$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27e855a9-fb1d-3324-b68d-588e47ab0248.roa File: 27e855a9-fb1d-3324-b68d-588e47ab0248.roa (raw, json) Hash identifier: uFOc+sxpHRU8oC9kC+cMtuO9ToEx3hnfCODBWA+n2mk= Subject key identifier: 3E:42:8E:71:C8:2A:55:26:32:10:ED:15:D9:BC:1E:FC:83:BD:D2:B3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC0582651D08C1B58544C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27e855a9-fb1d-3324-b68d-588e47ab0248.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.97.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:05:82:65:1d:08:c1:b5:85:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=599c37cd-2846-4e86-aa68-aca936cfcbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:04:57:ed:4d:b7:61:59:8e:2d:6c:c8:9f:50: 0e:57:e8:a3:37:96:23:b0:5b:8b:5d:4f:91:4a:6f: 2f:10:80:eb:df:b2:8a:3a:59:d2:e5:8d:b9:a3:83: be:b8:55:a8:c7:61:af:04:5b:71:a4:cd:4c:6c:73: df:89:a2:92:f5:be:e9:26:54:18:61:74:f3:70:da: db:e6:9d:5d:34:cf:3c:e6:ec:59:e1:b5:89:6b:dc: 16:23:d1:60:53:b8:df:2b:16:6c:6a:0f:87:8e:6f: 60:a8:ce:90:5d:bb:dc:1d:f5:4e:eb:2f:8a:d4:a9: c3:c1:9e:60:76:e1:07:c3:f9:ca:60:2b:f9:86:d4: 83:14:6b:ca:67:60:cd:87:69:22:d1:e5:b5:d7:2b: f1:7c:8b:bd:3d:01:a6:bb:4b:ed:f3:55:37:e7:c1: 75:c8:ec:9b:32:9f:97:fb:d3:d0:81:03:dd:c6:66: cc:28:64:19:b2:ac:a4:d4:d5:89:7e:af:6e:0a:53: 58:fb:99:16:dd:02:0e:17:13:61:c9:54:d8:14:f5: b1:1c:a7:1f:94:74:4c:d2:fe:7b:47:f4:7d:a2:09: cb:3c:52:85:6e:70:7b:42:eb:be:87:60:6f:da:70: b3:05:2c:13:b9:a1:54:44:cf:85:19:2f:61:f5:d9: c9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:42:8E:71:C8:2A:55:26:32:10:ED:15:D9:BC:1E:FC:83:BD:D2:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27e855a9-fb1d-3324-b68d-588e47ab0248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:58:8a:32:39:3c:0c:16:b7:f3:20:41:49:38:f5:c9:8f:81: cd:c7:46:38:55:46:2f:df:8d:d9:3b:9a:37:87:b6:22:46:1a: 4d:39:e1:3a:e8:60:37:cb:53:49:39:02:fe:0d:05:a4:f7:db: 07:fc:fc:d4:c6:03:a7:42:58:be:10:6d:54:17:79:0e:28:3d: 8c:86:66:0e:36:0d:21:78:9d:00:be:84:fe:45:1b:27:8b:9f: e9:d7:d6:39:97:e1:0d:87:eb:9c:1d:90:03:5c:0d:f1:6a:f7: 4a:99:db:d7:a6:24:d4:03:71:82:9a:f2:98:e3:24:b1:8b:d5: 80:a6:51:72:e5:12:45:6a:56:ad:9b:13:31:98:dc:9c:e4:60: 6b:a1:49:85:68:d2:46:2d:67:dd:3e:a9:f1:b2:7e:d4:a9:fe: d2:f9:b9:91:eb:45:e4:90:e1:e5:db:1b:ca:45:a8:73:4e:44: ef:56:dd:fb:dd:a3:2d:a7:2d:08:89:1a:56:fa:d4:95:d2:6a: e7:e9:14:99:43:1a:4a:99:f4:c5:b6:01:ed:81:0e:36:0e:d7: be:a1:50:03:0e:88:88:42:af:99:d9:cb:9c:dc:b3:1e:74:2a: d8:70:a7:51:ea:83:bc:48:a1:b3:24:f7:2a:64:c7:09:1b:57: a6:aa:1e:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AWCZR0IwbWFRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NTk5YzM3Y2QtMjg0Ni00ZTg2LWFhNjgtYWNhOTM2Y2ZjYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwRX7U23YVmOLWzIn1AOV+ijN5YjsFuLXU+R Sm8vEIDr37KKOlnS5Y25o4O+uFWox2GvBFtxpM1MbHPfiaKS9b7pJlQYYXTzcNrb 5p1dNM885uxZ4bWJa9wWI9FgU7jfKxZsag+Hjm9gqM6QXbvcHfVO6y+K1KnDwZ5g duEHw/nKYCv5htSDFGvKZ2DNh2ki0eW11yvxfIu9PQGmu0vt81U358F1yOybMp+X +9PQgQPdxmbMKGQZsqyk1NWJfq9uClNY+5kW3QIOFxNhyVTYFPWxHKcflHRM0v57 R/R9ognLPFKFbnB7Quu+h2Bv2nCzBSwTuaFURM+FGS9h9dnJmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5CjnHIKlUmMhDtFdm8HvyDvdKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjdlODU1YTktZmIxZC0z MzI0LWI2OGQtNTg4ZTQ3YWIwMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZYijI5PAwWt/MgQUk49cmPgc3HRjhVRi/fjdk7mjeHtiJGGk054Tro YDfLU0k5Av4NBaT32wf8/NTGA6dCWL4QbVQXeQ4oPYyGZg42DSF4nQC+hP5FGyeL n+nX1jmX4Q2H65wdkANcDfFq90qZ29emJNQDcYKa8pjjJLGL1YCmUXLlEkVqVq2b EzGY3JzkYGuhSYVo0kYtZ90+qfGyftSp/tL5uZHrReSQ4eXbG8pFqHNORO9W3fvd oy2nLQiJGlb61JXSaufpFJlDGkqZ9MW2Ae2BDjYO176hUAMOiIhCr5nZy5zcsx50 Kthwp1Hqg7xIobMk9ypkxwkbV6aqHnA= -----END CERTIFICATE-----Generated at Sun Apr 6 08:46:48 2025 by rpki-client