$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa File: eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa (raw, json) Hash identifier: fuSEMBgzajNEJjWY89FmdrasGVgVyCLkXtcEIXZyVDw= Subject key identifier: 2A:F4:5C:BF:14:5E:BD:9B:04:68:63:B9:8A:09:5F:92:E5:67:BE:29 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F658362EEFCC3A1E70A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 70.21.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f6:58:36:2e:ef:cc:3a:1e:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=ba958d29-3b6c-4c6e-95ba-25ed26f80581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:12:6f:e3:bd:77:e4:14:de:e6:66:46:5b: e4:74:47:38:fe:a2:ca:aa:ad:5c:34:71:34:34:d5: 88:30:58:5f:cb:2a:88:9d:52:9e:a4:04:3b:70:38: 98:6e:bb:99:42:07:36:61:95:51:5a:ca:f2:1e:64: 6b:e6:35:2b:3c:26:57:30:a3:02:ad:35:b0:9b:ee: 1d:bd:05:5b:5a:8e:e9:5a:f5:32:1c:b4:97:1c:d9: 2a:a1:3c:b0:6d:17:89:62:94:78:30:75:1b:7f:2b: 42:28:81:3d:67:e8:a7:77:2b:5c:e8:41:d2:c6:80: e7:9e:9b:7d:10:9e:59:04:9b:47:bb:32:c5:4f:d3: 7c:45:3f:7e:c1:05:49:de:8e:4b:9c:cb:cf:ff:ea: 3a:f5:c6:53:2a:58:ae:b3:24:59:8a:41:1e:59:8d: 3a:8b:11:ff:63:7a:89:17:fc:86:23:10:b5:03:5e: 7a:7f:b0:a5:8f:1a:65:d2:87:ac:70:8d:c6:5b:6a: 09:e6:40:3c:52:85:40:14:c5:83:ff:6a:50:6c:91: 7a:3a:1f:8c:f6:fd:d5:b9:82:a1:dc:e1:29:b3:a1: 59:d2:9e:09:f5:ad:8d:63:74:e2:b7:cf:80:6c:f4: b1:fc:ad:71:3c:e6:a5:c8:d8:e9:73:4b:2c:da:69: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F4:5C:BF:14:5E:BD:9B:04:68:63:B9:8A:09:5F:92:E5:67:BE:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.21.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:bc:19:e1:d9:88:5f:cf:1b:5f:7b:4c:41:61:06:ec:20:76: b7:0f:cd:bd:ce:6b:2f:86:fe:8b:17:41:a3:87:43:15:94:21: f2:70:b3:c4:bd:70:05:36:a9:43:0a:fd:9c:da:24:a2:ff:0e: 5b:77:d5:60:78:cd:e5:58:3f:12:e4:0c:42:96:b3:fd:2d:ab: 37:49:43:5e:eb:8e:a1:8f:a3:97:1e:0d:06:19:c2:10:a9:da: 7b:93:01:71:a4:58:f4:67:ba:19:c6:56:e5:26:48:0c:06:c1: 3f:b0:f2:e2:ae:df:9f:15:9b:75:39:d1:2d:7f:a2:32:b9:55: a6:4c:21:39:d2:57:d3:ce:a0:15:dd:42:d6:d0:58:1f:d2:bc: 37:60:c9:e9:2f:0d:3f:27:73:c0:50:26:a1:23:ca:96:d3:ee: 89:c0:c8:24:d3:d1:dd:bb:c1:20:7b:b4:4e:1d:8e:6d:05:6f: f3:69:a3:c1:97:4c:ad:fc:bf:4c:86:69:51:7b:2b:46:ce:fc: 47:3b:cb:17:fb:b7:86:45:f9:72:a4:18:8d:d7:0c:7e:b3:5d: 69:60:23:db:b4:63:27:00:40:f7:c0:c9:77:11:04:c7:b8:46: bd:c3:13:d9:e1:c0:73:cc:0e:48:2e:e7:fb:c9:5e:75:c1:89: 8d:9a:8a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvZYNi7vzDoecKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmE5NThkMjktM2I2Yy00YzZlLTk1YmEtMjVlZDI2ZjgwNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPgSb+O9d+QU3uZmRlvkdEc4/qLKqq1cNHE0 NNWIMFhfyyqInVKepAQ7cDiYbruZQgc2YZVRWsryHmRr5jUrPCZXMKMCrTWwm+4d vQVbWo7pWvUyHLSXHNkqoTywbReJYpR4MHUbfytCKIE9Z+indytc6EHSxoDnnpt9 EJ5ZBJtHuzLFT9N8RT9+wQVJ3o5LnMvP/+o69cZTKliusyRZikEeWY06ixH/Y3qJ F/yGIxC1A156f7Cljxpl0oescI3GW2oJ5kA8UoVAFMWD/2pQbJF6Oh+M9v3VuYKh 3OEps6FZ0p4J9a2NY3Tit8+AbPSx/K1xPOalyNjpc0ss2mmK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr0XL8UXr2bBGhjuYoJX5LlZ74pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWZmNWYzY2MtZDA1NC0z YWMxLWE2MmUtNDgxYmY4ZjlkN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG8GeHZiF/PG197TEFhBuwgdrcPzb3Oay+G/osXQaOHQxWUIfJws8S9 cAU2qUMK/ZzaJKL/Dlt31WB4zeVYPxLkDEKWs/0tqzdJQ17rjqGPo5ceDQYZwhCp 2nuTAXGkWPRnuhnGVuUmSAwGwT+w8uKu358Vm3U50S1/ojK5VaZMITnSV9POoBXd QtbQWB/SvDdgyekvDT8nc8BQJqEjypbT7onAyCTT0d27wSB7tE4djm0Fb/Npo8GX TK38v0yGaVF7K0bO/Ec7yxf7t4ZF+XKkGI3XDH6zXWlgI9u0YycAQPfAyXcRBMe4 Rr3DE9nhwHPMDkgu5/vJXnXBiY2ailQ= -----END CERTIFICATE-----Generated at Mon Apr 28 14:28:54 2025 by rpki-client