$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa File: bb072b22-497b-31d1-8292-b571a807b727.roa (raw, json) Hash identifier: 3qC7rw7tm1n3RQAeBSDRMLsN/dd0FlzK0YAhxzlTwPk= Subject key identifier: 93:B1:80:4A:18:CE:51:25:2C:9C:DC:CC:E0:90:D5:DC:B8:61:62:22 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584957F3F058C625927A1808CC80 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 138699 IP address blocks: 71.18.255.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f0:58:c6:25:92:7a:18:08:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=5c37ac1c-29b2-428f-bf42-d6f4832de6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c5:ba:a7:b8:15:d7:f8:62:6e:f9:5e:4e:fe: 49:bf:82:4c:be:3c:04:d3:1b:3c:19:3c:68:dd:b5: 8b:d0:10:46:a2:e5:72:fc:c1:0f:9e:ef:bb:b2:87: af:7e:fa:c9:4c:60:10:0b:84:11:1f:11:e7:4f:92: 13:c4:d6:5c:68:17:7c:2a:67:e3:0d:82:ce:80:7f: 8e:f0:cb:e6:59:79:cb:68:19:b0:9c:da:71:6a:e9: b8:b5:28:b9:08:07:41:e3:ca:e1:e7:a1:d8:e8:ae: 66:f3:f8:b9:c4:d2:94:31:04:86:e8:e4:c4:8f:06: 86:11:b8:47:aa:df:07:55:9b:93:3b:ec:17:59:2c: d4:68:fd:a4:45:b5:17:2a:2f:c2:d8:eb:2c:81:da: 21:a7:cd:f9:af:25:48:9b:7a:f6:36:67:ba:3d:4f: 68:68:33:a9:fe:26:da:78:4a:f1:7e:68:06:f3:ba: f8:8a:38:60:27:04:26:86:97:39:ac:a4:ff:67:4c: 2e:8c:4f:84:df:11:80:c9:69:d7:fb:2c:3c:94:f8: 01:6d:77:5c:ad:b7:32:fc:cc:d0:a3:f4:df:8b:ad: 6d:db:c3:5b:3c:3c:9c:9d:14:ac:7a:b5:ef:73:1f: e4:c7:3d:05:ed:f8:66:83:35:e2:1e:9f:a8:f5:04: 6c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B1:80:4A:18:CE:51:25:2C:9C:DC:CC:E0:90:D5:DC:B8:61:62:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:31:e7:c6:2a:4f:b5:80:2b:b7:a3:c5:4b:21:bd:d3:bd:65: db:21:9f:8b:fd:34:3e:7b:bf:3f:de:9a:b8:a4:b1:b7:8a:6e: 4d:0a:c1:da:df:3d:bf:31:17:ca:ac:a1:23:33:f4:71:74:c7: ec:c2:8e:0f:65:ee:fb:7b:63:e5:4f:18:c4:d9:c6:6a:bc:10: ad:5e:7c:de:47:5e:ed:22:90:56:2a:c3:e4:26:23:8c:e2:99: cd:87:88:7b:41:8d:73:5e:7f:b7:7c:b8:f7:5b:85:2b:2b:ce: 06:9e:3a:31:e5:93:ec:b0:44:87:23:14:b3:1f:12:e7:8f:62: e4:86:c2:79:a5:93:53:d4:98:1b:56:34:22:31:c7:fd:77:ce: 43:15:40:ed:bf:d5:8b:8c:47:1c:b5:6c:60:05:d0:84:27:b1: e6:81:13:4b:49:00:f4:ce:6d:d0:b6:09:70:cc:be:c0:79:22: 3e:28:77:f8:89:d6:b1:2b:f4:73:00:3a:cc:45:29:4a:91:e6: 72:88:63:ce:86:39:52:11:53:ac:12:6b:8a:f9:04:8c:f7:f9: 05:85:24:4f:bf:e3:19:60:7c:49:bd:dc:5d:fa:56:f4:cf:8a: 0e:dc:f6:6b:64:99:8c:34:00:ba:52:15:b3:27:41:ee:6b:31: 15:9a:5a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/BYxiWSehgIzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NWMzN2FjMWMtMjliMi00MjhmLWJmNDItZDZmNDgzMmRlNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMW6p7gV1/hibvleTv5Jv4JMvjwE0xs8GTxo 3bWL0BBGouVy/MEPnu+7soevfvrJTGAQC4QRHxHnT5ITxNZcaBd8KmfjDYLOgH+O 8MvmWXnLaBmwnNpxaum4tSi5CAdB48rh56HY6K5m8/i5xNKUMQSG6OTEjwaGEbhH qt8HVZuTO+wXWSzUaP2kRbUXKi/C2Ossgdohp835ryVIm3r2Nme6PU9oaDOp/iba eErxfmgG87r4ijhgJwQmhpc5rKT/Z0wujE+E3xGAyWnX+yw8lPgBbXdcrbcy/MzQ o/Tfi61t28NbPDycnRSserXvcx/kxz0F7fhmgzXiHp+o9QRsvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOxgEoYzlElLJzczOCQ1dy4YWIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvYmIwNzJiMjItNDk3Yi0z MWQxLTgyOTItYjU3MWE4MDdiNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxL/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8x58YqT7WAK7ejxUshvdO9Zdshn4v9ND57vz/emriksbeKbk0Kwdrf Pb8xF8qsoSMz9HF0x+zCjg9l7vt7Y+VPGMTZxmq8EK1efN5HXu0ikFYqw+QmI4zi mc2HiHtBjXNef7d8uPdbhSsrzgaeOjHlk+ywRIcjFLMfEuePYuSGwnmlk1PUmBtW NCIxx/13zkMVQO2/1YuMRxy1bGAF0IQnseaBE0tJAPTObdC2CXDMvsB5Ij4od/iJ 1rEr9HMAOsxFKUqR5nKIY86GOVIRU6wSa4r5BIz3+QWFJE+/4xlgfEm93F36VvTP ig7c9mtkmYw0ALpSFbMnQe5rMRWaWgI= -----END CERTIFICATE-----Generated at Sun Apr 6 21:28:28 2025 by rpki-client