$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/276ddee7-4a91-3a78-94e7-0c9531dafff2.roa File: 276ddee7-4a91-3a78-94e7-0c9531dafff2.roa (raw, json) Hash identifier: rfMbkZ3rH6TIC+kLkHUW4KMwsd9zj5sGZ0DzI0KG7b8= Subject key identifier: 05:76:8C:9C:94:78:E3:23:96:06:75:0A:B0:62:9A:88:39:21:50:2A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D1D4C04721604120C475 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/276ddee7-4a91-3a78-94e7-0c9531dafff2.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 108.12.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d1:d4:c0:47:21:60:41:20:c4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=8f1670c6-6ef6-45fb-ad42-e18a0b9a6991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:be:7e:a2:74:bb:0d:b1:fa:1d:03:bf:b2:7d: e4:69:24:87:6e:86:70:44:42:48:18:08:40:02:f1: b8:4d:5b:93:17:aa:03:a8:26:b7:54:a6:e7:d9:7e: 00:ce:b2:69:47:62:5a:65:dc:1a:7a:4e:e7:73:57: 82:aa:cb:f5:4c:bb:46:6e:17:c5:94:5f:91:8c:03: 74:7d:77:2c:bf:81:c8:6d:9c:52:7c:55:69:80:4c: e3:aa:6d:78:a8:0e:e8:da:18:c9:8b:f7:be:94:7f: 4c:96:e0:6a:5d:4e:62:b3:96:36:be:b4:41:05:c3: 3b:a5:99:39:0c:e0:74:ac:cb:8f:d6:bc:42:3b:c8: 97:dc:ae:4d:32:ec:b5:b5:65:35:cc:06:9e:fe:ad: c6:23:65:46:08:64:2b:79:35:de:7e:37:0d:6a:d5: db:e3:23:32:f2:da:60:d6:d0:86:a7:2c:8f:e4:f4: ce:42:78:2d:ae:7f:44:56:04:17:b4:26:46:0f:f0: 92:df:ea:7a:a1:95:bc:2e:13:f8:23:5e:b9:f3:cb: 03:16:14:c1:2d:f7:8b:34:2f:9e:64:5b:0e:18:ea: 53:0a:c6:21:99:c8:22:bd:c7:2b:0e:b4:87:63:d6: 4c:22:cc:ba:de:77:f2:4d:7e:28:9f:61:5d:0c:f2: 35:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:76:8C:9C:94:78:E3:23:96:06:75:0A:B0:62:9A:88:39:21:50:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/276ddee7-4a91-3a78-94e7-0c9531dafff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.12.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:6d:2e:0e:24:84:71:51:bf:90:c3:23:9e:73:9a:6b:6b:f3: a0:33:90:97:8e:b9:6a:40:92:56:e9:3b:1d:10:d9:59:1e:8b: 50:18:36:21:95:31:1e:68:9f:35:7a:e1:79:92:ab:04:4b:f9: e9:77:56:d5:79:de:8c:51:3a:d1:22:ed:ae:74:1f:2e:5d:74: 75:8c:ea:f1:33:bf:ff:75:d3:24:be:91:c9:08:d9:29:22:7c: fb:16:4c:fc:ce:a8:5b:72:b8:d4:02:f6:ab:33:ed:21:75:d8: 9e:b2:9d:e0:0f:93:01:4e:fd:9f:e8:7e:2a:08:1e:ac:b8:19: 04:e3:19:97:e5:96:63:24:34:77:57:8c:fc:58:45:6d:aa:ab: e5:22:c4:f1:58:93:4e:df:64:d9:68:02:13:b3:a5:d0:ea:be: 65:e3:d0:34:ce:3b:6d:ad:ce:31:2a:97:c8:8a:84:f4:50:ee: 7a:ff:bb:db:c1:b4:ff:b7:cd:f8:71:25:19:6f:bf:df:3e:d1: 96:b1:5e:ce:6e:d6:c8:da:eb:71:78:19:13:62:6d:d8:50:72: 50:28:05:18:97:25:e9:0e:60:07:3f:46:56:bf:f5:0d:88:74: f1:c2:9f:e9:b5:75:71:06:3d:6b:0b:43:57:eb:b5:6c:5b:07: 98:7c:0e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtHUwEchYEEgxHUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OGYxNjcwYzYtNmVmNi00NWZiLWFkNDItZTE4YTBiOWE2OTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b5+onS7DbH6HQO/sn3kaSSHboZwREJIGAhA AvG4TVuTF6oDqCa3VKbn2X4AzrJpR2JaZdwaek7nc1eCqsv1TLtGbhfFlF+RjAN0 fXcsv4HIbZxSfFVpgEzjqm14qA7o2hjJi/e+lH9MluBqXU5is5Y2vrRBBcM7pZk5 DOB0rMuP1rxCO8iX3K5NMuy1tWU1zAae/q3GI2VGCGQreTXefjcNatXb4yMy8tpg 1tCGpyyP5PTOQngtrn9EVgQXtCZGD/CS3+p6oZW8LhP4I16588sDFhTBLfeLNC+e ZFsOGOpTCsYhmcgivccrDrSHY9ZMIsy63nfyTX4on2FdDPI1xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV2jJyUeOMjlgZ1CrBimog5IVAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjc2ZGRlZTctNGE5MS0z YTc4LTk0ZTctMGM5NTMxZGFmZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbAyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJtLg4khHFRv5DDI55zmmtr86AzkJeOuWpAklbpOx0Q2Vkei1AYNiGV MR5onzV64XmSqwRL+el3VtV53oxROtEi7a50Hy5ddHWM6vEzv/910yS+kckI2Ski fPsWTPzOqFtyuNQC9qsz7SF12J6yneAPkwFO/Z/ofioIHqy4GQTjGZfllmMkNHdX jPxYRW2qq+UixPFYk07fZNloAhOzpdDqvmXj0DTOO22tzjEql8iKhPRQ7nr/u9vB tP+3zfhxJRlvv98+0ZaxXs5u1sja63F4GRNibdhQclAoBRiXJekOYAc/Rla/9Q2I dPHCn+m1dXEGPWsLQ1frtWxbB5h8DhQ= -----END CERTIFICATE-----Generated at Sun Apr 6 04:56:00 2025 by rpki-client