$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341517c8-40ca-31e7-a95a-b1ec05cfca82.roa File: 341517c8-40ca-31e7-a95a-b1ec05cfca82.roa (raw, json) Hash identifier: vGXOiXSGrJVQu25Qv/LALa2fmJ4sgW1egfhitexSo+U= Subject key identifier: BA:F5:62:15:9B:B4:64:75:A4:AD:2B:ED:B2:F9:7B:5E:1B:E4:5F:5B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246FCCD172B258938F9CF80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341517c8-40ca-31e7-a95a-b1ec05cfca82.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 108.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:fc:cd:17:2b:25:89:38:f9:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1d4ff2b8-93f6-49fd-876f-5c679ecf2964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0d:99:1c:8f:65:66:6e:fa:26:87:b9:2f:a7: 6f:f6:17:7a:8e:13:61:79:e3:6a:2d:f7:0c:7f:d5: 38:58:b1:77:b4:1f:e2:4f:0c:65:81:5c:05:92:7c: f8:32:05:ca:f6:c4:7a:d2:23:a0:4a:2a:82:7e:77: 7d:5f:61:be:b6:fc:93:f6:8d:a1:20:07:af:7a:ee: d0:0c:44:ea:f1:4d:6a:c7:c4:7d:cc:12:6c:d8:71: c1:45:d3:4b:f4:af:c7:2e:94:b7:d8:78:3e:b0:71: 89:64:a4:ba:f9:fb:29:7c:1a:26:d3:c9:2a:25:1b: 4f:3a:e6:43:cf:cc:e1:60:ba:9b:9b:83:10:98:e9: a8:89:ee:cc:48:46:dd:8a:ce:8a:59:98:38:f0:5e: cb:20:43:66:18:1c:9b:c8:2a:a3:ed:78:24:43:ab: 70:f3:66:b3:55:e4:80:64:bf:8f:1b:fa:04:bf:bc: 9e:78:21:ba:74:67:87:54:13:4a:4f:eb:4c:75:b5: 73:06:9c:f4:f1:02:49:bd:19:34:36:f4:4a:ff:ce: ef:1b:27:03:8c:1f:a8:b0:14:9f:0e:bb:1b:94:75: 59:a7:1a:ef:04:53:3f:ea:4a:28:52:67:5f:27:5e: c1:da:55:58:e5:d5:ef:0c:7b:1b:e1:b8:3a:bc:de: 82:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F5:62:15:9B:B4:64:75:A4:AD:2B:ED:B2:F9:7B:5E:1B:E4:5F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341517c8-40ca-31e7-a95a-b1ec05cfca82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.28.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:68:1f:23:a6:ae:70:31:ce:12:67:50:9e:2a:1e:48:bc:f1: 75:45:5d:ce:e1:47:1a:32:75:68:00:3a:c3:77:c6:0d:b3:fc: fa:df:2c:7d:03:6a:9d:96:91:86:c9:17:48:2b:c1:9e:cc:b2: 49:88:87:0c:90:c1:17:75:67:27:00:66:40:0a:fe:09:f9:9d: 4e:60:5e:e6:a1:df:08:48:ee:64:00:89:1b:64:94:d3:0f:8a: 87:22:b0:c1:48:c2:13:4a:ec:d8:10:d7:44:69:b3:6b:22:5d: 0a:24:10:75:ba:42:62:72:d3:b7:ca:57:f3:f7:fa:01:db:1d: 38:54:4f:71:d6:de:82:11:a3:39:2b:c3:3d:eb:9c:ca:6d:ca: 84:79:98:7c:b4:06:4c:a8:c1:a2:93:c1:af:76:ea:06:a7:56: 6c:91:59:b7:0a:03:68:17:dc:e0:e2:70:43:a3:7e:7c:1b:e4: 0a:f0:70:7b:0e:be:78:c9:35:bc:b8:9e:a3:25:e2:a8:78:ce: a7:42:aa:da:f4:b1:54:7a:36:75:16:14:17:21:92:b5:c4:ff: 20:b6:ab:36:1d:ab:6f:8e:8f:bc:4b:cd:8e:05:c4:9e:3e:14: 16:e1:a7:60:b7:d0:58:b1:66:11:fb:1e:cd:79:de:4d:67:72: b6:1e:5c:12 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRvzNFysliTj5z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MWQ0ZmYyYjgtOTNmNi00OWZkLTg3NmYtNWM2NzllY2YyOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw2ZHI9lZm76Joe5L6dv9hd6jhNheeNqLfcM f9U4WLF3tB/iTwxlgVwFknz4MgXK9sR60iOgSiqCfnd9X2G+tvyT9o2hIAeveu7Q DETq8U1qx8R9zBJs2HHBRdNL9K/HLpS32Hg+sHGJZKS6+fspfBom08kqJRtPOuZD z8zhYLqbm4MQmOmoie7MSEbdis6KWZg48F7LIENmGBybyCqj7XgkQ6tw82azVeSA ZL+PG/oEv7yeeCG6dGeHVBNKT+tMdbVzBpz08QJJvRk0NvRK/87vGycDjB+osBSf DrsblHVZpxrvBFM/6kooUmdfJ17B2lVY5dXvDHsb4bg6vN6CjQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLr1YhWbtGR1pK0r7bL5e14b5F9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzQxNTE3YzgtNDBjYS0z MWU3LWE5NWEtYjFlYzA1Y2ZjYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbBwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANmgfI6aucDHOEmdQnioeSLzxdUVdzuFHGjJ1aAA6w3fGDbP8+t8sfQNq nZaRhskXSCvBnsyySYiHDJDBF3VnJwBmQAr+CfmdTmBe5qHfCEjuZACJG2SU0w+K hyKwwUjCE0rs2BDXRGmzayJdCiQQdbpCYnLTt8pX8/f6AdsdOFRPcdbeghGjOSvD Peucym3KhHmYfLQGTKjBopPBr3bqBqdWbJFZtwoDaBfc4OJwQ6N+fBvkCvBwew6+ eMk1vLieoyXiqHjOp0Kq2vSxVHo2dRYUFyGStcT/ILarNh2rb46PvEvNjgXEnj4U FuGnYLfQWLFmEfsezXneTWdyth5cEg== -----END CERTIFICATE-----Generated at Sat Apr 5 18:41:29 2025 by rpki-client