$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c33d31-01e9-3f84-ae5b-c22d6322f47b.roa File: 08c33d31-01e9-3f84-ae5b-c22d6322f47b.roa (raw, json) Hash identifier: 6Y5wZ+m2igfTF2jz7DLHHmmqdr4I7RWmxOwIyREGam4= Subject key identifier: 19:D2:1F:AE:42:75:31:08:7E:7C:51:BF:C4:6E:DB:44:D9:AC:F9:A1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F6D4E3D7489AB36D26A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c33d31-01e9-3f84-ae5b-c22d6322f47b.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 71.167.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f6:d4:e3:d7:48:9a:b3:6d:26:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=4ef937bc-3140-44cc-a004-c0a293ba1f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:27:3d:8f:d2:06:b8:95:28:c9:4e:f2:a9: d0:03:d5:99:73:31:42:cd:a1:58:4d:de:70:8d:ee: 20:dd:7e:dc:c6:d3:d7:18:23:1f:6a:1b:cc:16:1c: 70:41:4f:24:b4:85:8e:4e:48:f5:29:e0:48:b6:05: ce:1d:c3:20:4e:1a:74:26:8b:b9:40:2b:98:d3:92: 98:d3:24:96:31:7f:24:f8:9c:97:06:42:94:3f:31: c7:37:b5:5c:59:d7:d3:2b:9e:39:bf:6f:22:8d:b9: 83:2e:c0:22:34:a7:14:79:f9:c4:e9:7a:ca:18:91: 1d:ee:f5:b0:ba:e1:bf:43:a4:30:d8:7c:57:f1:a6: 2f:d3:dd:0e:3a:93:15:d5:92:c9:d1:22:20:a2:ec: 0a:b8:1c:ce:a2:31:cc:36:27:41:91:f8:2c:f1:c5: 04:69:22:fd:cc:4e:5d:2a:42:2e:cf:56:4c:e5:5a: 3a:40:15:9b:6a:be:bb:39:45:37:fd:ba:57:69:d4: 9b:77:fb:17:d3:02:e8:56:1c:c6:c6:61:62:0f:e0: 26:15:71:34:9d:58:03:50:b0:1f:51:c2:b8:90:38: 74:5c:3b:3e:58:96:18:40:f7:01:d9:47:c7:99:c1: 0a:06:fb:72:41:03:94:22:81:ca:59:53:d2:56:fd: c3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D2:1F:AE:42:75:31:08:7E:7C:51:BF:C4:6E:DB:44:D9:AC:F9:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c33d31-01e9-3f84-ae5b-c22d6322f47b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.167.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:5e:d2:b1:3b:38:ac:e2:6a:3d:e7:bf:fc:04:e6:b5:04:4e: f8:47:f0:51:c8:34:c8:3a:b2:7f:c0:30:dc:b9:68:84:cc:eb: 83:31:e7:5a:8b:b7:20:a6:a5:5e:91:ca:1f:7e:c6:0a:fc:86: f1:8e:f9:55:a0:aa:09:48:a8:67:ac:2e:13:34:b4:57:61:a6: 85:a8:92:49:18:1d:d2:40:c5:c3:cc:39:da:7e:9a:55:81:e2: 46:f2:b2:a6:9d:8b:95:42:20:b3:3b:c5:b8:e8:78:95:17:ef: 8b:69:f1:2b:ac:f3:b2:ae:72:fa:88:6b:f0:37:35:f3:d6:1e: d0:4b:b7:60:59:ca:2e:26:fb:4a:b9:14:f8:e0:c5:19:de:c8: e0:0e:f6:74:ca:73:3f:f1:e7:f1:ad:49:03:63:aa:79:cc:b1: d1:bd:0f:b4:79:28:ae:e5:83:26:e1:96:a7:7f:f3:e5:7c:83: 9d:19:df:1c:37:73:62:e6:06:84:1b:fa:5f:70:ce:36:3e:db: 83:e5:31:21:9c:c1:1a:60:a0:f2:26:f9:44:28:01:12:dd:13: 39:89:67:c9:14:dc:f4:97:d1:d3:b3:3c:f5:6c:d2:40:2a:37: 12:59:83:f6:e7:95:cc:94:46:8f:ac:9c:f4:53:a7:b4:0e:dc: 99:7d:9a:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvbU49dImrNtJqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NGVmOTM3YmMtMzE0MC00NGNjLWEwMDQtYzBhMjkzYmExZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl4nPY/SBriVKMlO8qnQA9WZczFCzaFYTd5w je4g3X7cxtPXGCMfahvMFhxwQU8ktIWOTkj1KeBItgXOHcMgThp0Jou5QCuY05KY 0ySWMX8k+JyXBkKUPzHHN7VcWdfTK545v28ijbmDLsAiNKcUefnE6XrKGJEd7vWw uuG/Q6Qw2HxX8aYv090OOpMV1ZLJ0SIgouwKuBzOojHMNidBkfgs8cUEaSL9zE5d KkIuz1ZM5Vo6QBWbar67OUU3/bpXadSbd/sX0wLoVhzGxmFiD+AmFXE0nVgDULAf UcK4kDh0XDs+WJYYQPcB2UfHmcEKBvtyQQOUIoHKWVPSVv3DhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnSH65CdTEIfnxRv8Ru20TZrPmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDhjMzNkMzEtMDFlOS0z Zjg0LWFlNWItYzIyZDYzMjJmNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR6eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNe0rE7OKziaj3nv/wE5rUETvhH8FHINMg6sn/AMNy5aITM64Mx51qL tyCmpV6Ryh9+xgr8hvGO+VWgqglIqGesLhM0tFdhpoWokkkYHdJAxcPMOdp+mlWB 4kbysqadi5VCILM7xbjoeJUX74tp8Sus87KucvqIa/A3NfPWHtBLt2BZyi4m+0q5 FPjgxRneyOAO9nTKcz/x5/GtSQNjqnnMsdG9D7R5KK7lgybhlqd/8+V8g50Z3xw3 c2LmBoQb+l9wzjY+24PlMSGcwRpgoPIm+UQoARLdEzmJZ8kU3PSX0dOzPPVs0kAq NxJZg/bnlcyURo+snPRTp7QO3Jl9mqg= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:40 2025 by rpki-client