$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa File: dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa (raw, json) Hash identifier: JaFjcqqOCo7F+plnJGv+AcJQRe5+mu+YAukQO9LCzVU= Subject key identifier: 1D:34:E5:3C:F9:46:A5:F3:FF:C7:BA:68:41:B7:08:BA:0D:3E:71:99 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F7789D01046533BB8A40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 71.191.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f7:78:9d:01:04:65:33:bb:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=d47cac3c-e3b7-45be-abc3-cb7c9cb541e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:f0:14:5c:f8:74:29:b4:48:ed:50:5f:a6: 96:33:68:23:fb:0a:69:6c:fe:cb:fc:d2:eb:52:90: ae:62:79:18:2f:3f:07:d7:60:54:57:4e:6b:0d:5c: 31:9f:5d:e0:c3:f2:67:f5:7c:cb:e0:b5:5b:fb:a9: 1b:50:15:a4:ef:51:b2:59:f8:7f:47:ef:2d:09:c9: f7:2c:dc:74:aa:d9:fa:91:b7:b8:24:c8:2a:0c:e5: 25:99:df:50:dd:21:20:64:20:d2:3a:0a:5d:76:41: 13:b1:4c:a0:3c:82:6c:7b:36:44:c3:3b:ee:05:4a: 2b:ce:22:93:0f:06:6c:11:21:12:d0:a1:e4:0c:78: 74:57:c9:a7:bc:5d:7a:42:51:65:61:15:50:fb:da: da:c1:20:88:cc:f9:86:cf:0b:2d:66:84:ec:71:65: e0:11:d6:eb:be:77:c0:3f:6b:9b:f1:0a:2e:27:4d: 1d:bd:6e:54:12:05:0a:13:53:57:48:c3:f1:0d:7a: d4:d1:6e:32:e9:65:60:39:b1:1d:5f:e7:3d:66:ea: 97:2b:7c:a9:c0:c3:5d:8e:da:a6:2e:ca:ba:ec:e1: 6a:22:7a:f2:f9:06:d6:d7:79:7c:2c:d9:01:7b:20: 3b:18:1c:4b:b2:de:91:e9:18:b3:8b:81:4c:ab:77: 6d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:34:E5:3C:F9:46:A5:F3:FF:C7:BA:68:41:B7:08:BA:0D:3E:71:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.191.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c5:dc:b2:da:0d:a9:f0:3f:33:e0:c0:e2:e0:83:7a:d6:57: 37:29:59:92:61:4b:7c:df:f2:8d:39:c3:4f:bf:83:6f:4b:82: b4:cf:d8:e7:89:8b:69:c4:ce:08:09:6e:12:31:0c:7f:dc:e2: 5f:6f:bb:b1:b0:2f:81:83:b2:4f:75:0d:01:c8:6e:9a:c6:4a: dd:23:f9:bc:49:a9:45:70:3c:ac:43:6b:2e:f5:25:a0:51:48: 55:fd:7d:66:c6:22:c9:5f:3d:83:b9:9d:cb:47:f2:b6:c8:0c: e9:7c:20:b4:c6:e0:bc:5c:91:ba:31:15:e2:61:14:1e:99:a1: ec:0b:19:c9:9d:a3:63:b0:fd:d5:ef:04:e5:f2:a8:be:1d:f7: 49:6a:bc:b0:98:22:a0:ea:fb:ba:97:f0:91:fd:c8:f1:d8:92: 72:e1:ed:74:97:93:73:50:98:a9:e5:bd:a7:8e:2b:f4:83:b3: 25:c2:44:54:8e:5b:8c:c6:c5:c4:c1:bf:1f:f9:61:8a:f4:0d: 57:81:b2:8b:60:70:f5:14:b7:6d:b9:d0:b5:99:d7:41:28:00: e7:ab:32:81:f1:e4:55:13:04:68:39:98:03:91:d3:ea:64:46: d6:80:3a:4e:78:9f:88:4a:f8:fc:24:e3:b5:ce:94:d7:30:ae: 74:2c:46:f3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRvd4nQEEZTO7ikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZDQ3Y2FjM2MtZTNiNy00NWJlLWFiYzMtY2I3YzljYjU0MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHHwFFz4dCm0SO1QX6aWM2gj+wppbP7L/NLr UpCuYnkYLz8H12BUV05rDVwxn13gw/Jn9XzL4LVb+6kbUBWk71GyWfh/R+8tCcn3 LNx0qtn6kbe4JMgqDOUlmd9Q3SEgZCDSOgpddkETsUygPIJsezZEwzvuBUorziKT DwZsESES0KHkDHh0V8mnvF16QlFlYRVQ+9rawSCIzPmGzwstZoTscWXgEdbrvnfA P2ub8QouJ00dvW5UEgUKE1NXSMPxDXrU0W4y6WVgObEdX+c9ZuqXK3ypwMNdjtqm Lsq67OFqInry+QbW13l8LNkBeyA7GBxLst6R6Rizi4FMq3dtwwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFB005Tz5RqXz/8e6aEG3CLoNPnGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGZmNzE3ZDktNWNjYi0z YTFlLTg1MDMtYjEzMzBkM2VlNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAR78wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUcXcstoNqfA/M+DA4uCDetZXNylZkmFLfN/yjTnDT7+Db0uCtM/Y54mL acTOCAluEjEMf9ziX2+7sbAvgYOyT3UNAchumsZK3SP5vEmpRXA8rENrLvUloFFI Vf19ZsYiyV89g7mdy0fytsgM6XwgtMbgvFyRujEV4mEUHpmh7AsZyZ2jY7D91e8E 5fKovh33SWq8sJgioOr7upfwkf3I8diScuHtdJeTc1CYqeW9p44r9IOzJcJEVI5b jMbFxMG/H/lhivQNV4Gyi2Bw9RS3bbnQtZnXQSgA56sygfHkVRMEaDmYA5HT6mRG 1oA6TnifiEr4/CTjtc6U1zCudCxG8w== -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:56 2025 by rpki-client