIzYzItYjEwMTY0M2JkM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqaGwhdHHr7B7Tb5avKXsDAPvCWmZy/O28ML4I+UmEvXAZh/JQ9FBSE ZMu4Wf2X9dKwhtKk3KvaYWKYAx6iODinTRkyd/FofuNH9sRd0kay6z3qdG4wVFVR z5p9i1thAqNMYuNtwOt07HUBSDTT/MhS8ANRRjXKxQoVbut4VgrArjYJcckEUBev UBq2mJ5Ur/8zrFwv32aT0DMJjcrIsDc677LLe8B2a7Ku2Q3TorcbxJzVkEd25rDn 1e5+RFn+lkZibQTmGDeKOnqWC5IJ7+wJIYMnUMG6xeCBCLfFmBBGycoHyoOmuG2j EJqqfPAzoSDf77GF5XwUdN7F7PJuVh8= -----END CERTIFICATE-----Generated at Sat Apr 26 22:51:47 2025 by rpki-client