$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b0f8aab-07a8-3e05-9b2f-c6600b871936.roa File: 1b0f8aab-07a8-3e05-9b2f-c6600b871936.roa (raw, json) Hash identifier: m20NyhsifCDttFVq5wZHd1wIWqv4MubE2D8bQi25pVs= Subject key identifier: E8:BE:7A:6D:38:70:59:0A:F1:47:84:C9:9F:42:74:1D:92:B7:3B:8E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D4A16A55E70D1BFC5B10 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b0f8aab-07a8-3e05-9b2f-c6600b871936.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 173.64.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d4:a1:6a:55:e7:0d:1b:fc:5b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=0060b6d4-92b9-411c-93a2-62724ca635b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:ed:df:45:a7:81:1f:31:b3:c9:02:5c:e9: 32:f8:8e:12:3b:21:b3:bb:8d:3f:11:3f:82:c2:5f: fd:64:be:26:7c:48:55:51:d5:fe:bd:0f:7c:5d:4a: 24:64:5e:e2:d4:03:07:cc:90:80:f7:b9:ec:ca:ca: e1:34:ef:9e:24:c0:32:33:19:0c:bf:0a:16:39:4d: 42:d9:a6:7f:d0:47:a0:25:8c:66:c8:57:3a:b2:ae: 5b:e1:a4:d0:17:10:2d:fa:86:db:78:ee:65:de:c9: aa:38:bf:17:80:9f:f7:89:98:e9:c0:d6:32:19:6b: 88:6a:66:77:39:2a:ac:2c:de:a2:48:1b:38:12:90: 58:37:f5:13:2e:b2:bb:76:f2:54:28:97:e6:1b:9e: 51:c6:b5:7f:f1:74:e1:6b:ee:62:65:0d:ff:e4:70: f7:e4:80:80:56:d2:97:65:25:97:dd:14:b8:7b:e8: 3b:1d:2a:27:33:20:f2:2e:12:4a:34:30:7b:fc:22: c5:d7:a3:5a:70:ce:03:93:9f:f8:7a:f0:c5:c8:4b: 75:25:8e:3d:53:ad:0f:f8:48:6d:40:79:d5:2f:16: cb:cb:29:16:e6:8e:4f:a3:83:dc:4e:9b:4c:1f:86: 85:36:1c:d6:ea:70:d5:54:a7:6e:1d:1a:5b:4a:00: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BE:7A:6D:38:70:59:0A:F1:47:84:C9:9F:42:74:1D:92:B7:3B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b0f8aab-07a8-3e05-9b2f-c6600b871936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.64.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0b:4e:44:9e:19:39:ff:7b:06:fc:8a:1f:cb:b7:d7:25:a6: 93:df:b0:73:d1:c6:79:a1:a0:ce:63:3f:dd:be:5e:20:cf:b1: c3:b1:77:ae:f9:f0:6b:4f:e5:e0:b9:76:89:e7:3c:1b:da:44: 84:b4:78:f7:82:c5:70:78:2e:98:d4:af:88:c4:06:1b:8b:08: 59:b5:27:a6:ea:90:87:2b:fa:6a:a8:2d:9e:f4:af:0b:d4:b4: bb:bf:35:08:90:aa:54:09:db:a5:81:a7:21:c5:00:74:d5:70: ea:41:58:96:05:10:28:cc:26:f5:db:5a:e6:71:8f:ac:12:d8: ec:be:8d:f7:31:cc:cb:b0:f0:88:28:54:a7:55:40:da:cc:f3: 49:e8:be:5d:9a:77:fa:d5:aa:ed:2e:b7:31:91:b4:6a:5c:b3: 53:03:98:3c:e3:74:6f:7d:69:c5:b6:c4:aa:3d:9e:48:41:99: 4b:3f:28:f9:69:ef:59:24:80:f4:b2:49:78:59:e1:2f:c1:06: f5:47:92:20:07:7f:32:ba:36:ad:77:2e:a7:25:1e:c4:b1:7b: 13:21:31:8d:1b:45:12:41:d2:27:54:48:f3:d0:5d:4d:a6:99: 7f:9c:7c:59:16:52:ec:f5:26:2a:ec:b9:d5:f9:97:dc:23:7a: f7:8d:bc:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtShalXnDRv8WxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MDA2MGI2ZDQtOTJiOS00MTFjLTkzYTItNjI3MjRjYTYzNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Xt30WngR8xs8kCXOky+I4SOyGzu40/ET+C wl/9ZL4mfEhVUdX+vQ98XUokZF7i1AMHzJCA97nsysrhNO+eJMAyMxkMvwoWOU1C 2aZ/0EegJYxmyFc6sq5b4aTQFxAt+obbeO5l3smqOL8XgJ/3iZjpwNYyGWuIamZ3 OSqsLN6iSBs4EpBYN/UTLrK7dvJUKJfmG55RxrV/8XTha+5iZQ3/5HD35ICAVtKX ZSWX3RS4e+g7HSonMyDyLhJKNDB7/CLF16NacM4Dk5/4evDFyEt1JY49U60P+Eht QHnVLxbLyykW5o5Po4PcTptMH4aFNhzW6nDVVKduHRpbSgDPgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi+em04cFkK8UeEyZ9CdB2StzuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWIwZjhhYWItMDdhOC0z ZTA1LTliMmYtYzY2MDBiODcxOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrUAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8LTkSeGTn/ewb8ih/Lt9clppPfsHPRxnmhoM5jP92+XiDPscOxd675 8GtP5eC5donnPBvaRIS0ePeCxXB4LpjUr4jEBhuLCFm1J6bqkIcr+mqoLZ70rwvU tLu/NQiQqlQJ26WBpyHFAHTVcOpBWJYFECjMJvXbWuZxj6wS2Oy+jfcxzMuw8Igo VKdVQNrM80novl2ad/rVqu0utzGRtGpcs1MDmDzjdG99acW2xKo9nkhBmUs/KPlp 71kkgPSySXhZ4S/BBvVHkiAHfzK6Nq13LqclHsSxexMhMY0bRRJB0idUSPPQXU2m mX+cfFkWUuz1JirsudX5l9wjeveNvGc= -----END CERTIFICATE-----Generated at Sat Apr 5 18:14:03 2025 by rpki-client