$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25d073df-d692-3c78-9cc5-f2ac8e9c1b64.roa File: 25d073df-d692-3c78-9cc5-f2ac8e9c1b64.roa (raw, json) Hash identifier: mbPoNUSCPBiypI6KsdqXalR2i6puXTPwsXXbGv93Zks= Subject key identifier: 83:B2:4A:D4:91:97:5B:6B:51:0A:E5:AD:70:39:5F:D2:0D:39:8B:D7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3E5F07170B70AB3936180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25d073df-d692-3c78-9cc5-f2ac8e9c1b64.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.109.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:e5:f0:71:70:b7:0a:b3:93:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=679f45e6-b1dc-4e11-881d-714b1e391b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:69:4f:20:2d:49:dd:c9:22:25:81:ca:4c: cd:ca:6f:32:66:b9:a8:31:bf:66:43:cc:32:f2:69: 7d:32:10:f2:77:88:f7:29:6a:5f:3f:cf:58:05:81: 31:57:64:02:a2:48:55:62:40:1b:fa:65:20:bf:2a: fc:03:da:32:07:43:fe:3a:46:61:a2:90:81:3a:15: 13:33:73:9f:3d:95:27:f7:de:5d:a7:ea:15:22:8d: 9d:ce:e3:3e:02:0b:dc:ee:a9:f9:af:87:9a:fb:81: ad:9d:d8:f2:91:0b:26:7e:d5:56:ad:24:d2:78:3f: 70:d3:0c:6b:60:63:df:5b:7f:1e:f5:e0:57:c2:13: d2:62:83:70:2c:7a:f5:dd:49:8e:b4:dc:f5:70:d6: c7:fc:13:7d:b5:8a:4f:28:df:ef:64:8b:6a:e7:03: 8c:97:95:b8:75:57:64:22:b2:b2:51:e3:58:77:c5: ab:65:41:0e:c3:a5:e1:04:ea:73:55:e4:46:fd:51: 22:9e:8d:0a:86:c6:af:78:96:a1:e3:4a:c4:95:42: 65:50:1a:0a:3e:79:c1:6a:36:17:56:6a:13:f0:17: 59:24:27:dd:30:dd:88:e3:0e:df:1a:8f:6c:c2:41: de:80:98:df:cc:0f:fd:a5:a4:8f:47:65:57:94:25: e9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B2:4A:D4:91:97:5B:6B:51:0A:E5:AD:70:39:5F:D2:0D:39:8B:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25d073df-d692-3c78-9cc5-f2ac8e9c1b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.109.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:6d:e1:5d:a0:24:42:7d:e0:7e:3e:19:a5:0a:4f:59:7a:2e: 6a:2b:a1:f4:88:d2:97:80:27:cf:6f:a6:03:ff:14:d2:03:eb: 3d:dd:3b:7c:11:0b:80:cb:25:14:f7:a1:1a:0f:72:3a:f3:ec: 56:b5:42:dd:15:c1:e8:7e:aa:95:a0:38:69:92:6d:96:ee:10: a6:59:ac:88:6c:78:fb:36:19:84:40:60:7a:90:75:f4:72:2b: 50:59:4d:03:40:df:c2:5a:ea:ef:b2:fe:8a:de:a1:cf:20:28: 91:e9:5d:e5:70:57:74:0f:7b:31:8f:a7:12:c0:9f:3f:22:7e: 1e:28:17:32:32:19:ea:5c:fc:cc:53:ae:82:e5:9d:f4:3c:2e: 0f:97:b2:92:e2:a9:aa:64:7a:d9:53:57:a0:8d:8e:f2:2d:ab: 29:76:8c:4f:52:64:ce:14:3b:56:4c:f3:b1:d0:57:02:66:b6: 45:4e:41:94:e8:be:57:be:d3:ba:08:f0:f3:5b:0e:02:8d:2d: 67:0e:b1:47:30:c6:4d:c8:18:ed:59:48:6d:59:0f:54:ff:42: 10:5a:f4:63:df:29:f8:bb:65:bc:63:06:54:a3:b4:14:08:82: 3d:cb:72:93:23:06:b5:06:34:f7:17:d1:ba:5c:68:e9:32:6a: 57:ee:f2:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+XwcXC3CrOTYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk Njc5ZjQ1ZTYtYjFkYy00ZTExLTg4MWQtNzE0YjFlMzkxYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F1pTyAtSd3JIiWBykzNym8yZrmoMb9mQ8wy 8ml9MhDyd4j3KWpfP89YBYExV2QCokhVYkAb+mUgvyr8A9oyB0P+OkZhopCBOhUT M3OfPZUn995dp+oVIo2dzuM+Agvc7qn5r4ea+4GtndjykQsmftVWrSTSeD9w0wxr YGPfW38e9eBXwhPSYoNwLHr13UmOtNz1cNbH/BN9tYpPKN/vZItq5wOMl5W4dVdk IrKyUeNYd8WrZUEOw6XhBOpzVeRG/VEino0KhsaveJah40rElUJlUBoKPnnBajYX VmoT8BdZJCfdMN2I4w7fGo9swkHegJjfzA/9paSPR2VXlCXp3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOyStSRl1trUQrlrXA5X9INOYvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjVkMDczZGYtZDY5Mi0z Yzc4LTljYzUtZjJhYzhlOWMxYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSG0sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1t4V2gJEJ94H4+GaUKT1l6LmorofSI0peAJ89vpgP/FNID6z3dO3wR C4DLJRT3oRoPcjrz7Fa1Qt0Vweh+qpWgOGmSbZbuEKZZrIhsePs2GYRAYHqQdfRy K1BZTQNA38Ja6u+y/oreoc8gKJHpXeVwV3QPezGPpxLAnz8ifh4oFzIyGepc/MxT roLlnfQ8Lg+XspLiqapketlTV6CNjvItqyl2jE9SZM4UO1ZM87HQVwJmtkVOQZTo vle+07oI8PNbDgKNLWcOsUcwxk3IGO1ZSG1ZD1T/QhBa9GPfKfi7ZbxjBlSjtBQI gj3LcpMjBrUGNPcX0bpcaOkyalfu8hM= -----END CERTIFICATE-----Generated at Sat Apr 5 20:48:31 2025 by rpki-client