$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa File: 3c271c2f-5fb4-307b-8972-821df3f14259.roa (raw, json) Hash identifier: FJ8YO0bhBuUEY10Qs84SgGKlCsamRDFmUkhKcGxi5U8= Subject key identifier: 16:7F:D9:DB:F1:25:73:E9:7D:A0:55:CA:E6:8C:08:7D:0F:B3:0B:9B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246FC1F1167957709F288C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 108.34.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:fc:1f:11:67:95:77:09:f2:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=4593ef14-ae92-4ae1-aa8a-3c6ca7476882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:11:89:95:8d:a1:97:cc:e0:52:02:34:52:d7: d2:35:69:83:06:1c:86:c0:2b:2a:53:5a:ba:b5:f8: 7c:3b:95:86:84:a4:c9:ee:05:bc:d6:c4:50:e3:4e: 41:a8:17:76:f6:b7:a7:67:6c:87:ad:35:c5:51:cf: 1b:cc:6e:0b:75:0e:87:f1:fd:fa:63:4e:7f:9f:66: 23:36:04:06:c9:e5:9e:c2:8f:30:e7:a2:91:d3:5c: 62:6d:c3:88:88:98:06:9a:b7:cf:5f:27:53:5e:ed: ba:c2:54:b1:32:d3:07:cf:15:f6:ee:a3:37:c7:fd: ed:42:ff:9f:4e:2c:50:71:bd:5d:7e:5c:aa:17:3b: 55:91:7f:07:d9:03:e0:3d:fe:93:12:db:ea:2b:28: 13:f3:74:ce:bd:39:b5:a8:7d:ef:e1:b6:14:ab:16: 4b:2e:05:b7:c7:28:fe:a2:c9:6b:28:e3:af:b1:f3: 6a:c3:2c:23:6e:68:e1:76:52:33:80:e3:68:5c:df: f2:9b:2a:ba:21:f9:ba:04:74:88:e9:80:69:17:f8: 5f:86:d4:bf:5c:0e:09:e5:29:91:f2:ce:52:1b:52: a3:f9:87:6c:80:d9:48:7f:cc:c4:71:b4:a4:fb:29: ca:f5:e5:fd:a9:2c:7d:28:b9:80:1c:9e:e4:a3:89: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7F:D9:DB:F1:25:73:E9:7D:A0:55:CA:E6:8C:08:7D:0F:B3:0B:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.34.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:88:30:b2:67:11:78:ea:ee:2a:a8:92:67:9f:10:1f:de:02: a9:90:f1:36:da:72:93:3c:6b:40:df:37:db:16:34:8a:56:95: dd:3a:c8:fa:08:b1:ce:47:cb:52:15:70:9c:e4:61:70:4a:80: a2:ab:00:ab:d3:a5:31:6a:9f:94:c2:38:65:b6:99:41:d1:29: 4a:2b:7f:52:ee:e6:41:33:01:77:be:bc:7c:2f:71:29:56:f8: 08:bd:9f:78:ca:bd:e4:29:21:fa:d0:90:cc:40:c9:85:2b:be: e5:26:02:49:9a:36:71:55:11:fd:99:81:a3:eb:a6:4d:b1:75: 59:9c:b4:a8:9d:13:c5:cc:22:8f:ed:d8:34:8c:be:d2:28:d5: 4e:61:ff:46:14:10:42:2e:80:43:67:0c:83:32:a5:67:5a:df: ba:d1:f1:7d:53:80:74:dc:4f:ac:82:df:b8:8d:f6:04:c2:c6: f5:33:79:cf:a7:66:22:ca:fe:4b:d1:db:ed:c8:7a:e8:0d:f7: ad:6e:a1:9b:21:40:c3:1a:30:51:1e:80:e9:10:2d:f6:44:f2: 0c:67:50:15:40:88:77:40:4c:72:0f:11:a9:8d:11:cf:62:9b: d1:14:40:f1:d0:cc:a9:e7:51:20:10:17:a2:53:a1:b2:a7:74: 4b:6f:27:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvwfEWeVdwnyiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NDU5M2VmMTQtYWU5Mi00YWUxLWFhOGEtM2M2Y2E3NDc2ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRGJlY2hl8zgUgI0UtfSNWmDBhyGwCsqU1q6 tfh8O5WGhKTJ7gW81sRQ405BqBd29renZ2yHrTXFUc8bzG4LdQ6H8f36Y05/n2Yj NgQGyeWewo8w56KR01xibcOIiJgGmrfPXydTXu26wlSxMtMHzxX27qM3x/3tQv+f TixQcb1dflyqFztVkX8H2QPgPf6TEtvqKygT83TOvTm1qH3v4bYUqxZLLgW3xyj+ oslrKOOvsfNqwywjbmjhdlIzgONoXN/ymyq6Ifm6BHSI6YBpF/hfhtS/XA4J5SmR 8s5SG1Kj+YdsgNlIf8zEcbSk+ynK9eX9qSx9KLmAHJ7ko4k/8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZ/2dvxJXPpfaBVyuaMCH0PswubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2MyNzFjMmYtNWZiNC0z MDdiLTg5NzItODIxZGYzZjE0MjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmIMLJnEXjq7iqokmefEB/eAqmQ8TbacpM8a0DfN9sWNIpWld06yPoI sc5Hy1IVcJzkYXBKgKKrAKvTpTFqn5TCOGW2mUHRKUorf1Lu5kEzAXe+vHwvcSlW +Ai9n3jKveQpIfrQkMxAyYUrvuUmAkmaNnFVEf2ZgaPrpk2xdVmctKidE8XMIo/t 2DSMvtIo1U5h/0YUEEIugENnDIMypWda37rR8X1TgHTcT6yC37iN9gTCxvUzec+n ZiLK/kvR2+3IeugN961uoZshQMMaMFEegOkQLfZE8gxnUBVAiHdATHIPEamNEc9i m9EUQPHQzKnnUSAQF6JTobKndEtvJxs= -----END CERTIFICATE-----Generated at Thu Apr 10 12:33:42 2025 by rpki-client