$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68f896a-9278-358e-8a9b-cbf2c10e23fb.roa File: c68f896a-9278-358e-8a9b-cbf2c10e23fb.roa (raw, json) Hash identifier: Vdupxg7NMwQLlJP/VeVIG3+2g4+oKVCH7cAN1M+iZ7k= Subject key identifier: 03:74:98:DE:F6:75:C9:59:F5:15:13:9A:26:10:DF:7C:E6:68:64:83 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849648460D44AEF139B5EC9AC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68f896a-9278-358e-8a9b-cbf2c10e23fb.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 6167 IP address blocks: 75.205.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:60:d4:4a:ef:13:9b:5e:c9:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=20cd5614-d04e-48f4-85e8-8101838e72b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fe:3e:94:a2:54:91:1a:c0:7b:f7:cf:00:89: 1b:72:c0:83:87:b1:c0:75:d5:17:7d:6b:9f:53:c3: b5:04:9b:dd:f9:be:b2:f8:11:4a:40:25:5e:1b:6e: 7e:84:39:ce:ac:21:be:f4:a4:02:08:60:fe:dd:fb: a0:9b:99:23:7a:fb:1c:f0:40:a8:82:74:f8:c6:e6: 5f:2b:04:05:42:0d:bc:4a:be:41:fa:ca:5f:31:50: b7:f6:5a:25:4d:bc:78:aa:38:07:5c:2d:01:9e:ca: 59:7a:92:15:b7:52:ab:0d:44:10:a8:8f:15:f3:0f: 74:be:b2:a0:f9:3c:f3:11:de:66:9d:ef:0b:6b:44: 98:05:2a:9e:3e:73:30:fb:99:55:bd:ac:4b:f9:cf: 9c:99:2b:e0:13:66:21:66:1f:e8:e8:3f:84:2a:c9: 2d:8a:62:d3:7c:ff:fa:7a:9b:04:7c:ab:56:96:26: 19:f4:89:1b:91:a0:90:f4:13:66:48:ff:88:05:dd: 35:b5:54:db:82:f0:01:36:b8:58:72:df:8b:6e:2d: 0e:26:23:f3:63:34:68:41:67:a4:ae:29:e9:21:4c: 7b:6e:65:23:4c:84:0e:67:39:f0:9b:31:57:15:bb: 4e:44:51:0d:6e:c3:94:0c:a0:39:5d:77:ed:4a:4f: e6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:74:98:DE:F6:75:C9:59:F5:15:13:9A:26:10:DF:7C:E6:68:64:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68f896a-9278-358e-8a9b-cbf2c10e23fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 75.205.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:11:a4:93:9f:5a:12:1f:ca:c8:4c:f3:06:c3:40:80:41:5e: 52:44:a9:0d:1f:88:83:97:a1:df:c3:f4:22:d8:ce:be:ea:b6: 60:33:44:41:7c:66:b4:ed:ec:c6:6d:1a:b1:53:97:7b:01:f1: 6e:51:35:af:5e:08:7f:ac:95:fb:01:08:10:c4:e0:40:78:59: e8:34:da:7f:fb:5e:b1:51:53:c7:d8:a3:24:f2:3e:24:01:69: ce:3d:0a:e8:e5:d4:dc:31:c6:78:c0:7a:c0:d2:ce:14:b5:fb: 89:89:d0:b6:58:36:d0:03:e9:ff:d8:5a:3c:f1:03:ec:7f:92: d5:74:19:88:3b:78:f0:2a:35:12:7f:58:f9:3e:4e:4d:53:f8: 78:eb:32:eb:ed:21:d7:3c:c5:df:b1:8e:11:88:5e:ef:5d:e2: 9f:43:e3:19:64:e5:30:58:d5:cd:b8:91:c5:7d:69:f1:9f:a1: 11:df:bf:2a:bd:ce:75:bb:89:ed:93:59:d2:5d:90:38:5f:20: 98:20:eb:c0:9f:34:06:74:5c:d6:ec:1a:a7:58:31:6c:0f:d9: cc:c1:6d:bf:28:85:0c:ac:ac:b2:ab:24:ab:2e:2b:7d:40:9d: 70:68:af:26:44:e4:32:67:ab:f0:c4:3d:d0:2b:4a:a2:6c:64: 04:2a:6c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhGDUSu8Tm17JrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk MjBjZDU2MTQtZDA0ZS00OGY0LTg1ZTgtODEwMTgzOGU3MmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf4+lKJUkRrAe/fPAIkbcsCDh7HAddUXfWuf U8O1BJvd+b6y+BFKQCVeG25+hDnOrCG+9KQCCGD+3fugm5kjevsc8ECognT4xuZf KwQFQg28Sr5B+spfMVC39lolTbx4qjgHXC0BnspZepIVt1KrDUQQqI8V8w90vrKg +TzzEd5mne8La0SYBSqePnMw+5lVvaxL+c+cmSvgE2YhZh/o6D+EKsktimLTfP/6 epsEfKtWliYZ9IkbkaCQ9BNmSP+IBd01tVTbgvABNrhYct+Lbi0OJiPzYzRoQWek rinpIUx7bmUjTIQOZznwmzFXFbtORFENbsOUDKA5XXftSk/mCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN0mN72dclZ9RUTmiYQ33zmaGSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzY4Zjg5NmEtOTI3OC0z NThlLThhOWItY2JmMmMxMGUyM2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS82YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwRpJOfWhIfyshM8wbDQIBBXlJEqQ0fiIOXod/D9CLYzr7qtmAzREF8 ZrTt7MZtGrFTl3sB8W5RNa9eCH+slfsBCBDE4EB4Weg02n/7XrFRU8fYoyTyPiQB ac49Cujl1NwxxnjAesDSzhS1+4mJ0LZYNtAD6f/YWjzxA+x/ktV0GYg7ePAqNRJ/ WPk+Tk1T+HjrMuvtIdc8xd+xjhGIXu9d4p9D4xlk5TBY1c24kcV9afGfoRHfvyq9 znW7ie2TWdJdkDhfIJgg68CfNAZ0XNbsGqdYMWwP2czBbb8ohQysrLKrJKsuK31A nXBoryZE5DJnq/DEPdArSqJsZAQqbIA= -----END CERTIFICATE-----Generated at Sun Apr 27 04:01:22 2025 by rpki-client