$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42b80337-5791-34bf-a641-a95f764a8c3e.roa File: 42b80337-5791-34bf-a641-a95f764a8c3e.roa (raw, json) Hash identifier: 5xk+zTwBBXMoMyzIMFBcc7J0KZfXM9HOctCuyXFw9hI= Subject key identifier: 31:70:56:88:A2:F1:B8:2A:01:45:CA:A5:5C:BD:C1:EC:2A:07:E1:2F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3E02BC0F148EFB8682D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42b80337-5791-34bf-a641-a95f764a8c3e.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.106.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:e0:2b:c0:f1:48:ef:b8:68:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=b9af9d8e-7c3c-473d-959d-bb18a9bb3762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:da:24:62:42:e8:51:d2:6e:e3:59:2f:ed: c5:e7:9d:a4:68:a2:2b:f5:63:98:a5:48:7d:0e:bb: c9:21:11:76:db:72:94:20:ec:61:61:40:65:eb:29: 60:b9:e5:55:bc:0a:c7:95:d0:26:16:ff:2e:75:77: 66:a6:42:a3:ed:63:aa:62:3b:b8:69:57:45:ef:0d: f0:10:83:f1:b3:26:e1:26:f1:45:70:5f:a6:de:94: 7a:86:c2:69:24:13:d0:77:9c:42:f1:60:9b:ba:d4: 40:7c:3d:9a:39:b4:00:db:6b:70:fd:02:29:fb:69: 5e:48:6a:af:3c:aa:44:ae:c9:6c:f0:73:ec:f8:45: 6a:c5:74:4b:9a:25:17:90:db:37:d5:e6:b3:b6:1c: 93:48:a1:01:3a:fc:98:d2:50:e9:c9:7d:7c:2f:e7: aa:a2:5b:f7:26:b2:a7:67:da:f2:80:7c:3e:15:93: f3:d5:bd:f5:d8:de:02:50:37:3c:4f:1d:85:39:56: 20:25:28:c2:56:94:40:ea:73:fb:f5:7f:f6:6e:64: 68:06:15:e5:d4:09:c9:40:bc:cb:29:6a:2f:e1:ae: 97:68:c4:52:46:73:ca:83:06:0b:85:4c:16:60:29: 8d:56:81:4b:2b:e2:c7:0b:0f:e9:0e:05:e7:4c:52: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:70:56:88:A2:F1:B8:2A:01:45:CA:A5:5C:BD:C1:EC:2A:07:E1:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42b80337-5791-34bf-a641-a95f764a8c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.106.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7a:37:99:5d:66:6c:74:6a:7d:4d:d3:39:d1:e2:1b:44:29: 91:1c:9e:e7:bd:d1:d0:f9:f7:ff:b6:4c:5f:f8:19:98:9c:ed: bc:57:8c:36:cf:2a:49:61:00:8e:b9:93:97:19:3c:89:2a:59: 27:72:f1:ea:8b:a1:13:ee:93:48:ce:cc:b6:08:99:a0:fa:39: 65:aa:bf:ce:b9:9a:a3:26:da:82:4e:47:c3:ed:2e:bc:f2:17: 4b:ea:7b:22:c4:58:89:bc:d2:ad:39:e0:29:92:3b:d0:70:16: d8:4d:7a:01:b5:3a:35:a1:f0:fd:4a:8a:cb:f0:8d:68:11:2b: d5:03:fc:de:6d:63:4a:71:cf:05:59:aa:e9:3b:55:61:b1:f9: 7f:d4:63:74:a5:93:50:31:a6:fc:a5:01:75:6b:19:b4:c8:70: f2:d3:19:ed:e7:77:0a:a4:48:4f:c3:69:56:d1:24:8e:e3:4b: 82:84:04:29:01:20:b9:50:8e:03:8e:8f:9f:00:d3:aa:8f:8c: 13:87:68:81:50:ba:03:66:42:02:ed:7d:07:fa:43:bd:ec:96: a8:a6:cb:46:dd:1d:a9:6a:37:ac:0d:c5:75:fa:28:22:f2:c0: 96:9f:d3:5c:5b:22:61:a4:2c:17:9b:f2:c7:3a:24:12:75:dd: d0:0d:81:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+ArwPFI77hoLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk YjlhZjlkOGUtN2MzYy00NzNkLTk1OWQtYmIxOGE5YmIzNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhPaJGJC6FHSbuNZL+3F552kaKIr9WOYpUh9 DrvJIRF223KUIOxhYUBl6ylgueVVvArHldAmFv8udXdmpkKj7WOqYju4aVdF7w3w EIPxsybhJvFFcF+m3pR6hsJpJBPQd5xC8WCbutRAfD2aObQA22tw/QIp+2leSGqv PKpErsls8HPs+EVqxXRLmiUXkNs31eazthyTSKEBOvyY0lDpyX18L+eqolv3JrKn Z9rygHw+FZPz1b312N4CUDc8Tx2FOVYgJSjCVpRA6nP79X/2bmRoBhXl1AnJQLzL KWov4a6XaMRSRnPKgwYLhUwWYCmNVoFLK+LHCw/pDgXnTFL6twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFwVoii8bgqAUXKpVy9wewqB+EvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDJiODAzMzctNTc5MS0z NGJmLWE2NDEtYTk1Zjc2NGE4YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB6N5ldZmx0an1N0znR4htEKZEcnue90dD59/+2TF/4GZic7bxXjDbP KklhAI65k5cZPIkqWSdy8eqLoRPuk0jOzLYImaD6OWWqv865mqMm2oJOR8PtLrzy F0vqeyLEWIm80q054CmSO9BwFthNegG1OjWh8P1KisvwjWgRK9UD/N5tY0pxzwVZ quk7VWGx+X/UY3Slk1AxpvylAXVrGbTIcPLTGe3ndwqkSE/DaVbRJI7jS4KEBCkB ILlQjgOOj58A06qPjBOHaIFQugNmQgLtfQf6Q73slqimy0bdHalqN6wNxXX6KCLy wJaf01xbImGkLBeb8sc6JBJ13dANgUs= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:23 2025 by rpki-client