$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/180fd2a6-88f9-313e-b28d-a6410a55fa51.roa File: 180fd2a6-88f9-313e-b28d-a6410a55fa51.roa (raw, json) Hash identifier: xxN2aq6EPqhSua7lVPcAFsSEl6+mrKPb19EGS1ZELWw= Subject key identifier: 7A:6C:93:93:97:DE:4F:3B:94:84:A2:30:5C:25:54:82:00:38:C1:9B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246CEA2B92C8317F0E7FCB0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/180fd2a6-88f9-313e-b28d-a6410a55fa51.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 71.246.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ce:a2:b9:2c:83:17:f0:e7:fc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=ca8d77ec-cc61-488e-8690-a14f389c975e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9c:6a:52:10:91:9a:03:64:2d:80:47:35:c3: f7:f1:93:54:ed:c7:98:49:a7:cf:5a:b0:71:c2:35: f2:d4:84:ad:37:0c:14:4b:43:9d:02:a4:a0:62:ca: f5:c8:2b:c7:5f:70:92:b4:8a:47:55:a0:28:70:8d: a1:44:13:56:f1:b9:44:a0:7b:ea:e7:2d:94:18:1d: 33:f0:b8:b5:a9:38:44:49:31:d7:f2:48:98:5b:20: a7:f4:d6:c0:20:d2:b6:64:d2:52:da:e8:c7:5d:99: 18:f2:b6:e3:93:4c:c1:ac:20:dd:ce:0d:75:6f:11: ea:7c:57:df:e7:d7:b7:a6:19:7e:6e:e5:1e:67:b8: 63:b0:6f:13:ac:87:66:07:aa:ed:6e:d5:57:10:61: 7c:84:f0:6d:36:5c:a4:ac:28:ae:98:d0:93:a4:13: 79:b8:ed:d3:ac:52:cf:68:32:52:2f:9e:95:1c:ec: 31:af:9a:09:1d:82:9a:07:ef:0e:0e:e0:60:3c:45: 01:1c:0c:07:d1:a4:20:74:79:67:c1:f9:97:91:d4: c9:3a:0a:a6:b4:8e:b2:c8:1e:ba:4b:d5:05:ad:52: cc:b4:df:7f:e3:4a:54:98:b4:d7:5f:4e:8a:11:79: 99:5d:9d:61:66:3d:b1:6c:28:c7:b9:00:e2:c9:94: 6e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6C:93:93:97:DE:4F:3B:94:84:A2:30:5C:25:54:82:00:38:C1:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/180fd2a6-88f9-313e-b28d-a6410a55fa51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.246.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:76:20:bf:b3:55:79:ad:d1:27:22:2b:52:c3:c6:2e:4c:12: 58:57:9b:d9:58:06:cc:08:bd:fe:8e:b6:cc:9b:ad:f0:74:2f: cf:d9:49:c9:d5:2c:c3:a7:40:2f:f0:cd:31:91:41:43:9d:65: 0b:c6:00:4e:a6:63:e8:b9:47:ad:05:ce:b0:a9:1f:c6:f7:d7: 6c:ca:8d:f9:e7:99:80:04:54:c1:e2:4d:2f:a1:3f:f8:b8:06: c3:32:f5:47:60:fb:2e:6f:96:fb:25:0f:35:6a:fa:2d:a8:d5: 55:f4:eb:5e:11:70:ba:cb:a5:21:28:4f:e9:a9:ca:5a:ea:ea: 1a:f4:4b:3d:67:35:c2:8c:10:74:69:11:79:a8:57:cc:e8:5f: 64:17:f4:3f:66:ec:95:a4:b2:46:fe:46:62:d5:e7:2d:0f:aa: 65:57:1e:8f:01:83:11:55:b3:28:d8:76:0e:66:bf:7a:a2:86: d1:a9:8a:bd:50:85:5d:8e:8a:8f:ae:e9:90:ea:6b:90:ec:dc: e4:6b:31:31:21:dc:50:93:04:0c:5e:62:f1:06:ac:b8:0a:e7: b8:db:dd:dc:2c:d9:8f:03:73:48:0f:b9:87:d2:5b:0d:58:ea: f6:03:a0:39:52:db:58:f4:a4:a7:a2:4b:72:e8:71:77:b6:b6: 34:2f:76:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRs6iuSyDF/Dn/LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk Y2E4ZDc3ZWMtY2M2MS00ODhlLTg2OTAtYTE0ZjM4OWM5NzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65xqUhCRmgNkLYBHNcP38ZNU7ceYSafPWrBx wjXy1IStNwwUS0OdAqSgYsr1yCvHX3CStIpHVaAocI2hRBNW8blEoHvq5y2UGB0z 8Li1qThESTHX8kiYWyCn9NbAINK2ZNJS2ujHXZkY8rbjk0zBrCDdzg11bxHqfFff 59e3phl+buUeZ7hjsG8TrIdmB6rtbtVXEGF8hPBtNlykrCiumNCTpBN5uO3TrFLP aDJSL56VHOwxr5oJHYKaB+8ODuBgPEUBHAwH0aQgdHlnwfmXkdTJOgqmtI6yyB66 S9UFrVLMtN9/40pUmLTXX06KEXmZXZ1hZj2xbCjHuQDiyZRu/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpsk5OX3k87lISiMFwlVIIAOMGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTgwZmQyYTYtODhmOS0z MTNlLWIyOGQtYTY0MTBhNTVmYTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/aQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV2IL+zVXmt0SciK1LDxi5MElhXm9lYBswIvf6OtsybrfB0L8/ZScnV LMOnQC/wzTGRQUOdZQvGAE6mY+i5R60FzrCpH8b312zKjfnnmYAEVMHiTS+hP/i4 BsMy9Udg+y5vlvslDzVq+i2o1VX0614RcLrLpSEoT+mpylrq6hr0Sz1nNcKMEHRp EXmoV8zoX2QX9D9m7JWkskb+RmLV5y0PqmVXHo8BgxFVsyjYdg5mv3qihtGpir1Q hV2Oio+u6ZDqa5Ds3ORrMTEh3FCTBAxeYvEGrLgK57jb3dws2Y8Dc0gPuYfSWw1Y 6vYDoDlS21j0pKeiS3LocXe2tjQvdg0= -----END CERTIFICATE-----Generated at Sat Apr 5 21:24:51 2025 by rpki-client