$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9bea11-94fa-3797-9ff3-ac30a32fa6d7.roa File: 3e9bea11-94fa-3797-9ff3-ac30a32fa6d7.roa (raw, json) Hash identifier: bVD9Q6N1XGrp/CAyc0HYDFNdd+i9ExH1/xaLAoop43s= Subject key identifier: 02:E8:A5:4B:94:D0:84:FC:C3:94:F4:BE:54:F8:C0:6A:93:AE:68:4D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C24762350A9F5229498D700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9bea11-94fa-3797-9ff3-ac30a32fa6d7.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 67.92.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:76:23:50:a9:f5:22:94:98:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=30f7a936-1d59-4f66-b5d8-834cc4798937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:52:6a:d2:d0:fb:f7:be:74:b9:ee:51:41:bd: 3c:ec:2a:b2:a8:84:fb:38:ef:ab:33:e4:08:05:33: f6:12:9c:e7:9a:32:ed:80:69:50:55:ab:af:44:68: dc:fa:06:5b:38:09:31:5d:f2:46:1a:48:b2:e3:7c: bb:a6:da:d4:2e:35:f8:bd:19:70:93:0f:d6:96:c1: f9:a8:3c:ca:c4:2a:6d:30:43:a9:a7:63:c7:81:2b: 4a:2d:2b:03:ef:00:5a:4a:21:09:73:be:bf:d3:08: 88:70:3f:e3:51:fc:d0:93:91:f4:55:30:b3:cf:ba: ec:cb:96:65:5b:90:26:c1:f6:dd:b9:b0:e3:c9:01: 5e:32:bc:30:81:0b:ce:99:b0:a7:5f:c9:c0:9d:45: b8:0b:91:2b:f7:6a:b2:4c:36:e7:45:a5:62:61:1f: bc:9d:18:5a:a4:32:6c:a7:d6:1f:3b:e4:9e:77:eb: 2b:c4:d0:e9:c0:74:19:8d:40:16:3f:8a:65:99:93: bb:73:53:f7:d1:9a:be:89:50:17:35:3c:21:da:1d: 05:da:80:59:1d:6a:4a:bc:13:23:e3:7c:e7:c8:b2: 18:e5:b9:b9:36:2a:ce:e9:a0:d6:27:84:27:38:fd: 48:d1:9c:95:bb:85:51:b4:e2:b1:70:84:ea:6c:b0: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E8:A5:4B:94:D0:84:FC:C3:94:F4:BE:54:F8:C0:6A:93:AE:68:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9bea11-94fa-3797-9ff3-ac30a32fa6d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 67.92.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:cf:16:b8:2e:44:55:c2:1f:3d:88:48:66:3a:b6:5b:c7:87: 93:8d:98:6b:be:9c:cc:9a:36:b9:f9:7a:41:62:21:40:6d:6d: 19:09:48:49:39:8b:3f:aa:f7:62:29:d2:1d:02:1a:6f:05:d2: 84:d2:76:c9:ec:ee:77:91:06:25:ca:3f:ab:9a:31:37:0e:e0: 76:94:2b:00:47:70:fa:82:e5:0d:55:87:c8:42:c8:b0:e1:02: 89:f6:15:cf:ea:f1:3b:2e:e0:de:c8:22:36:e7:79:fc:43:d9: f6:a0:9e:a5:db:fb:b7:76:b3:7a:34:dd:ac:54:17:21:f9:14: 57:bb:95:df:be:c6:93:e5:aa:56:0d:ec:26:5c:e6:4e:a2:c0: 87:da:df:f7:10:1d:3c:75:72:6e:a6:7b:56:fc:99:24:66:b6: e7:16:72:0d:d8:73:ec:af:18:ca:92:fd:9a:0f:41:1d:ff:cc: 6d:0b:60:63:08:8a:81:3f:07:ec:c4:a0:91:df:62:52:5f:72: b3:27:ac:f1:62:fb:34:9f:4b:69:0e:c6:d0:04:5d:d5:be:20: 8d:44:bb:d0:91:4e:0c:52:65:03:41:97:f1:61:dd:e6:1a:9c: 58:08:60:c6:d5:46:f1:3d:ae:c5:2d:6e:76:c5:cd:5d:ac:6c: a4:4a:07:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJHYjUKn1IpSY1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MzBmN2E5MzYtMWQ1OS00ZjY2LWI1ZDgtODM0Y2M0Nzk4OTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlJq0tD79750ue5RQb087CqyqIT7OO+rM+QI BTP2EpznmjLtgGlQVauvRGjc+gZbOAkxXfJGGkiy43y7ptrULjX4vRlwkw/WlsH5 qDzKxCptMEOpp2PHgStKLSsD7wBaSiEJc76/0wiIcD/jUfzQk5H0VTCzz7rsy5Zl W5AmwfbdubDjyQFeMrwwgQvOmbCnX8nAnUW4C5Er92qyTDbnRaViYR+8nRhapDJs p9YfO+Sed+srxNDpwHQZjUAWP4plmZO7c1P30Zq+iVAXNTwh2h0F2oBZHWpKvBMj 43znyLIY5bm5NirO6aDWJ4QnOP1I0ZyVu4VRtOKxcITqbLASVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALopUuU0IT8w5T0vlT4wGqTrmhNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2U5YmVhMTEtOTRmYS0z Nzk3LTlmZjMtYWMzMGEzMmZhNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ1wnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3PFrguRFXCHz2ISGY6tlvHh5ONmGu+nMyaNrn5ekFiIUBtbRkJSEk5 iz+q92Ip0h0CGm8F0oTSdsns7neRBiXKP6uaMTcO4HaUKwBHcPqC5Q1Vh8hCyLDh Aon2Fc/q8Tsu4N7IIjbnefxD2fagnqXb+7d2s3o03axUFyH5FFe7ld++xpPlqlYN 7CZc5k6iwIfa3/cQHTx1cm6me1b8mSRmtucWcg3Yc+yvGMqS/ZoPQR3/zG0LYGMI ioE/B+zEoJHfYlJfcrMnrPFi+zSfS2kOxtAEXdW+II1Eu9CRTgxSZQNBl/Fh3eYa nFgIYMbVRvE9rsUtbnbFzV2sbKRKB2c= -----END CERTIFICATE-----Generated at Sat Apr 5 23:22:30 2025 by rpki-client