$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d2d2fdf-d19c-3fb7-b50f-a36179645077.roa File: 4d2d2fdf-d19c-3fb7-b50f-a36179645077.roa (raw, json) Hash identifier: +Yn0fcZw9HFMcBoan7OuoeiP5evMGcB8fbpf0aLgDx0= Subject key identifier: 40:20:32:6B:30:E8:D3:D7:C6:D5:10:87:00:94:71:BB:72:F3:F0:AD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246C6BC27186958BB438B40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d2d2fdf-d19c-3fb7-b50f-a36179645077.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 33699 IP address blocks: 65.196.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c6:bc:27:18:69:58:bb:43:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=75bbb6fe-d967-4292-803d-2ee5f9c0dcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2a:ed:f5:40:38:f4:d8:a7:98:95:18:82:86: b2:ea:b1:50:12:7a:1c:a6:fd:45:df:c4:77:17:d4: cf:00:0c:fa:8b:fd:78:25:03:15:53:88:22:b6:a8: 3d:92:5c:e3:82:ba:0b:d3:cc:ed:7c:c7:77:81:12: 09:00:f5:e6:41:99:d5:9d:b7:83:e7:4a:dd:ce:44: 49:d6:bc:7b:f4:76:3a:b7:59:98:b3:e3:d5:e1:43: d4:7e:b6:6c:3a:cb:48:f3:61:a8:11:d3:73:fc:89: 6c:e6:5d:e0:54:45:1b:90:a7:41:1d:17:a6:ab:5d: 9f:06:e5:e0:3d:aa:4a:e2:48:fd:44:ad:a3:d1:e1: c0:12:ce:74:98:97:2a:68:16:84:7c:19:23:eb:fc: 3f:18:9d:92:51:b9:f6:cc:56:ab:cd:83:7b:d0:e8: 26:bf:4e:de:00:de:4a:3d:8a:0b:5e:2a:d2:b8:78: 85:e9:63:67:b4:5f:23:f5:07:8c:ef:b6:36:9c:6a: 77:c0:14:fe:c1:d0:aa:68:2d:c6:1b:51:85:64:14: f5:78:a1:ac:47:37:ad:05:d2:5a:13:90:7e:14:74: d9:b2:e1:66:c6:07:57:1a:11:9d:17:27:2d:23:c3: 38:44:6c:37:be:c5:ac:a0:c8:5b:d4:fb:94:9e:82: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:20:32:6B:30:E8:D3:D7:C6:D5:10:87:00:94:71:BB:72:F3:F0:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d2d2fdf-d19c-3fb7-b50f-a36179645077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 65.196.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3f:57:a9:0c:5f:b3:06:ff:cc:ed:f2:b4:5c:47:6e:94:0f: bc:8a:7b:96:26:b0:11:f5:31:01:88:a4:59:28:d9:c9:1c:5f: 7a:61:2a:0f:57:86:c7:a9:fc:9c:aa:30:f3:ad:a5:2d:ad:07: 97:d5:ca:3b:92:60:8d:61:1e:04:64:91:c5:25:13:2b:8d:24: 47:fb:68:92:10:4a:d8:f1:f3:ce:f2:bf:82:b4:f7:43:df:78: 5f:95:ee:ec:19:48:25:b9:ed:6f:63:ef:6c:c9:c4:3f:1f:64: 23:3b:14:1d:f1:f3:70:a2:9f:a5:90:67:91:31:10:b6:bf:3e: 38:6d:8f:d6:15:98:ec:7a:bd:51:ce:64:1f:af:ca:9c:64:02: f2:0e:7a:e5:63:75:79:1b:c9:a1:68:0d:66:71:26:88:44:0b: 3c:a4:90:0a:aa:49:a6:93:f4:fc:a7:ca:81:d3:81:d4:21:f2: 93:ba:ce:28:a3:05:bb:94:c8:39:3b:32:87:68:2a:09:00:f5: 2e:7c:60:a8:da:41:98:bf:89:34:49:c0:21:f0:4d:34:81:89: 35:1c:71:61:5f:35:f5:cc:0b:b0:9d:27:37:eb:09:9a:60:d6: da:9a:c7:95:b9:29:e6:65:0c:a1:24:65:3d:71:92:9b:ee:a4: 39:9f:28:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsa8JxhpWLtDi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NzViYmI2ZmUtZDk2Ny00MjkyLTgwM2QtMmVlNWY5YzBkY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCrt9UA49NinmJUYgoay6rFQEnocpv1F38R3 F9TPAAz6i/14JQMVU4gitqg9klzjgroL08ztfMd3gRIJAPXmQZnVnbeD50rdzkRJ 1rx79HY6t1mYs+PV4UPUfrZsOstI82GoEdNz/Ils5l3gVEUbkKdBHRemq12fBuXg PapK4kj9RK2j0eHAEs50mJcqaBaEfBkj6/w/GJ2SUbn2zFarzYN70Ogmv07eAN5K PYoLXirSuHiF6WNntF8j9QeM77Y2nGp3wBT+wdCqaC3GG1GFZBT1eKGsRzetBdJa E5B+FHTZsuFmxgdXGhGdFyctI8M4RGw3vsWsoMhb1PuUnoIp3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAgMmsw6NPXxtUQhwCUcbty8/CtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGQyZDJmZGYtZDE5Yy0z ZmI3LWI1MGYtYTM2MTc5NjQ1MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQcQHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE/V6kMX7MG/8zt8rRcR26UD7yKe5YmsBH1MQGIpFko2ckcX3phKg9X hsep/JyqMPOtpS2tB5fVyjuSYI1hHgRkkcUlEyuNJEf7aJIQStjx887yv4K090Pf eF+V7uwZSCW57W9j72zJxD8fZCM7FB3x83Cin6WQZ5ExELa/Pjhtj9YVmOx6vVHO ZB+vypxkAvIOeuVjdXkbyaFoDWZxJohECzykkAqqSaaT9PynyoHTgdQh8pO6ziij BbuUyDk7ModoKgkA9S58YKjaQZi/iTRJwCHwTTSBiTUccWFfNfXMC7CdJzfrCZpg 1tqax5W5KeZlDKEkZT1xkpvupDmfKGg= -----END CERTIFICATE-----Generated at Sat Apr 5 23:18:56 2025 by rpki-client