$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/436b970c-6176-36fc-9f8c-5b27bf3732f5.roa File: 436b970c-6176-36fc-9f8c-5b27bf3732f5.roa (raw, json) Hash identifier: hPQTf7tBfh0Wj6JoA3w6IUGvxI3Hb+zLgv9S/0LyePo= Subject key identifier: 51:78:85:6E:34:3E:96:22:1F:EC:46:BD:AB:8C:75:78:79:18:F4:23 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246CEB30864EBD941E06B00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/436b970c-6176-36fc-9f8c-5b27bf3732f5.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 71.245.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ce:b3:08:64:eb:d9:41:e0:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=c0b7d44e-7e44-4425-bdd5-54d3473b1179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:23:eb:6a:10:d3:31:41:13:10:c7:99:d0:50: c2:8a:43:50:68:7d:c7:63:ef:d0:9b:46:bc:b7:56: 36:b5:2b:03:7f:f9:9c:93:da:0f:9c:25:4e:22:46: 8f:d8:5f:fd:85:fb:54:aa:e9:4b:69:b6:de:23:e8: 24:a4:52:03:71:b6:6b:7c:d2:c5:12:32:51:d9:9f: ff:78:66:98:ea:1a:82:b5:db:8a:87:c8:7c:02:e7: 53:5b:9d:9f:50:60:8d:91:01:e6:e2:de:3c:ce:59: d5:3e:35:f9:2f:15:0a:57:39:57:65:f5:23:a9:e7: 49:16:fb:1d:da:30:37:11:27:14:bb:9e:f6:62:7d: 30:bc:77:69:c2:6c:19:73:9a:db:30:d8:92:b8:c0: f1:0d:9b:9d:ad:ad:70:07:b6:09:f2:70:f1:15:a3: 12:c6:16:37:91:03:70:cd:21:79:a6:60:61:fe:b5: 92:37:6a:78:72:d0:17:ef:5d:07:48:b3:31:3d:b7: 56:a4:af:11:72:0b:c6:ba:1e:02:1a:56:28:6c:fa: 55:a4:6f:72:e7:f9:d8:5a:4f:ee:2a:f5:c9:45:6c: 61:f3:b1:14:79:a3:8c:81:38:0b:44:51:4a:f7:5e: f3:ad:64:db:dc:f7:e2:40:dd:de:d9:04:4e:d7:28: 15:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:78:85:6E:34:3E:96:22:1F:EC:46:BD:AB:8C:75:78:79:18:F4:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/436b970c-6176-36fc-9f8c-5b27bf3732f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.245.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:06:c6:bb:13:1f:68:9c:ab:4f:65:13:20:bc:0e:50:88:c6: 2c:f7:e0:1c:3e:77:55:24:5b:30:11:a9:e3:b2:f1:e1:cd:d4: 4f:15:93:75:53:f3:dc:f8:f2:2e:9c:34:a0:27:7f:75:1b:2a: 8b:2d:29:fb:00:53:8d:61:9b:38:79:db:20:d9:f0:d4:70:70: 0f:31:62:05:fa:3f:9a:1f:f0:8f:d1:1f:86:98:b8:65:02:89: e9:72:71:4e:a9:b8:c8:f2:ab:4d:22:ad:b0:00:2e:8f:25:7c: 6c:82:7a:94:93:88:b4:74:ad:cc:20:a1:9c:07:ae:9a:91:90: 64:da:16:af:4b:42:2f:e4:da:df:ed:7e:4a:c4:b0:df:40:96: 71:e1:92:b4:07:12:fc:65:9d:c5:4c:9c:d6:3c:46:8e:91:b3: 72:9d:ad:a5:e9:bc:e5:3b:50:42:75:3a:e1:b0:8a:9f:6f:62: 76:ad:d2:41:14:dc:3d:79:08:54:5b:42:eb:99:72:2e:32:b0: e0:b2:7f:40:49:34:5d:63:69:bc:3e:b9:0a:78:52:8d:b0:56: f6:17:f9:40:db:f2:48:a9:97:4c:6d:ed:28:6b:c8:16:76:04: 56:51:bd:d5:d9:28:dd:54:43:6c:ea:1c:a6:a3:ef:89:74:fd: 53:2b:85:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRs6zCGTr2UHgawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YzBiN2Q0NGUtN2U0NC00NDI1LWJkZDUtNTRkMzQ3M2IxMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyPrahDTMUETEMeZ0FDCikNQaH3HY+/Qm0a8 t1Y2tSsDf/mck9oPnCVOIkaP2F/9hftUqulLabbeI+gkpFIDcbZrfNLFEjJR2Z// eGaY6hqCtduKh8h8AudTW52fUGCNkQHm4t48zlnVPjX5LxUKVzlXZfUjqedJFvsd 2jA3EScUu572Yn0wvHdpwmwZc5rbMNiSuMDxDZudra1wB7YJ8nDxFaMSxhY3kQNw zSF5pmBh/rWSN2p4ctAX710HSLMxPbdWpK8RcgvGuh4CGlYobPpVpG9y5/nYWk/u KvXJRWxh87EUeaOMgTgLRFFK917zrWTb3PfiQN3e2QRO1ygV1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFF4hW40PpYiH+xGvauMdXh5GPQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDM2Yjk3MGMtNjE3Ni0z NmZjLTlmOGMtNWIyN2JmMzczMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR/WAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEGxrsTH2icq09lEyC8DlCIxiz34Bw+d1UkWzARqeOy8eHN1E8Vk3VT 89z48i6cNKAnf3UbKostKfsAU41hmzh52yDZ8NRwcA8xYgX6P5of8I/RH4aYuGUC ielycU6puMjyq00irbAALo8lfGyCepSTiLR0rcwgoZwHrpqRkGTaFq9LQi/k2t/t fkrEsN9AlnHhkrQHEvxlncVMnNY8Ro6Rs3KdraXpvOU7UEJ1OuGwip9vYnat0kEU 3D15CFRbQuuZci4ysOCyf0BJNF1jabw+uQp4Uo2wVvYX+UDb8kipl0xt7ShryBZ2 BFZRvdXZKN1UQ2zqHKaj74l0/VMrhZU= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:25 2025 by rpki-client