$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e8e20f7-5c8e-3cd4-8d19-dc65e79476c3.roa File: 2e8e20f7-5c8e-3cd4-8d19-dc65e79476c3.roa (raw, json) Hash identifier: S6k2fOoNExuA+J+3uewXGrMtezXWWPMtwHWEerCWTYM= Subject key identifier: 32:76:17:62:30:80:6B:4C:ED:12:30:E4:2D:E4:56:A2:3B:52:01:AC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584964846006DABB58F2EDC3AF00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e8e20f7-5c8e-3cd4-8d19-dc65e79476c3.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 6167 IP address blocks: 75.205.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:60:06:da:bb:58:f2:ed:c3:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=7205f388-0581-4cb0-9c9c-24c58cc1c684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d6:da:3a:b6:51:56:da:c4:6f:fc:6d:b8:e9: d2:18:3e:85:48:e0:88:20:68:2a:6b:56:cf:d6:a8: 0d:c3:37:b8:74:66:3b:3a:06:c4:da:6b:6e:fe:0d: de:7e:d9:a6:39:3c:00:30:82:b6:f4:2f:e7:af:42: fa:d0:ce:8c:3d:35:7c:b2:fe:ae:cb:ba:35:cb:ba: 40:51:72:e0:79:d7:7c:5f:41:41:de:03:60:7a:05: a8:04:c6:e9:7b:2a:b9:9e:f6:ea:7c:7a:9c:7e:a7: f8:f6:9d:7e:bc:71:fc:e5:2c:3d:fd:a6:1c:7d:80: fb:c1:5d:3b:b2:60:89:76:40:b1:e4:0e:c2:8a:3e: c1:22:24:20:72:de:54:d9:d4:32:ae:d7:60:ac:3e: d4:2b:b9:bc:37:be:1e:da:0b:0c:04:85:4d:8c:ea: 87:99:cb:e0:f5:a1:0d:26:29:b9:69:89:e9:20:1f: c7:74:d1:13:01:89:c2:de:cf:63:c6:dd:ef:12:7e: 01:cf:59:0d:56:2e:0f:41:16:a5:c5:b9:3e:87:47: 26:d1:62:05:15:9f:55:2d:8e:49:20:20:80:45:b4: 93:7f:4a:57:2e:27:3f:e0:c1:a1:1b:c7:fc:51:c9: 25:8d:c7:96:c1:82:d5:6b:ec:44:41:57:9e:9f:d9: 21:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:76:17:62:30:80:6B:4C:ED:12:30:E4:2D:E4:56:A2:3B:52:01:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e8e20f7-5c8e-3cd4-8d19-dc65e79476c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 75.205.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ec:99:2d:0a:54:09:b4:d5:3c:b7:32:f7:db:ee:69:7f:ed: 0b:e8:f8:51:04:a6:6c:f9:21:a0:ff:f1:43:27:fc:66:26:cf: 7d:ee:f8:55:8a:3f:58:f5:40:ef:22:a6:3d:9f:30:39:f9:07: 4c:c5:bd:dc:3a:4c:01:ea:8e:22:9d:bd:05:80:25:e9:30:db: f6:69:41:ca:14:ee:1e:b1:96:ee:65:1d:17:78:94:bb:a0:51: 26:2a:15:d0:17:1f:88:fa:4e:c4:dc:36:bb:01:b9:0b:ae:5d: 83:60:da:22:81:84:ac:02:ea:06:6a:6b:bd:54:01:f1:dc:5d: e7:da:6c:d2:ef:37:30:02:cf:87:87:17:af:88:69:57:67:3f: 77:cb:b1:56:79:41:12:b2:30:61:23:c7:ef:a1:53:18:ca:71: f7:df:b7:b3:14:c2:5d:53:62:83:28:e4:bd:db:44:e2:f0:c5: 39:9b:9e:58:93:7e:5f:f5:a9:7c:e5:65:04:fc:13:63:c8:96: e1:1a:b9:19:1f:f4:a2:76:69:87:3c:e7:82:93:a1:20:6c:d8: c3:f2:a6:37:f4:5f:35:7a:0c:02:4e:7f:8b:22:d5:62:70:08: 23:85:59:bd:02:76:52:f0:b4:57:4e:79:ed:16:4d:dc:10:ce: 06:83:5c:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhGAG2rtY8u3DrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk NzIwNWYzODgtMDU4MS00Y2IwLTljOWMtMjRjNThjYzFjNjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidbaOrZRVtrEb/xtuOnSGD6FSOCIIGgqa1bP 1qgNwze4dGY7OgbE2mtu/g3eftmmOTwAMIK29C/nr0L60M6MPTV8sv6uy7o1y7pA UXLgedd8X0FB3gNgegWoBMbpeyq5nvbqfHqcfqf49p1+vHH85Sw9/aYcfYD7wV07 smCJdkCx5A7Cij7BIiQgct5U2dQyrtdgrD7UK7m8N74e2gsMBIVNjOqHmcvg9aEN Jim5aYnpIB/HdNETAYnC3s9jxt3vEn4Bz1kNVi4PQRalxbk+h0cm0WIFFZ9VLY5J ICCARbSTf0pXLic/4MGhG8f8UckljceWwYLVa+xEQVeen9kh8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ2F2IwgGtM7RIw5C3kVqI7UgGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmU4ZTIwZjctNWM4ZS0z Y2Q0LThkMTktZGM2NWU3OTQ3NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS80YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvsmS0KVAm01Ty3Mvfb7ml/7Qvo+FEEpmz5IaD/8UMn/GYmz33u+FWK P1j1QO8ipj2fMDn5B0zFvdw6TAHqjiKdvQWAJekw2/ZpQcoU7h6xlu5lHRd4lLug USYqFdAXH4j6TsTcNrsBuQuuXYNg2iKBhKwC6gZqa71UAfHcXefabNLvNzACz4eH F6+IaVdnP3fLsVZ5QRKyMGEjx++hUxjKcffft7MUwl1TYoMo5L3bROLwxTmbnliT fl/1qXzlZQT8E2PIluEauRkf9KJ2aYc854KToSBs2MPypjf0XzV6DAJOf4si1WJw CCOFWb0CdlLwtFdOee0WTdwQzgaDXLA= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:01 2025 by rpki-client