$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d568b97-cf15-3489-b925-45945add08e7.roa File: 2d568b97-cf15-3489-b925-45945add08e7.roa (raw, json) Hash identifier: YAtE13Et8Igd2nPHz49LECSKUF4BRO19cfFRyV6z1i8= Subject key identifier: 39:AE:9A:F6:52:16:F5:CF:CB:28:A6:87:B2:E0:4A:07:5C:37:54:35 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3DC7714150FD57FF51700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d568b97-cf15-3489-b925-45945add08e7.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.108.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:dc:77:14:15:0f:d5:7f:f5:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=2702b70a-1d58-4671-a3ee-7047172a6bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cd:a6:37:2d:a8:e2:de:56:ab:9a:ef:3d:f5: d9:9a:11:98:96:da:03:e5:b1:03:83:21:73:b8:36: 64:98:df:2b:33:0c:f5:f3:5a:ea:ae:78:03:16:b7: d6:22:52:84:68:24:44:6d:5c:c1:77:7d:85:a8:4b: 92:65:dc:d5:2c:9e:a2:a3:09:f9:24:9f:af:b8:47: 0e:00:97:53:13:32:2f:88:21:a0:ea:19:ed:44:f7: 63:d6:53:b1:86:1f:af:33:48:ec:02:de:2e:8a:b1: b3:a0:89:39:ae:3c:c2:23:46:59:d8:a0:2e:6e:ab: ed:84:a9:e3:9f:3f:f7:31:c2:b2:9d:29:0d:c9:00: 7b:33:c4:94:af:43:bf:09:b7:88:3f:9d:0f:13:26: df:d0:97:84:fb:bd:cd:e4:47:46:a8:c4:34:fd:3d: e6:bf:f1:48:ec:1b:95:39:95:f2:6b:43:a0:c1:3a: 86:c2:25:d9:a4:7c:13:24:6d:e9:c4:f2:33:c5:67: 51:7f:59:43:84:1b:8d:e2:b0:48:39:d1:14:03:c5: 53:ad:49:bc:be:f6:9a:31:cc:a7:ad:98:c1:3c:fa: ed:a5:24:43:17:c5:bf:0b:d7:a4:72:08:75:c9:45: 37:7d:80:d4:88:51:e1:6d:0e:09:f8:b4:cb:de:16: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AE:9A:F6:52:16:F5:CF:CB:28:A6:87:B2:E0:4A:07:5C:37:54:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d568b97-cf15-3489-b925-45945add08e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8e:55:da:2c:dd:ce:68:35:55:ff:60:ad:b0:9a:78:d0:29: 1b:92:af:21:13:72:12:32:7d:88:47:4c:4c:d3:c7:40:df:84: 9a:e6:90:ac:89:66:e7:21:bf:3a:7e:0b:e6:b0:87:d7:66:28: 04:45:d9:43:d0:20:45:3e:9a:95:dc:3f:f6:3b:6d:7f:77:6d: f1:f8:3e:f1:a6:f7:00:93:61:66:ec:43:0d:b1:8e:4c:df:9f: a2:52:c1:fe:d8:e2:99:ca:ca:9e:1a:37:6f:6b:ed:03:e3:dc: 37:86:a9:7a:0c:b1:4c:36:e9:b1:96:55:98:05:4c:91:0a:85: a4:9a:f4:80:84:b0:8d:c8:ec:87:97:7e:f6:1f:7c:1f:65:4b: 87:a6:75:c9:85:c6:47:6e:82:5e:9d:f4:75:c3:f9:10:04:fd: 67:d7:76:80:79:99:f8:86:e5:62:68:16:30:75:ec:c8:31:a8: 7d:63:44:62:ca:7b:1a:b0:fd:3a:16:1a:b9:13:c2:fd:da:e2: d5:3f:e6:e5:8f:67:1f:d2:cd:72:78:be:5b:90:88:20:20:f8: 94:93:1c:7a:86:70:75:30:01:5d:a3:ea:b4:9d:dc:0e:96:4a: e2:b3:ce:7c:3e:45:33:69:28:f3:73:8b:29:8a:09:ca:71:fc: 00:a5:8c:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09x3FBUP1X/1FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MjcwMmI3MGEtMWQ1OC00NjcxLWEzZWUtNzA0NzE3MmE2YmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc2mNy2o4t5Wq5rvPfXZmhGYltoD5bEDgyFz uDZkmN8rMwz181rqrngDFrfWIlKEaCREbVzBd32FqEuSZdzVLJ6iown5JJ+vuEcO AJdTEzIviCGg6hntRPdj1lOxhh+vM0jsAt4uirGzoIk5rjzCI0ZZ2KAubqvthKnj nz/3McKynSkNyQB7M8SUr0O/CbeIP50PEybf0JeE+73N5EdGqMQ0/T3mv/FI7BuV OZXya0OgwTqGwiXZpHwTJG3pxPIzxWdRf1lDhBuN4rBIOdEUA8VTrUm8vvaaMcyn rZjBPPrtpSRDF8W/C9ekcgh1yUU3fYDUiFHhbQ4J+LTL3hbFYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmumvZSFvXPyyimh7LgSgdcN1Q1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmQ1NjhiOTctY2YxNS0z NDg5LWI5MjUtNDU5NDVhZGQwOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSGw2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuOVdos3c5oNVX/YK2wmnjQKRuSryETchIyfYhHTEzTx0DfhJrmkKyJ Zuchvzp+C+awh9dmKARF2UPQIEU+mpXcP/Y7bX93bfH4PvGm9wCTYWbsQw2xjkzf n6JSwf7Y4pnKyp4aN29r7QPj3DeGqXoMsUw26bGWVZgFTJEKhaSa9ICEsI3I7IeX fvYffB9lS4emdcmFxkdugl6d9HXD+RAE/WfXdoB5mfiG5WJoFjB17MgxqH1jRGLK exqw/ToWGrkTwv3a4tU/5uWPZx/SzXJ4vluQiCAg+JSTHHqGcHUwAV2j6rSd3A6W SuKzznw+RTNpKPNziymKCcpx/ACljCE= -----END CERTIFICATE-----Generated at Sun Apr 6 12:49:53 2025 by rpki-client