$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3db7c223-37f1-367a-a002-0e12cfa2ff68.roa File: 3db7c223-37f1-367a-a002-0e12cfa2ff68.roa (raw, json) Hash identifier: I/aKTzJqfUo7ne49Bm7DXF9pWrmnOZpwnA62VyXLeuk= Subject key identifier: C2:A8:9C:93:39:89:3E:36:3B:5B:1C:43:82:01:C1:BF:98:7A:56:87 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3DE9E628C150BF12D8200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3db7c223-37f1-367a-a002-0e12cfa2ff68.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.107.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:de:9e:62:8c:15:0b:f1:2d:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=34ec19e1-1268-4cd0-bae8-d7f9b1a75bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:1a:d5:db:61:f3:bd:02:67:08:8c:cb:c1: 81:67:ca:94:84:93:ae:82:03:ae:1c:73:e0:00:14: 65:14:e0:71:b8:00:67:3f:08:a9:fd:13:be:e7:83: c0:f3:f5:ed:a2:52:1a:01:d6:0b:f5:33:f8:f7:b7: 93:51:7c:b3:b5:f5:1c:cc:c0:4f:d4:b2:df:92:2f: 77:f2:d2:43:80:1d:17:2a:4f:08:38:41:71:d9:e0: ed:01:b7:47:4c:5a:b6:e6:c2:c8:25:11:08:a4:6a: 68:dc:fe:fe:53:6b:ac:de:e7:9a:d1:d7:73:98:4b: 27:c1:4f:14:30:18:08:95:50:74:16:99:e4:f9:e7: 8f:7b:20:f3:96:f9:4c:85:df:5a:68:fb:a0:bb:1d: 39:c0:f1:2e:31:f6:7c:f3:16:fb:77:f9:de:a9:17: 0f:f9:a0:8a:43:b1:ab:f2:9c:4a:18:c9:d4:32:b7: 73:c7:c2:46:15:9b:83:23:98:0f:59:9d:b6:89:6d: 56:64:bd:fd:0c:b1:bb:d9:a1:4b:ff:b8:0d:7f:7e: 5c:c4:35:b6:93:60:fa:c3:49:28:19:14:b6:4a:72: 2a:05:ca:7f:69:20:e9:e1:f4:43:0f:c1:57:37:a5: 0a:24:dc:c0:f4:33:77:64:33:ee:16:69:6b:dc:11: 92:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A8:9C:93:39:89:3E:36:3B:5B:1C:43:82:01:C1:BF:98:7A:56:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3db7c223-37f1-367a-a002-0e12cfa2ff68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:56:60:8e:77:5a:e9:8f:06:cc:70:71:d2:1d:da:0a:16:0d: f0:02:f6:74:a7:9b:53:d0:ff:88:aa:7e:ba:77:44:63:82:92: 9c:d4:bb:1f:09:22:99:32:e1:fb:4d:be:f6:4c:fa:51:2f:ec: 3f:7c:1a:14:ff:d0:e0:c5:9c:94:c1:45:4e:65:10:4b:73:9d: a8:d3:53:c3:02:dd:0b:38:2d:a5:b2:4f:52:ab:4b:6f:d7:46: 58:0d:fb:36:39:eb:0e:57:94:fb:e5:31:e9:c6:4f:68:dd:c0: 05:16:b3:8a:78:5b:d4:66:6e:34:14:ed:c2:65:85:6a:f4:2a: 84:2e:b5:e6:4e:23:9b:ac:45:b7:03:ae:50:64:24:02:47:54: 55:83:e6:d8:07:11:bc:ca:29:52:9d:10:d2:eb:87:1c:b4:2a: bf:1f:17:ac:00:9e:f3:16:28:15:2f:0d:d0:b2:24:d2:ef:41: f1:72:38:06:a9:80:25:33:bc:bf:8e:96:8e:0c:2c:67:eb:91: 3b:9c:2b:eb:f4:c4:9a:a2:c4:a7:5f:22:f4:f5:69:f7:37:4c: 02:66:21:0d:ee:06:91:15:13:3a:c2:61:50:40:7e:f9:5b:d4: 7f:83:22:2d:5a:56:72:65:be:43:d1:bc:dc:d9:21:f0:2c:21: 5f:70:22:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+096eYowVC/EtggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MzRlYzE5ZTEtMTI2OC00Y2QwLWJhZTgtZDdmOWIxYTc1YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1Aa1dth870CZwiMy8GBZ8qUhJOuggOuHHPg ABRlFOBxuABnPwip/RO+54PA8/XtolIaAdYL9TP497eTUXyztfUczMBP1LLfki93 8tJDgB0XKk8IOEFx2eDtAbdHTFq25sLIJREIpGpo3P7+U2us3uea0ddzmEsnwU8U MBgIlVB0Fpnk+eePeyDzlvlMhd9aaPugux05wPEuMfZ88xb7d/neqRcP+aCKQ7Gr 8pxKGMnUMrdzx8JGFZuDI5gPWZ22iW1WZL39DLG72aFL/7gNf35cxDW2k2D6w0ko GRS2SnIqBcp/aSDp4fRDD8FXN6UKJNzA9DN3ZDPuFmlr3BGSCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKonJM5iT42O1scQ4IBwb+YelaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2RiN2MyMjMtMzdmMS0z NjdhLWEwMDItMGUxMmNmYTJmZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlWYI53WumPBsxwcdId2goWDfAC9nSnm1PQ/4iqfrp3RGOCkpzUux8J Ipky4ftNvvZM+lEv7D98GhT/0ODFnJTBRU5lEEtznajTU8MC3Qs4LaWyT1KrS2/X RlgN+zY56w5XlPvlMenGT2jdwAUWs4p4W9RmbjQU7cJlhWr0KoQuteZOI5usRbcD rlBkJAJHVFWD5tgHEbzKKVKdENLrhxy0Kr8fF6wAnvMWKBUvDdCyJNLvQfFyOAap gCUzvL+Olo4MLGfrkTucK+v0xJqixKdfIvT1afc3TAJmIQ3uBpEVEzrCYVBAfvlb 1H+DIi1aVnJlvkPRvNzZIfAsIV9wIlI= -----END CERTIFICATE-----Generated at Sun Apr 6 01:12:18 2025 by rpki-client