$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f81c6b2-b1dc-36a2-9e84-be75a962123c.roa File: 4f81c6b2-b1dc-36a2-9e84-be75a962123c.roa (raw, json) Hash identifier: a1AOXSFrZsN9VZWcMAnA4u5HhC68RHJXkQnqm5yJxvA= Subject key identifier: F7:13:8A:EB:45:BA:D9:1C:0B:44:1C:CC:F6:9F:4B:8B:3A:2F:F8:F4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246FB4866A506F1DE4105C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f81c6b2-b1dc-36a2-9e84-be75a962123c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 108.39.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:fb:48:66:a5:06:f1:de:41:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=29dcd90b-906c-4f0f-8f02-39e0d27ff75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:12:3f:22:6f:d1:5f:4a:4b:6b:c8:26:f4: a5:91:13:11:14:9c:e5:a5:84:65:da:f4:aa:51:e5: 76:e3:5d:98:b3:d8:bc:f7:2e:ca:6e:12:40:50:b9: 16:ba:de:46:bd:34:36:71:ac:9a:a8:78:a1:51:51: 43:a0:fd:15:fc:e0:e4:c4:a4:32:57:d4:3d:1e:83: 24:ed:16:9e:f0:33:c3:95:9f:27:e1:d1:50:00:d4: 6f:65:da:02:57:93:eb:7f:cb:8e:91:af:6e:7a:7a: e5:1f:1e:a0:1f:cd:40:a8:69:48:ba:bf:68:16:04: a3:c2:36:7c:26:15:23:1a:c7:0c:5e:0e:5a:af:ef: de:f2:5d:74:26:1b:b1:e5:60:1e:36:71:fc:0e:da: 15:e0:56:a5:43:1f:5d:5e:55:34:d7:a4:f8:0e:40: 6c:e8:9a:58:0d:49:a8:af:e0:02:98:94:ad:85:71: 93:f8:db:d0:e7:11:2f:48:6b:dd:b1:66:9d:bf:fa: 5f:04:1f:46:4d:4b:40:a3:e5:47:ce:07:cf:56:d5: 71:55:7b:06:bf:3d:38:b8:5a:cf:47:cd:dc:00:aa: b7:35:75:83:f5:f4:7c:da:80:26:ba:49:9b:cc:27: 84:95:91:40:e8:a7:c9:fc:db:6a:7c:5e:73:e9:c5: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:13:8A:EB:45:BA:D9:1C:0B:44:1C:CC:F6:9F:4B:8B:3A:2F:F8:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f81c6b2-b1dc-36a2-9e84-be75a962123c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.39.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:73:a9:76:b9:d3:b3:47:37:65:ef:f5:7c:93:70:67:f5:1e: 30:3f:fb:c2:88:dc:ff:9b:a5:40:20:ca:da:7c:ae:9b:f3:55: a5:60:bf:48:b3:f4:1f:ca:1e:13:b1:f6:f3:17:ac:6f:5f:2b: a5:60:84:82:1a:d0:3a:5c:9a:4c:5f:af:d4:7c:bc:31:db:52: 3f:bd:8b:67:1c:60:4b:ec:13:e3:f0:20:df:e2:86:ad:b3:67: d2:a1:a1:e8:35:b8:71:fe:4c:d4:0c:ba:e0:c7:6e:d0:a4:89: 0d:55:2b:03:3c:b7:b6:67:70:02:ab:21:01:57:ca:c8:87:c9: ef:58:49:47:25:1b:3b:39:52:11:ab:43:d4:7b:47:83:14:c4: 73:ee:89:1b:81:46:65:35:67:a4:c0:c1:22:b8:cc:70:fb:e8: ab:70:29:ba:89:c6:b7:38:ed:ba:e9:13:28:c3:43:da:f8:e9: b0:ef:47:b4:80:96:d6:6b:72:8c:d0:6f:af:27:be:5b:91:40: f0:0c:8d:d9:5f:de:5a:6d:47:2f:fc:cc:a2:e4:ed:50:f3:65: 80:c0:97:d3:13:49:f7:32:0c:3d:24:6a:1c:3e:59:48:50:7a: 46:68:ae:db:34:ac:57:f4:9f:9e:12:0d:32:bb:5a:e2:19:7d: 7d:8e:23:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvtIZqUG8d5BBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MjlkY2Q5MGItOTA2Yy00ZjBmLThmMDItMzllMGQyN2ZmNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbcSPyJv0V9KS2vIJvSlkRMRFJzlpYRl2vSq UeV2412Ys9i89y7KbhJAULkWut5GvTQ2cayaqHihUVFDoP0V/ODkxKQyV9Q9HoMk 7Rae8DPDlZ8n4dFQANRvZdoCV5Prf8uOka9uenrlHx6gH81AqGlIur9oFgSjwjZ8 JhUjGscMXg5ar+/e8l10Jhux5WAeNnH8DtoV4FalQx9dXlU016T4DkBs6JpYDUmo r+ACmJSthXGT+NvQ5xEvSGvdsWadv/pfBB9GTUtAo+VHzgfPVtVxVXsGvz04uFrP R83cAKq3NXWD9fR82oAmukmbzCeElZFA6KfJ/NtqfF5z6cVTuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcTiutFutkcC0QczPafS4s6L/j0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGY4MWM2YjItYjFkYy0z NmEyLTllODQtYmU3NWE5NjIxMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlzqXa507NHN2Xv9XyTcGf1HjA/+8KI3P+bpUAgytp8rpvzVaVgv0iz 9B/KHhOx9vMXrG9fK6VghIIa0Dpcmkxfr9R8vDHbUj+9i2ccYEvsE+PwIN/ihq2z Z9Khoeg1uHH+TNQMuuDHbtCkiQ1VKwM8t7ZncAKrIQFXysiHye9YSUclGzs5UhGr Q9R7R4MUxHPuiRuBRmU1Z6TAwSK4zHD76KtwKbqJxrc47brpEyjDQ9r46bDvR7SA ltZrcozQb68nvluRQPAMjdlf3lptRy/8zKLk7VDzZYDAl9MTSfcyDD0kahw+WUhQ ekZorts0rFf0n54SDTK7WuIZfX2OIyQ= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:13 2025 by rpki-client