$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa File: ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa (raw, json) Hash identifier: JeU08mtMUwBbht7gld7oqpUD717p2n9/qht7uC1jAss= Subject key identifier: 12:1C:36:81:D6:D0:EE:19:C7:60:B0:49:8E:33:74:9B:0E:B6:4C:6B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C2CDF4F0AB2F2461EE840 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 72.70.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:2c:df:4f:0a:b2:f2:46:1e:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=ca22addc-1693-4672-a487-41d3091a9455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:66:4d:99:33:dc:8b:cf:8a:57:32:c7:62:4d: 23:3a:27:fc:81:4c:a9:63:aa:f9:27:d5:79:58:9b: fa:f6:69:7b:4c:be:9a:67:4d:1b:8a:47:a6:08:91: c1:5f:a7:a9:6b:15:16:96:94:e5:ee:cf:9e:d5:d2: 1f:ea:ee:21:4d:40:a2:f8:4d:8e:e6:a8:ea:02:29: 42:1c:9c:19:d7:69:1d:a0:c1:a6:42:34:16:24:94: b3:08:8e:e0:1d:e6:b0:0c:7a:d7:47:ca:35:aa:b1: 4b:06:cf:10:7c:fd:b0:e2:3f:e4:0e:d1:c9:f6:76: 20:4f:93:48:44:ec:41:f1:ef:94:ca:96:c1:51:b4: 73:31:99:42:dc:53:cb:33:fc:cb:d2:d8:9f:87:26: 99:ec:bb:9b:36:fa:db:dd:2e:ae:fc:7a:85:70:08: ef:e1:57:7d:a1:9e:8a:f8:f7:68:ae:fd:fc:66:16: 72:56:a3:58:6b:99:7f:0e:84:b9:1f:02:8d:ca:02: d5:9a:63:0f:20:fb:60:3e:01:6a:9b:3b:ba:be:53: d4:86:36:73:68:23:23:44:44:aa:e3:78:20:5a:c1: 06:06:56:9e:d9:3b:df:a5:da:60:d1:fa:8f:aa:ea: aa:b6:cc:ab:39:a4:e3:c8:1c:44:6d:b8:c2:bb:b3: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1C:36:81:D6:D0:EE:19:C7:60:B0:49:8E:33:74:9B:0E:B6:4C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.70.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:58:46:88:4e:a9:ad:44:6c:e7:7a:04:11:ee:94:2a:dc:46: 41:6e:07:a8:3b:86:51:58:43:c2:4f:3f:cc:46:7c:7b:17:78: 46:7c:eb:49:f6:21:66:d0:38:b5:78:d1:51:84:12:f8:78:89: 7e:bc:01:d5:60:4a:32:1f:c8:bd:ed:e1:c5:2c:a4:9c:ac:75: bd:28:dc:af:74:08:2c:8a:f6:a5:de:20:5f:da:13:be:fe:ca: b5:ec:69:22:ad:ae:2f:c7:f4:a2:83:d0:a1:82:35:6d:42:d0: 26:65:57:2d:ab:d8:87:d5:30:67:ef:26:d2:05:a0:30:80:eb: 9e:c7:62:cb:7c:ec:81:a5:8b:d0:b4:11:09:1f:5f:6d:e5:be: 6b:40:3c:40:9a:68:b8:d8:70:93:59:17:8d:1c:76:98:b9:e8: b7:07:54:8d:2f:ce:2c:2b:17:b5:c4:5c:08:8a:ba:e4:fb:85: fb:c5:74:f2:3b:a3:cb:58:a0:1b:a0:e0:ce:8e:9d:29:cc:47: f7:cb:c6:3d:fb:07:33:03:a1:03:9f:e4:83:36:c9:e6:b7:a7: 4d:61:90:10:1d:9c:bf:6f:be:88:57:c3:b1:ff:e4:bd:51:dc: 47:48:09:3d:dc:ff:97:d6:30:3e:ad:7d:4e:2d:52:45:92:82: 5a:b5:28:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCzfTwqy8kYe6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk Y2EyMmFkZGMtMTY5My00NjcyLWE0ODctNDFkMzA5MWE5NDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmZNmTPci8+KVzLHYk0jOif8gUypY6r5J9V5 WJv69ml7TL6aZ00bikemCJHBX6epaxUWlpTl7s+e1dIf6u4hTUCi+E2O5qjqAilC HJwZ12kdoMGmQjQWJJSzCI7gHeawDHrXR8o1qrFLBs8QfP2w4j/kDtHJ9nYgT5NI ROxB8e+UypbBUbRzMZlC3FPLM/zL0tifhyaZ7LubNvrb3S6u/HqFcAjv4Vd9oZ6K +Pdorv38ZhZyVqNYa5l/DoS5HwKNygLVmmMPIPtgPgFqmzu6vlPUhjZzaCMjRESq 43ggWsEGBlae2Tvfpdpg0fqPquqqtsyrOaTjyBxEbbjCu7MhNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIcNoHW0O4Zx2CwSY4zdJsOtkxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2EyYWU5NWMtYTc3ZC0z Mjk0LTk1MmEtMGEzYTEwMjNkMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSEYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJYRohOqa1EbOd6BBHulCrcRkFuB6g7hlFYQ8JPP8xGfHsXeEZ860n2 IWbQOLV40VGEEvh4iX68AdVgSjIfyL3t4cUspJysdb0o3K90CCyK9qXeIF/aE77+ yrXsaSKtri/H9KKD0KGCNW1C0CZlVy2r2IfVMGfvJtIFoDCA657HYst87IGli9C0 EQkfX23lvmtAPECaaLjYcJNZF40cdpi56LcHVI0vziwrF7XEXAiKuuT7hfvFdPI7 o8tYoBug4M6OnSnMR/fLxj37BzMDoQOf5IM2yea3p01hkBAdnL9vvohXw7H/5L1R 3EdICT3c/5fWMD6tfU4tUkWSglq1KLs= -----END CERTIFICATE-----Generated at Mon Apr 28 00:01:32 2025 by rpki-client