$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa File: f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa (raw, json) Hash identifier: HkuXMgiI8BHZdkIbltNYHAqPcqXWvrQfnafmYqgJcns= Subject key identifier: 07:6B:23:66:E4:7B:E8:69:01:7D:8C:19:4D:18:3A:84:62:A4:C3:EF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D189F89C946E1E975D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 108.8.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d1:89:f8:9c:94:6e:1e:97:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1e172f54-c848-4d77-a1c3-3207684dda7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b2:43:bd:db:5b:ed:f4:7a:40:97:72:3c:e3: 8c:f0:3a:c2:5e:ee:87:4f:ea:7c:34:b8:56:1d:49: 51:e8:2e:69:05:e0:8c:23:29:40:4a:54:2c:5a:1c: 37:f7:0c:c7:7b:7e:93:ec:bd:08:48:84:1b:04:20: d5:5a:b7:85:9f:e9:14:e4:51:b1:84:9d:34:3b:59: 24:9b:e0:90:49:f4:6d:f7:fd:39:40:7c:44:c4:02: 24:22:29:29:84:bb:87:83:2c:35:6a:14:90:07:8c: 7a:42:7b:92:a4:a3:b0:9e:7a:d5:32:2c:aa:e7:3a: 75:8e:9b:5c:7d:18:a6:11:87:d7:65:1a:68:23:9b: 75:b0:5d:54:8b:b5:db:99:6c:e4:43:df:16:60:89: 36:81:61:6b:01:fd:f3:a8:c8:ab:fc:c5:38:f1:18: 2b:0a:90:3e:64:b2:42:7a:8b:65:de:c5:be:d9:be: 34:e5:8a:71:b5:fa:ac:e0:a8:77:04:83:8b:8c:02: 0d:8e:e9:7c:bf:16:4e:64:9e:51:e8:45:4a:9b:68: 34:5d:e4:da:a4:b5:d0:de:c0:fa:f0:8d:a3:56:b6: ea:f7:4b:2b:2f:07:3a:36:7a:03:ea:95:2a:24:9d: d4:fc:36:ec:9e:d9:ad:e8:09:08:24:5d:ae:92:e5: 10:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6B:23:66:E4:7B:E8:69:01:7D:8C:19:4D:18:3A:84:62:A4:C3:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.8.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:00:a1:5a:06:9f:ab:f0:83:3c:54:d2:b0:36:11:61:94:72: 12:1a:c4:78:ab:d4:aa:f5:20:4c:e9:11:e8:8d:d7:18:08:c2: 92:c7:cf:a3:05:85:1e:0d:01:00:4d:cf:4e:f5:58:aa:a0:fa: 36:ea:67:b2:ee:a7:81:ef:2c:b3:7c:5f:af:22:69:b1:37:23: 3a:62:b4:44:ea:9b:e6:88:92:f8:df:17:d3:15:82:d7:7e:55: 87:ac:aa:57:a5:5c:b1:34:40:88:d7:be:c6:00:f2:7b:99:e3: 5b:a0:0d:97:be:c4:4f:6f:b2:24:73:c5:50:a1:5d:3c:34:aa: 73:cc:2f:53:16:a1:8a:7f:98:92:28:a2:6c:2c:7f:2c:0e:22: 35:74:e9:70:d4:25:94:bd:55:d8:f3:27:ee:72:d0:75:03:24: ea:90:08:f2:b5:ce:93:d0:dc:63:bf:47:a5:4f:2a:17:c1:f4: ef:1b:34:47:17:77:79:6d:b9:c7:b6:20:5a:e9:dc:e3:d2:5f: 0e:6a:f9:bc:64:f3:f3:fb:5a:f1:79:e1:8b:e8:1e:b8:eb:0a: af:5e:ca:27:3e:df:ee:c0:96:dc:79:1d:cf:4f:33:35:20:52: 00:a8:00:3c:95:dd:b2:fb:a3:f8:1e:06:85:10:b1:96:78:4b: d3:23:47:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtGJ+JyUbh6XXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MWUxNzJmNTQtYzg0OC00ZDc3LWExYzMtMzIwNzY4NGRkYTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87JDvdtb7fR6QJdyPOOM8DrCXu6HT+p8NLhW HUlR6C5pBeCMIylASlQsWhw39wzHe36T7L0ISIQbBCDVWreFn+kU5FGxhJ00O1kk m+CQSfRt9/05QHxExAIkIikphLuHgyw1ahSQB4x6QnuSpKOwnnrVMiyq5zp1jptc fRimEYfXZRpoI5t1sF1Ui7XbmWzkQ98WYIk2gWFrAf3zqMir/MU48RgrCpA+ZLJC eotl3sW+2b405Ypxtfqs4Kh3BIOLjAINjul8vxZOZJ5R6EVKm2g0XeTapLXQ3sD6 8I2jVrbq90srLwc6NnoD6pUqJJ3U/Dbsntmt6AkIJF2ukuUQswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdrI2bke+hpAX2MGU0YOoRipMPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjJkZjVlZTgtZmJkNi0z OTIwLTlhYzAtNjIxOThmMDRkNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbAgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUAoVoGn6vwgzxU0rA2EWGUchIaxHir1Kr1IEzpEeiN1xgIwpLHz6MF hR4NAQBNz071WKqg+jbqZ7Lup4HvLLN8X68iabE3IzpitETqm+aIkvjfF9MVgtd+ VYesqlelXLE0QIjXvsYA8nuZ41ugDZe+xE9vsiRzxVChXTw0qnPML1MWoYp/mJIo omwsfywOIjV06XDUJZS9VdjzJ+5y0HUDJOqQCPK1zpPQ3GO/R6VPKhfB9O8bNEcX d3ltuce2IFrp3OPSXw5q+bxk8/P7WvF54YvoHrjrCq9eyic+3+7Altx5Hc9PMzUg UgCoADyV3bL7o/geBoUQsZZ4S9MjR6Y= -----END CERTIFICATE-----Generated at Sat Apr 26 22:45:48 2025 by rpki-client