$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa File: e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa (raw, json) Hash identifier: ICSRs7OZx+ZWXcQ4NuwlN39t40ARWlHqE8x3P++Qh8A= Subject key identifier: 99:24:1C:59:85:31:06:D6:12:BE:88:07:4D:B9:0C:B8:6A:35:B8:BC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C3296FA3C965BBA684BC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 70.106.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:32:96:fa:3c:96:5b:ba:68:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=1fab2a8a-400d-48d7-979d-b00fbe2c0295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:ac:6c:48:87:ff:fb:8d:2e:21:c7:9e:9a: f5:a3:2f:38:14:7f:8e:44:b8:6c:7f:79:98:76:46: 99:0a:ae:9b:ef:82:20:92:f0:f8:92:58:d3:96:2c: c9:49:fe:75:30:87:1e:0b:fe:cf:8b:21:1e:61:aa: be:ca:ab:82:1a:f1:16:db:d6:44:ce:3e:e2:81:6b: 41:71:47:e2:da:76:ef:19:fe:a6:fa:c6:65:db:0c: a6:90:af:1a:d2:0a:d1:bd:87:72:15:0f:3d:f5:ac: 7d:3a:7d:d1:e5:09:b7:8a:25:e5:a0:0a:76:c0:5e: a5:1d:ff:1e:8c:4f:f9:f2:3e:b4:0c:66:29:0c:dd: 39:40:ca:39:58:15:da:21:5d:9a:e7:f5:ab:17:32: e2:c2:89:36:b7:e7:43:b9:46:8d:f1:64:c4:16:0a: 83:89:0b:65:0e:f6:8f:c0:4c:42:34:fa:27:a0:e1: f9:6b:c0:d3:3a:05:8e:20:78:37:ff:74:d7:f7:43: 08:0e:97:36:14:24:5b:47:9a:28:50:b9:63:da:ca: 4f:85:db:9d:f0:49:75:f1:07:90:23:79:be:84:a3: da:15:5e:e3:4e:f8:dd:f6:4f:04:be:33:49:67:e0: ed:3d:d0:cc:f3:06:ae:f9:2f:c4:47:29:44:c3:a8: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:24:1C:59:85:31:06:D6:12:BE:88:07:4D:B9:0C:B8:6A:35:B8:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.106.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4b:c7:6d:ea:a1:92:d7:5e:ff:80:cc:5c:2c:90:76:03:f3: fa:8e:09:2c:2d:d3:32:90:d7:3c:d8:82:92:95:16:bb:1d:68: 09:87:08:0a:34:65:cc:74:01:8b:1c:ca:a6:46:15:bb:8d:4a: ec:58:82:be:7a:9d:88:94:35:92:2d:c6:b1:9d:e2:cf:79:0e: 9c:e1:2e:d5:cb:43:f2:fb:74:ce:e2:96:29:d0:32:c5:d3:c2: ad:65:c9:a1:77:20:01:e9:03:0a:85:e7:32:dc:1e:12:01:5b: 27:6b:bc:90:49:3b:28:6a:bb:1d:fe:3e:61:d1:eb:73:6c:36: c7:41:b3:27:5e:84:f0:4a:5a:62:6f:23:28:ad:44:f6:76:e4: 40:9a:60:df:52:f6:06:e9:b4:20:54:de:15:87:d5:f2:1c:61: 71:21:15:fb:92:2b:11:51:56:44:38:ed:11:83:4c:8e:f1:6e: da:20:f0:47:c4:47:51:5d:00:57:45:27:76:b6:ce:3e:b9:73: f3:f0:4c:90:dd:59:2f:e7:56:22:c8:02:4d:c3:85:c1:aa:11: d9:d7:f0:c7:f4:76:5b:96:ad:6a:90:ba:75:90:b9:ae:f0:28: 26:2a:42:f1:80:25:30:c3:53:12:52:9f:60:3d:ab:f2:3d:64: b8:7d:e6:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDKW+jyWW7poS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MWZhYjJhOGEtNDAwZC00OGQ3LTk3OWQtYjAwZmJlMmMwMjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxKsbEiH//uNLiHHnpr1oy84FH+ORLhsf3mY dkaZCq6b74IgkvD4kljTlizJSf51MIceC/7PiyEeYaq+yquCGvEW29ZEzj7igWtB cUfi2nbvGf6m+sZl2wymkK8a0grRvYdyFQ899ax9On3R5Qm3iiXloAp2wF6lHf8e jE/58j60DGYpDN05QMo5WBXaIV2a5/WrFzLiwok2t+dDuUaN8WTEFgqDiQtlDvaP wExCNPonoOH5a8DTOgWOIHg3/3TX90MIDpc2FCRbR5ooULlj2spPhdud8El18QeQ I3m+hKPaFV7jTvjd9k8EvjNJZ+DtPdDM8wau+S/ERylEw6hLXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkkHFmFMQbWEr6IB025DLhqNbi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTNlZTU4YjktZTAxZC0z YWFhLThiNGMtYzlhYTdiMmY5OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERmoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdLx23qoZLXXv+AzFwskHYD8/qOCSwt0zKQ1zzYgpKVFrsdaAmHCAo0 Zcx0AYscyqZGFbuNSuxYgr56nYiUNZItxrGd4s95DpzhLtXLQ/L7dM7ilinQMsXT wq1lyaF3IAHpAwqF5zLcHhIBWydrvJBJOyhqux3+PmHR63NsNsdBsydehPBKWmJv IyitRPZ25ECaYN9S9gbptCBU3hWH1fIcYXEhFfuSKxFRVkQ47RGDTI7xbtog8EfE R1FdAFdFJ3a2zj65c/PwTJDdWS/nViLIAk3DhcGqEdnX8Mf0dluWrWqQunWQua7w KCYqQvGAJTDDUxJSn2A9q/I9ZLh95u8= -----END CERTIFICATE-----Generated at Sun Apr 27 17:44:55 2025 by rpki-client