$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa File: c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa (raw, json) Hash identifier: CmPzgk4eLPa4vR0KZC8lIpjLdcVmnRtIRctgW0HxSr4= Subject key identifier: 1F:F4:6B:66:1E:1D:7F:F7:4F:7F:42:E2:CD:91:57:2B:80:A7:30:4E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F72E58F88667BFB657C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 71.183.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f7:2e:58:f8:86:67:bf:b6:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=8666d7ae-ddf4-45b5-a802-ad41eb4ee3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:0d:69:cf:9a:2e:f3:13:aa:d4:c5:4f:de: 75:89:7f:35:14:00:9b:e7:e7:de:e6:86:bb:ef:1c: 48:43:13:a2:56:bb:cc:1a:73:8c:55:f8:5e:74:f2: 74:25:33:47:0e:60:c3:2d:34:62:b0:f7:1a:65:dc: f1:00:29:cb:11:65:a4:a1:7e:37:10:dc:74:6b:96: 1a:9d:95:fc:96:99:b7:19:84:2c:b8:da:c9:8f:32: d7:28:ae:d9:67:ad:a0:0e:1a:ed:14:a7:0c:dd:77: cc:32:28:88:f9:10:6b:e1:6a:93:4c:36:7e:87:14: f0:d7:79:fb:74:0a:dd:c6:74:09:ca:bd:f4:43:6e: 5a:9e:9a:de:fc:cb:c3:dc:b1:0a:cb:a3:65:d5:57: 23:6e:e8:42:cf:7b:74:21:86:4e:88:cb:03:1e:9c: b6:27:2f:68:a3:56:5c:86:07:af:fd:b1:89:82:64: 52:d9:63:60:4c:54:45:40:b8:a8:b3:1d:e9:bd:0e: 7f:15:40:ad:27:e2:00:20:68:50:f4:2d:81:ed:d1: 93:a4:98:b9:86:f0:7e:32:a3:20:08:d4:9a:41:c7: 66:e0:76:36:17:f3:8b:e9:78:da:c8:e3:03:47:89: 2a:81:bf:6d:3f:d9:0f:10:71:f2:c3:d7:5e:e6:7a: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F4:6B:66:1E:1D:7F:F7:4F:7F:42:E2:CD:91:57:2B:80:A7:30:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.183.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:31:08:46:b5:2c:e5:0d:18:99:95:4e:7b:03:4f:15:94:05: 09:c8:ba:d0:74:ef:04:64:a9:df:7b:ed:85:34:99:9b:0d:84: cd:9b:67:54:2f:9e:a7:03:36:f5:26:f5:07:43:bd:cf:0c:03: 4b:ae:65:ee:fb:6f:a3:16:d2:94:bf:11:2b:82:c8:98:47:01: ff:3a:61:6b:6e:07:da:8c:f3:45:e0:dd:ec:57:9e:9f:23:60: f5:77:32:84:04:c4:77:08:a3:fc:52:b8:9e:09:70:0b:91:5d: 43:f7:78:1c:ef:ca:21:3e:24:85:48:9c:95:7c:f8:8f:b6:00: 8b:47:9a:a6:b7:57:86:d6:16:be:b2:fa:64:f5:50:5d:d9:bd: 94:cd:98:a1:2e:e0:3c:01:d0:3b:1a:65:4d:a4:a1:b0:c6:83: 52:11:ce:35:0b:cd:e1:7b:4c:ad:53:36:67:92:3c:8e:24:cb: c6:61:7f:a3:32:70:43:1c:29:3e:17:25:53:a2:73:14:ea:79: 3d:8e:33:6d:e1:39:67:4b:d5:8a:f0:f4:d2:f5:ae:84:9f:af: 72:a4:91:d0:83:7d:3a:89:fb:33:be:db:47:91:d4:0b:a5:b3: a7:fa:23:2e:e4:a6:a6:6b:00:88:d2:75:25:7b:09:50:87:e5: 93:56:04:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvcuWPiGZ7+2V8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ODY2NmQ3YWUtZGRmNC00NWI1LWE4MDItYWQ0MWViNGVlM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9UNac+aLvMTqtTFT951iX81FACb5+fe5oa7 7xxIQxOiVrvMGnOMVfhedPJ0JTNHDmDDLTRisPcaZdzxACnLEWWkoX43ENx0a5Ya nZX8lpm3GYQsuNrJjzLXKK7ZZ62gDhrtFKcM3XfMMiiI+RBr4WqTTDZ+hxTw13n7 dArdxnQJyr30Q25anpre/MvD3LEKy6Nl1VcjbuhCz3t0IYZOiMsDHpy2Jy9oo1Zc hgev/bGJgmRS2WNgTFRFQLiosx3pvQ5/FUCtJ+IAIGhQ9C2B7dGTpJi5hvB+MqMg CNSaQcdm4HY2F/OL6XjayOMDR4kqgb9tP9kPEHHyw9de5nokywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/0a2YeHX/3T39C4s2RVyuApzBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzc2OGJhYTYtZGQ2ZS0z YWY0LTlkZmYtMGUzOWY0NzRmYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR7eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsxCEa1LOUNGJmVTnsDTxWUBQnIutB07wRkqd977YU0mZsNhM2bZ1Qv nqcDNvUm9QdDvc8MA0uuZe77b6MW0pS/ESuCyJhHAf86YWtuB9qM80Xg3exXnp8j YPV3MoQExHcIo/xSuJ4JcAuRXUP3eBzvyiE+JIVInJV8+I+2AItHmqa3V4bWFr6y +mT1UF3ZvZTNmKEu4DwB0DsaZU2kobDGg1IRzjULzeF7TK1TNmeSPI4ky8Zhf6My cEMcKT4XJVOicxTqeT2OM23hOWdL1Yrw9NL1roSfr3KkkdCDfTqJ+zO+20eR1Aul s6f6Iy7kpqZrAIjSdSV7CVCH5ZNWBF4= -----END CERTIFICATE-----Generated at Mon Apr 28 14:25:10 2025 by rpki-client