$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f7d2626-4199-3dd4-8286-283337f7fe2d.roa File: 2f7d2626-4199-3dd4-8286-283337f7fe2d.roa (raw, json) Hash identifier: 3V/5HWVh5lZuNmOmjm24Yoqbmvk4YyskoddFrrTFj2Y= Subject key identifier: 8F:67:7C:EA:19:3D:45:5C:67:25:E1:8D:28:CF:0F:2C:3B:CD:7A:EF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F787C8A2A81E15895570 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f7d2626-4199-3dd4-8286-283337f7fe2d.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 72.69.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f7:87:c8:a2:a8:1e:15:89:55:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=01c1295d-43bd-45ec-840e-7a1d81621565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:98:53:53:9d:f8:8b:1d:da:29:4f:8e:00:52: 9d:97:ca:c2:5f:a8:18:59:f8:8b:03:83:f1:7f:71: 58:d7:7b:de:87:71:96:c5:f8:a1:e2:16:0b:7e:ec: f6:68:30:44:46:74:fd:d7:80:29:f2:29:df:88:83: 1e:63:a4:a7:28:fa:37:71:1e:e7:b1:98:84:e1:42: 58:83:c6:59:b9:72:0e:98:0e:31:75:b7:d0:8a:9d: e0:24:5a:9c:70:a3:bb:87:5a:1c:98:a6:b4:3c:52: 85:0b:3a:73:43:15:cb:3b:b1:63:32:09:ed:e1:92: e1:d7:29:a0:73:90:ea:05:12:a6:7b:a0:77:3f:bd: 52:a9:60:25:f9:94:7d:d8:7a:64:57:71:f5:ee:24: cd:b9:71:c0:21:3b:b4:a1:09:f1:5a:5a:28:f7:0a: 04:23:bb:8d:b7:c7:1b:dd:9f:a2:dd:a1:e9:aa:57: 42:73:ae:22:b4:49:a1:9f:5b:df:1d:36:24:3d:b6: de:8d:a2:a7:ba:02:1c:c5:ab:bd:71:0d:3d:8a:56: d8:7e:04:55:fa:bf:86:92:43:b0:8f:06:c8:e3:73: be:19:7c:b1:02:2b:5a:14:0a:93:88:41:bb:78:29: a9:ca:8f:10:03:22:1c:b4:9c:b8:bb:ab:a4:80:88: cd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:67:7C:EA:19:3D:45:5C:67:25:E1:8D:28:CF:0F:2C:3B:CD:7A:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f7d2626-4199-3dd4-8286-283337f7fe2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.69.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:36:2b:d6:ab:96:58:35:42:12:91:89:f4:88:d2:de:c2:af: f6:00:16:81:31:be:f3:fd:57:70:f6:87:2a:d5:b5:2c:db:b0: a8:b3:d4:f7:47:36:04:ae:21:5a:f5:e8:a7:16:15:2b:ef:5c: f4:53:88:c4:4d:c5:80:e2:cb:f2:3b:49:c8:b8:07:bf:23:a7: a6:9b:06:68:ca:20:c4:e6:05:b3:16:54:f4:45:cf:48:db:0d: 6b:e5:6e:d7:eb:61:91:80:f8:74:2b:cf:b8:68:03:0d:f0:77: 23:16:94:9e:00:a9:32:9e:ac:12:9f:3c:69:5e:b2:76:79:0a: 67:15:86:5c:42:3c:0c:cb:bd:a9:17:97:bf:f0:2e:dc:a7:af: d3:e6:4e:7b:2a:cb:ba:60:a7:23:9d:d5:10:72:b2:14:04:3e: 2d:a8:18:63:1c:ff:a8:95:1d:31:50:b8:5d:98:db:2e:a2:5f: 84:4a:5b:90:2e:5c:3d:77:5d:46:cd:76:64:63:f2:40:f7:6a: c4:47:1d:f5:a0:22:74:4e:f4:ea:ae:0e:c9:88:6d:ca:d2:99: 4c:d2:19:77:34:b9:23:e6:6d:57:7e:ab:8c:88:12:70:ab:5b: 63:c9:66:53:ee:14:71:2e:5b:e0:c7:1c:09:d5:d7:99:01:8d: b3:68:9a:36 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRveHyKKoHhWJVXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MDFjMTI5NWQtNDNiZC00NWVjLTg0MGUtN2ExZDgxNjIxNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjphTU534ix3aKU+OAFKdl8rCX6gYWfiLA4Px f3FY13veh3GWxfih4hYLfuz2aDBERnT914Ap8infiIMeY6SnKPo3cR7nsZiE4UJY g8ZZuXIOmA4xdbfQip3gJFqccKO7h1ocmKa0PFKFCzpzQxXLO7FjMgnt4ZLh1ymg c5DqBRKme6B3P71SqWAl+ZR92HpkV3H17iTNuXHAITu0oQnxWloo9woEI7uNt8cb 3Z+i3aHpqldCc64itEmhn1vfHTYkPbbejaKnugIcxau9cQ09ilbYfgRV+r+GkkOw jwbI43O+GXyxAitaFAqTiEG7eCmpyo8QAyIctJy4u6ukgIjNnQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI9nfOoZPUVcZyXhjSjPDyw7zXrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmY3ZDI2MjYtNDE5OS0z ZGQ0LTgyODYtMjgzMzM3ZjdmZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASEUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAoTYr1quWWDVCEpGJ9IjS3sKv9gAWgTG+8/1XcPaHKtW1LNuwqLPU90c2 BK4hWvXopxYVK+9c9FOIxE3FgOLL8jtJyLgHvyOnppsGaMogxOYFsxZU9EXPSNsN a+Vu1+thkYD4dCvPuGgDDfB3IxaUngCpMp6sEp88aV6ydnkKZxWGXEI8DMu9qReX v/Au3Kev0+ZOeyrLumCnI53VEHKyFAQ+LagYYxz/qJUdMVC4XZjbLqJfhEpbkC5c PXddRs12ZGPyQPdqxEcd9aAidE706q4OyYhtytKZTNIZdzS5I+ZtV36rjIgScKtb Y8lmU+4UcS5b4MccCdXXmQGNs2iaNg== -----END CERTIFICATE-----Generated at Sat Apr 5 21:24:31 2025 by rpki-client