$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27ed9d8c-aea3-37b8-a850-1f485967b2a6.roa File: 27ed9d8c-aea3-37b8-a850-1f485967b2a6.roa (raw, json) Hash identifier: DAT7egoDDE6LiPyIKEZELMhsT+Vfn08QKQWmrY6XB28= Subject key identifier: 17:57:F8:43:44:16:E9:91:33:9F:44:9C:43:9D:86:A9:21:CE:31:20 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C3322D41C823957943640 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27ed9d8c-aea3-37b8-a850-1f485967b2a6.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 71.114.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:33:22:d4:1c:82:39:57:94:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=4408bdad-7f96-4a62-8115-cfee74c66f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:fd:6b:16:eb:1a:e7:3d:3b:9c:91:b6:2f: e9:06:e5:40:14:a8:95:4e:db:17:3d:20:6f:47:23: eb:da:cf:19:c5:ce:0d:39:62:3c:03:d7:36:a6:83: 1c:4a:ae:29:ff:12:9d:e1:22:89:a8:dd:0c:a5:39: 5d:01:50:06:77:14:af:d1:b8:69:05:5e:fe:c1:8e: 9d:99:9d:2b:34:39:1d:65:f0:17:7c:de:a8:8e:6b: a1:48:bb:b4:d5:4e:11:b2:bd:aa:2d:fa:37:af:75: 09:6d:e7:f6:da:c0:79:59:e8:9f:ff:21:86:c1:0a: a3:04:ed:30:19:af:d6:f5:36:3f:7b:f4:b2:55:01: 22:2e:e4:b4:fb:5f:03:04:f2:15:2e:e4:af:9d:df: 6b:55:67:48:5c:db:25:24:d0:59:da:9d:68:8e:d3: 0a:26:cf:43:91:a6:dc:eb:b3:96:e6:66:b9:40:2e: a6:00:0e:eb:df:81:52:2b:b5:4f:28:be:15:09:3d: b1:72:c9:0d:e3:1b:98:9d:e9:8a:fb:41:46:45:3e: 99:a7:a4:ca:35:f1:20:5f:16:19:64:07:1c:2c:11: e7:0e:5a:15:c6:b8:6b:5b:e1:9c:de:cc:69:f8:d1: 5b:55:2d:86:23:d0:e3:d4:1a:54:d1:a7:1b:81:62: 7b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:57:F8:43:44:16:E9:91:33:9F:44:9C:43:9D:86:A9:21:CE:31:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27ed9d8c-aea3-37b8-a850-1f485967b2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.114.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a8:e3:96:e9:38:81:1e:ee:1e:c4:11:05:ca:cd:e2:42:b8: 43:73:0c:be:d0:d5:0c:e5:77:57:b8:06:92:46:5c:58:11:62: 58:5c:ae:56:31:c9:aa:b2:93:56:d4:ab:37:39:94:75:04:28: 9a:23:7d:7b:8f:d7:ef:30:8e:67:cd:29:03:22:56:6c:d2:fe: 76:8d:5f:68:88:a4:e0:65:ae:6d:73:2e:03:cf:0b:3e:4a:41: 70:95:e4:3b:61:7c:51:4c:a0:15:1d:a2:f8:02:d4:11:8d:f1: f4:2c:e1:10:e4:ec:7e:4f:33:cb:1e:5d:14:32:d2:ac:22:0f: d8:f7:ce:21:22:56:16:25:88:45:6e:a4:0c:47:b2:0e:05:fa: e5:91:ba:3d:be:a9:43:dc:c3:85:d8:0a:89:af:21:7d:8f:25: 90:d9:dd:c9:9c:ad:d4:df:a7:0e:e4:28:d7:53:ab:dc:e3:3f: fe:09:47:d1:42:f5:55:2d:34:20:7f:2e:11:f4:b9:f5:7b:27: 5e:1d:e0:af:79:f1:9e:91:5f:fa:18:21:2b:f0:1b:07:9d:8a: 50:3d:10:7c:72:9f:4a:35:73:d3:d1:be:26:10:05:13:0a:0e: dc:b8:69:14:a7:bf:13:09:cd:56:e4:4d:7d:e4:53:08:01:b3: da:0c:2f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDMi1ByCOVeUNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NDQwOGJkYWQtN2Y5Ni00YTYyLTgxMTUtY2ZlZTc0YzY2ZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6f9axbrGuc9O5yRti/pBuVAFKiVTtsXPSBv RyPr2s8Zxc4NOWI8A9c2poMcSq4p/xKd4SKJqN0MpTldAVAGdxSv0bhpBV7+wY6d mZ0rNDkdZfAXfN6ojmuhSLu01U4Rsr2qLfo3r3UJbef22sB5Weif/yGGwQqjBO0w Ga/W9TY/e/SyVQEiLuS0+18DBPIVLuSvnd9rVWdIXNslJNBZ2p1ojtMKJs9Dkabc 67OW5ma5QC6mAA7r34FSK7VPKL4VCT2xcskN4xuYnemK+0FGRT6Zp6TKNfEgXxYZ ZAccLBHnDloVxrhrW+Gc3sxp+NFbVS2GI9Dj1BpU0acbgWJ7awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdX+ENEFumRM59EnEOdhqkhzjEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjdlZDlkOGMtYWVhMy0z N2I4LWE4NTAtMWY0ODU5NjdiMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR3JAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2o45bpOIEe7h7EEQXKzeJCuENzDL7Q1Qzld1e4BpJGXFgRYlhcrlYx yaqyk1bUqzc5lHUEKJojfXuP1+8wjmfNKQMiVmzS/naNX2iIpOBlrm1zLgPPCz5K QXCV5DthfFFMoBUdovgC1BGN8fQs4RDk7H5PM8seXRQy0qwiD9j3ziEiVhYliEVu pAxHsg4F+uWRuj2+qUPcw4XYComvIX2PJZDZ3cmcrdTfpw7kKNdTq9zjP/4JR9FC 9VUtNCB/LhH0ufV7J14d4K958Z6RX/oYISvwGwedilA9EHxyn0o1c9PRviYQBRMK Dty4aRSnvxMJzVbkTX3kUwgBs9oML1I= -----END CERTIFICATE-----Generated at Sat Apr 5 18:28:47 2025 by rpki-client