$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d655159a-661f-3b96-b635-e8b5d4a0a95a.roa File: d655159a-661f-3b96-b635-e8b5d4a0a95a.roa (raw, json) Hash identifier: ElUfMQlwvZEelrEYUg5WIf8RZhZtHAM5Qy7ZXPfJKm8= Subject key identifier: 3A:EC:87:88:F1:97:AE:A5:EC:01:B2:AF:BC:45:35:A5:97:F7:11:E7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC0B5D577F170568D76380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d655159a-661f-3b96-b635-e8b5d4a0a95a.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.96.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:0b:5d:57:7f:17:05:68:d7:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=9982002c-c4ad-4911-b0e7-cac8fbf04eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8f:5d:a9:0d:21:d5:bf:c7:f1:cc:7e:1c:66: 25:69:d5:c7:f8:ec:a1:a3:8a:83:70:0b:4f:c0:41: f9:b6:ab:3c:04:e6:06:47:46:bb:79:a2:96:3c:10: ca:92:a2:b7:b6:ae:45:3a:55:8e:37:e5:e5:15:26: 9f:4e:da:4c:fd:58:87:c5:01:d3:7c:b6:a4:b2:ca: f8:9c:b8:e1:2f:ba:29:4d:b3:4e:65:b8:dc:83:18: 88:8e:67:df:2f:65:d3:e6:fd:82:13:f1:c5:62:ec: 18:09:42:cc:ad:4a:50:94:96:48:3d:3d:02:84:43: 9c:22:8d:04:72:35:66:18:82:b6:07:69:40:eb:9e: 18:32:9f:98:75:ab:4f:23:51:5f:69:6e:0a:ce:70: 08:fa:6d:41:ec:f6:6f:59:9a:7d:e6:e4:2f:29:8f: e8:e1:bf:45:fb:7b:9d:bb:78:e1:00:f2:f8:9c:3d: ef:dc:b0:4e:2d:fe:c0:60:3c:0f:55:a7:9e:82:e3: 36:9f:a4:02:bc:4e:7f:1f:60:fe:a1:98:57:67:19: f9:1e:2c:32:d7:d2:05:f6:00:55:48:15:99:89:64: 7b:f7:01:88:98:da:06:de:7c:f5:fd:a5:03:b8:e8: e4:ba:c9:ba:df:aa:28:d0:f6:c8:02:67:7e:a9:24: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EC:87:88:F1:97:AE:A5:EC:01:B2:AF:BC:45:35:A5:97:F7:11:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d655159a-661f-3b96-b635-e8b5d4a0a95a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:db:c1:e7:50:02:09:4d:a7:ef:1a:fe:df:df:a8:81:41:ff: fa:26:ab:c9:d0:b9:88:59:ac:a7:92:80:30:6c:ee:f8:28:f9: 1b:98:61:23:ed:0b:6a:21:fc:a5:83:cd:eb:12:08:5d:6f:b3: d0:4b:53:1c:7a:e7:01:f4:86:11:01:89:69:e0:e3:0b:33:9d: 45:c5:00:26:47:47:81:a7:d8:2a:b7:65:e8:fc:42:80:af:84: f3:bb:7b:6b:8c:d4:9f:fb:7f:9a:b8:f3:a4:34:aa:67:66:de: 60:d4:4f:b6:74:27:19:9c:6d:e5:fd:a6:0d:fe:73:89:45:ac: 23:13:20:60:0d:6a:76:88:0f:05:6f:ac:eb:af:82:e8:42:e9: f9:66:fd:1a:5e:15:84:9e:18:5a:0b:2f:a8:a7:43:9f:80:25: 46:2c:e4:43:f0:fb:7b:29:4d:31:46:02:0a:6a:d7:d3:1b:b0: cc:e7:45:e0:a7:41:95:d9:9f:92:e3:cb:13:99:bc:97:ad:98: da:43:53:12:7a:a8:83:1d:ac:cd:d5:72:95:71:de:49:75:72: 29:ed:aa:08:22:54:b1:47:9c:bd:15:4b:63:5b:eb:6e:1a:52: 2d:ae:1b:39:de:ec:38:49:98:79:9a:2c:4e:55:10:33:7d:2c: dc:43:32:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AtdV38XBWjXY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk OTk4MjAwMmMtYzRhZC00OTExLWIwZTctY2FjOGZiZjA0ZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk49dqQ0h1b/H8cx+HGYladXH+Oyho4qDcAtP wEH5tqs8BOYGR0a7eaKWPBDKkqK3tq5FOlWON+XlFSafTtpM/ViHxQHTfLakssr4 nLjhL7opTbNOZbjcgxiIjmffL2XT5v2CE/HFYuwYCULMrUpQlJZIPT0ChEOcIo0E cjVmGIK2B2lA654YMp+YdatPI1FfaW4KznAI+m1B7PZvWZp95uQvKY/o4b9F+3ud u3jhAPL4nD3v3LBOLf7AYDwPVaeeguM2n6QCvE5/H2D+oZhXZxn5Hiwy19IF9gBV SBWZiWR79wGImNoG3nz1/aUDuOjkusm636oo0PbIAmd+qSSbjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrsh4jxl66l7AGyr7xFNaWX9xHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDY1NTE1OWEtNjYxZi0z Yjk2LWI2MzUtZThiNWQ0YTBhOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSGCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvbwedQAglNp+8a/t/fqIFB//omq8nQuYhZrKeSgDBs7vgo+RuYYSPt C2oh/KWDzesSCF1vs9BLUxx65wH0hhEBiWng4wsznUXFACZHR4Gn2Cq3Zej8QoCv hPO7e2uM1J/7f5q486Q0qmdm3mDUT7Z0JxmcbeX9pg3+c4lFrCMTIGANanaIDwVv rOuvguhC6flm/RpeFYSeGFoLL6inQ5+AJUYs5EPw+3spTTFGAgpq19MbsMznReCn QZXZn5LjyxOZvJetmNpDUxJ6qIMdrM3VcpVx3kl1cintqggiVLFHnL0VS2Nb624a Ui2uGzne7DhJmHmaLE5VEDN9LNxDMvQ= -----END CERTIFICATE-----Generated at Sun Apr 27 04:00:07 2025 by rpki-client