$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12ce3e4e-e6ec-34bb-9b3a-2554a800c30d.roa File: 12ce3e4e-e6ec-34bb-9b3a-2554a800c30d.roa (raw, json) Hash identifier: QMLZI7V0mu9cIYM2OUunFw+/rodsLPDdHmH5TqxstTI= Subject key identifier: 22:E9:3D:E5:80:18:D4:5E:15:5F:B6:0F:18:CC:7B:34:87:45:9F:D6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C341BAB798CEDB64C6D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12ce3e4e-e6ec-34bb-9b3a-2554a800c30d.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 72.65.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:34:1b:ab:79:8c:ed:b6:4c:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=4d66c9b2-d062-472f-bb8b-15ef483f5028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:92:49:14:3c:f2:18:a2:75:e2:77:59:d4: 53:8f:fe:79:f2:97:41:85:e3:83:4c:e7:ee:78:0f: 3d:c2:1a:e7:0b:91:3f:45:6a:ca:c0:ff:d0:67:d5: 86:61:48:38:d7:80:b7:5b:18:3e:a5:81:81:b9:fe: 56:bb:21:5c:80:4a:b8:ac:57:43:ad:68:7f:ea:0e: 84:3c:ba:c3:76:c8:47:57:65:89:af:26:72:26:9d: 38:90:e7:cb:5a:d9:41:2f:d6:da:66:a7:29:6d:12: 89:64:cc:af:d0:7b:d2:5d:42:01:1e:c7:cd:9a:6d: 6a:14:6b:86:69:27:a4:a4:0b:e2:7d:aa:c8:a9:22: a7:b3:9c:67:17:c6:3a:47:61:b5:d0:35:25:37:7b: 50:43:16:cd:65:bb:fc:99:0f:9d:f6:f4:ed:52:8b: 18:ac:02:25:69:60:33:b7:2a:e1:80:13:7b:ac:ec: 1f:fc:0b:c2:17:ed:89:51:cf:f8:e8:25:ac:89:b0: 54:a9:2c:b3:83:7c:87:d3:70:c2:c5:62:9a:c0:10: 66:ba:d3:c5:b5:d3:8b:80:0c:89:ce:97:cf:93:87: 9d:7b:f0:6d:51:e8:74:be:70:ce:00:f7:3b:49:52: 6e:2f:c4:3b:95:88:4e:95:a6:cd:83:f8:86:02:c7: cb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E9:3D:E5:80:18:D4:5E:15:5F:B6:0F:18:CC:7B:34:87:45:9F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12ce3e4e-e6ec-34bb-9b3a-2554a800c30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.65.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:28:cd:48:05:e9:51:a6:2f:d2:77:a9:2d:a2:73:10:6a:60: 5f:ca:ac:1b:1d:bd:dd:69:bb:03:b0:bd:5f:5a:bb:5e:6a:a5: e3:b1:5c:41:9b:f3:c9:b2:fc:0d:fa:52:a3:0e:d3:76:2e:7a: 55:dd:c6:3a:16:35:90:fb:28:e7:97:ac:1c:5c:29:ba:26:48: 5e:51:50:ab:61:a5:65:f2:1e:a6:2a:e8:4a:65:18:23:f9:8c: a2:15:84:34:5c:1b:52:71:72:82:af:21:58:9e:9b:2f:b1:b5: b5:8a:be:6d:8d:01:56:4d:4c:f3:3b:bf:96:ab:82:60:ef:82: 4d:5d:ed:6a:9d:3f:e2:e9:39:9d:23:4e:f2:5f:7c:ca:3f:0f: 28:1e:c9:ab:0d:d4:16:3b:e5:20:b1:33:9e:43:ff:d8:a0:d1: f9:25:9b:3f:80:7c:a3:84:59:03:c9:2c:d4:ec:e9:d7:24:34: 0f:4d:5f:18:e0:2e:82:9c:7e:41:7a:a4:f1:95:33:f2:d0:f6: 5c:32:7d:e6:50:58:b2:1b:dc:71:53:24:ec:90:5c:e8:da:ce: 45:70:3f:1f:d2:a8:a3:9a:23:61:c5:ad:0e:a9:9f:fb:24:c1: ad:58:d4:a3:bf:0c:d2:96:d1:cc:f5:bf:bf:0a:67:74:3c:6e: a0:3c:1c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDQbq3mM7bZMbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NGQ2NmM5YjItZDA2Mi00NzJmLWJiOGItMTVlZjQ4M2Y1MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmaSSRQ88hiideJ3WdRTj/558pdBheODTOfu eA89whrnC5E/RWrKwP/QZ9WGYUg414C3Wxg+pYGBuf5WuyFcgEq4rFdDrWh/6g6E PLrDdshHV2WJryZyJp04kOfLWtlBL9baZqcpbRKJZMyv0HvSXUIBHsfNmm1qFGuG aSekpAvifarIqSKns5xnF8Y6R2G10DUlN3tQQxbNZbv8mQ+d9vTtUosYrAIlaWAz tyrhgBN7rOwf/AvCF+2JUc/46CWsibBUqSyzg3yH03DCxWKawBBmutPFtdOLgAyJ zpfPk4ede/BtUeh0vnDOAPc7SVJuL8Q7lYhOlabNg/iGAsfL1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLpPeWAGNReFV+2DxjMezSHRZ/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTJjZTNlNGUtZTZlYy0z NGJiLTliM2EtMjU1NGE4MDBjMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSEGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUozUgF6VGmL9J3qS2icxBqYF/KrBsdvd1puwOwvV9au15qpeOxXEGb 88my/A36UqMO03YuelXdxjoWNZD7KOeXrBxcKbomSF5RUKthpWXyHqYq6EplGCP5 jKIVhDRcG1JxcoKvIViemy+xtbWKvm2NAVZNTPM7v5argmDvgk1d7WqdP+LpOZ0j TvJffMo/DygeyasN1BY75SCxM55D/9ig0fklmz+AfKOEWQPJLNTs6dckNA9NXxjg LoKcfkF6pPGVM/LQ9lwyfeZQWLIb3HFTJOyQXOjazkVwPx/SqKOaI2HFrQ6pn/sk wa1Y1KO/DNKW0cz1v78KZ3Q8bqA8HEQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:18:49 2025 by rpki-client