$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa File: 1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa (raw, json) Hash identifier: cgxwdO7S4T6GZ3kTgTCkSgk1/5PM3gGwp8vpYNu8kmA= Subject key identifier: D4:2A:34:3E:8B:32:AD:B4:A3:C2:26:4A:74:7D:76:9C:07:FB:26:D3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244AEFEFDDEE5D7F1CC280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 0 IP address blocks: 208.217.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4a:ef:ef:dd:ee:5d:7f:1c:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=36b0eb7e-c5ac-43d9-b66d-767e1208b045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:2a:39:63:06:e1:c1:dd:ca:85:46:e5:e5: 2b:f9:87:cf:d7:ec:8a:fe:62:a1:c2:29:10:21:68: 2c:ec:81:16:1e:42:a1:44:7b:9a:1c:0b:7b:88:98: 99:0e:9c:8d:4e:e1:8b:9e:5b:4d:10:80:fd:02:e9: 0f:b6:43:60:99:e1:88:a4:0d:16:2d:c7:62:32:2d: d2:df:cb:8a:52:9c:79:66:51:e3:89:f0:19:8c:0c: 24:e7:4e:f8:a1:a5:4d:1b:39:d7:ab:bb:c2:fa:0a: f4:94:77:3c:8b:38:23:97:3e:66:af:0f:29:07:bb: 62:9a:69:34:38:39:82:e3:84:62:f3:95:09:c3:e6: 8a:b4:cd:1f:66:8a:78:fd:78:5e:f5:75:c6:72:d0: 93:b0:f6:52:de:c9:5f:0b:d9:64:17:04:b0:db:65: f1:5f:0f:f9:26:81:b0:77:64:6c:45:02:84:af:0e: 2c:0f:39:6b:4f:44:cf:c7:e4:56:ea:9d:8c:9a:0a: 15:dc:5a:06:0b:17:29:72:9f:9a:b0:6a:29:04:a8: cf:c5:d9:fc:6b:69:00:c4:3c:be:f1:ca:4c:d4:08: b5:f2:74:e4:b4:94:e0:86:83:83:d3:b2:5b:f6:b9: 64:92:f8:50:c5:f6:13:5f:c3:eb:16:ff:cd:69:5e: 88:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2A:34:3E:8B:32:AD:B4:A3:C2:26:4A:74:7D:76:9C:07:FB:26:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.217.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:58:15:78:27:72:e3:96:41:63:88:3f:70:3c:68:2c:cb:b7: ca:af:51:5a:e4:35:6e:17:28:46:73:e1:c1:cf:1f:c6:58:b0: 4b:31:ed:67:7c:60:ea:34:15:4b:1b:93:da:fa:40:db:37:2f: 3c:84:d7:1e:68:0e:25:62:68:30:2f:a0:cd:8b:26:c9:4b:db: 49:a1:c2:58:2f:2b:a7:32:30:07:9f:70:83:0b:2d:2d:39:6f: ea:9e:79:92:71:0f:4b:29:96:6d:e7:44:59:50:24:05:5c:7c: 92:51:ce:94:79:52:4d:ab:61:2a:1a:b8:5e:63:8d:0e:fd:74: 5a:08:0a:bb:8e:91:cd:de:94:ce:3c:bc:28:2c:fc:de:2d:fd: e6:80:fc:fd:02:53:0a:1d:b2:93:33:ad:37:1f:99:b8:3e:48: b9:09:49:6b:c8:bf:04:2e:51:8e:99:07:20:cf:ce:15:77:15: 1b:ca:e7:d5:91:bd:78:02:9a:cf:69:46:ae:17:a1:0b:5a:3c: 94:9c:3c:81:46:5a:8d:18:5f:10:78:fa:75:87:dd:2b:8b:61: 61:02:11:72:41:06:63:19:c8:0b:a0:4c:61:66:bd:72:16:24: 4b:e8:bb:33:ab:e7:04:a8:fc:71:e2:aa:7f:f0:4d:62:6d:79: e5:66:1b:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJErv793uXX8cwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MzZiMGViN2UtYzVhYy00M2Q5LWI2NmQtNzY3ZTEyMDhiMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhUqOWMG4cHdyoVG5eUr+YfP1+yK/mKhwikQ IWgs7IEWHkKhRHuaHAt7iJiZDpyNTuGLnltNEID9AukPtkNgmeGIpA0WLcdiMi3S 38uKUpx5ZlHjifAZjAwk5074oaVNGznXq7vC+gr0lHc8izgjlz5mrw8pB7timmk0 ODmC44Ri85UJw+aKtM0fZop4/Xhe9XXGctCTsPZS3slfC9lkFwSw22XxXw/5JoGw d2RsRQKErw4sDzlrT0TPx+RW6p2MmgoV3FoGCxcpcp+asGopBKjPxdn8a2kAxDy+ 8cpM1Ai18nTktJTghoOD07Jb9rlkkvhQxfYTX8PrFv/NaV6I9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQqND6LMq20o8ImSnR9dpwH+ybTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWViMGJjODYtMmFiYS0z YzlkLThhNzUtYzViMDA1ZTYzNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0NkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1YFXgncuOWQWOIP3A8aCzLt8qvUVrkNW4XKEZz4cHPH8ZYsEsx7Wd8 YOo0FUsbk9r6QNs3LzyE1x5oDiViaDAvoM2LJslL20mhwlgvK6cyMAefcIMLLS05 b+qeeZJxD0splm3nRFlQJAVcfJJRzpR5Uk2rYSoauF5jjQ79dFoICruOkc3elM48 vCgs/N4t/eaA/P0CUwodspMzrTcfmbg+SLkJSWvIvwQuUY6ZByDPzhV3FRvK59WR vXgCms9pRq4XoQtaPJScPIFGWo0YXxB4+nWH3SuLYWECEXJBBmMZyAugTGFmvXIW JEvouzOr5wSo/HHiqn/wTWJteeVmGz8= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:12 2025 by rpki-client