$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/384bb31c-f694-300f-aef5-7e993598c12e.roa File: 384bb31c-f694-300f-aef5-7e993598c12e.roa (raw, json) Hash identifier: 46pZ/2rcpId66sUJQw4vfEzPwkQnuicTwkfOTo0LcOA= Subject key identifier: 65:4B:F5:36:55:8F:0E:0C:FA:27:C2:81:A0:E0:64:5E:6C:B9:E8:66 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC0D8EF1E19EF196310640 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/384bb31c-f694-300f-aef5-7e993598c12e.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.97.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:0d:8e:f1:e1:9e:f1:96:31:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=a3534d54-89c7-4139-8b23-b043f6b73eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:56:07:24:50:76:37:7e:ea:fb:c0:1c:e0:5f: 1b:58:4c:bf:58:7b:1a:ca:3c:4d:cc:cd:bb:d7:b9: e0:f7:fb:e8:40:2d:f1:ee:11:98:dd:f2:23:4c:4e: bc:6c:34:e7:0a:ff:7e:de:e8:a6:c5:5c:f9:53:4c: 30:2f:75:94:0e:56:bc:a5:70:55:4d:d8:d8:0b:d6: 1d:67:3f:e5:34:4b:d8:5a:c1:51:4f:66:01:84:0e: d3:54:fd:89:c6:95:cc:d4:b2:b4:7b:3f:99:be:ba: ad:af:de:3b:c8:29:ec:69:5d:fd:cd:e4:9f:3c:a4: ef:53:f2:b2:25:3f:4b:50:b5:13:92:3a:e9:25:91: c8:5c:b5:75:e5:b9:cc:a2:28:32:b8:5e:bd:56:27: c3:5d:94:2f:5e:4f:29:78:47:9d:6d:58:be:57:d8: db:24:02:6f:7a:9f:00:73:8a:1d:1d:e7:38:20:e5: 9d:b7:a2:dd:9b:66:a7:ff:cb:01:02:d4:f4:b7:f0: 37:56:51:17:ce:99:90:fa:97:5f:31:1b:f1:2f:c8: 51:e0:9c:70:26:60:20:e8:21:32:bd:22:90:69:cd: 3c:b1:fd:89:d2:aa:31:13:41:32:82:92:50:f6:ce: e4:ff:b8:5d:22:39:e0:0e:30:89:45:27:dc:03:00: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4B:F5:36:55:8F:0E:0C:FA:27:C2:81:A0:E0:64:5E:6C:B9:E8:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/384bb31c-f694-300f-aef5-7e993598c12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:be:39:72:9c:e2:2c:54:6c:5b:4c:37:81:bc:85:0b:67:7c: e1:1c:f0:30:5c:f6:26:a3:27:0a:8a:cd:00:af:92:13:b1:3c: f8:9e:21:65:2d:a9:5c:78:54:b3:93:9f:93:7e:58:c5:c0:87: 57:e1:3b:fd:b1:d5:2f:83:b8:f1:8a:e4:29:e6:ca:0d:e6:bc: 1b:36:b4:77:b2:2f:c0:e2:9c:e6:a7:14:2d:04:c3:9a:ac:81: 59:e0:86:c7:66:fc:b3:2e:f2:4f:7e:f2:46:47:80:ea:db:ca: 32:ed:b0:5d:b3:a9:31:85:b0:2c:ef:86:ae:7d:82:12:78:96: 53:fc:4c:1f:ba:52:b4:94:25:c9:e1:a3:a7:8b:63:c1:ff:53: 1f:e5:63:78:9d:db:aa:22:6c:53:48:35:b3:e0:3b:fa:70:4b: 24:a9:10:84:24:7d:51:d5:7e:ef:3d:84:0e:f1:36:b0:2b:d8: 68:3f:f0:14:6b:c3:49:8d:04:5c:81:b0:cb:06:47:a5:f2:64: 68:a8:49:12:5d:a3:14:f1:90:ea:0d:95:b4:39:33:16:ba:6d: da:0b:3f:44:02:66:74:b3:0d:1e:6e:65:50:fb:83:a2:d7:59: 45:94:c1:2a:5a:d6:be:ea:25:1c:f1:00:dd:02:b9:bd:fd:b1: 3e:95:25:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3A2O8eGe8ZYxBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk YTM1MzRkNTQtODljNy00MTM5LThiMjMtYjA0M2Y2YjczZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilYHJFB2N37q+8Ac4F8bWEy/WHsayjxNzM27 17ng9/voQC3x7hGY3fIjTE68bDTnCv9+3uimxVz5U0wwL3WUDla8pXBVTdjYC9Yd Zz/lNEvYWsFRT2YBhA7TVP2JxpXM1LK0ez+Zvrqtr947yCnsaV39zeSfPKTvU/Ky JT9LULUTkjrpJZHIXLV15bnMoigyuF69VifDXZQvXk8peEedbVi+V9jbJAJvep8A c4odHec4IOWdt6Ldm2an/8sBAtT0t/A3VlEXzpmQ+pdfMRvxL8hR4JxwJmAg6CEy vSKQac08sf2J0qoxE0EygpJQ9s7k/7hdIjngDjCJRSfcAwAYWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVL9TZVjw4M+ifCgaDgZF5suehmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzg0YmIzMWMtZjY5NC0z MDBmLWFlZjUtN2U5OTM1OThjMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG+OXKc4ixUbFtMN4G8hQtnfOEc8DBc9iajJwqKzQCvkhOxPPieIWUt qVx4VLOTn5N+WMXAh1fhO/2x1S+DuPGK5Cnmyg3mvBs2tHeyL8DinOanFC0Ew5qs gVnghsdm/LMu8k9+8kZHgOrbyjLtsF2zqTGFsCzvhq59ghJ4llP8TB+6UrSUJcnh o6eLY8H/Ux/lY3id26oibFNINbPgO/pwSySpEIQkfVHVfu89hA7xNrAr2Gg/8BRr w0mNBFyBsMsGR6XyZGioSRJdoxTxkOoNlbQ5Mxa6bdoLP0QCZnSzDR5uZVD7g6LX WUWUwSpa1r7qJRzxAN0Cub39sT6VJSA= -----END CERTIFICATE-----Generated at Sat Apr 5 21:24:37 2025 by rpki-client