$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5509b422-a722-3749-85b4-43ade592c8dc.roa File: 5509b422-a722-3749-85b4-43ade592c8dc.roa (raw, json) Hash identifier: vpNyCvtnaEdjCgUO5kD5TjIUZORxPygzf7OBoHA5cFM= Subject key identifier: C7:B9:B6:DD:9E:D2:8F:2C:4D:22:AF:26:7F:91:8C:6F:80:21:0E:D2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3E713852F22C659326380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5509b422-a722-3749-85b4-43ade592c8dc.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.97.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:e7:13:85:2f:22:c6:59:32:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=0e64ce51-806f-4bcf-abbc-37f45bc52c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:25:be:be:dd:62:d1:ed:27:de:67:7e:c5: b1:80:09:45:37:32:11:24:4e:93:7f:ff:3f:f5:e5: 5c:f7:8e:a6:46:f3:26:30:38:be:e4:3b:b1:97:06: 5b:ba:fd:54:d0:b8:e6:6b:ba:38:f8:5d:49:8e:2b: d6:50:58:ec:c5:a4:03:08:6b:5f:69:75:47:fe:70: be:ce:bd:2f:79:5b:c1:1c:30:1e:9d:98:01:ea:fd: cf:31:5c:c4:8a:32:f0:37:d1:34:59:4f:e0:59:75: 9d:63:14:8b:94:2b:40:b5:4a:04:2c:ab:b2:ff:b8: 47:0f:a4:a2:cd:ab:6c:66:fb:8f:41:23:e3:f4:6f: 3f:a3:95:24:b4:c2:c9:d2:54:d1:f7:04:75:e2:94: d2:43:52:a7:3c:7c:c5:fc:39:99:70:ea:68:f0:fe: 87:95:1f:65:0a:45:84:bd:2f:8c:3d:3c:05:d7:5e: b6:eb:50:c7:80:32:32:62:33:73:d0:a9:24:83:1d: 9d:24:7f:3f:1a:a3:b2:42:1f:6c:ec:43:09:e3:21: fd:b5:32:e2:5c:75:98:01:87:71:8a:48:62:6e:83: f8:c5:48:2d:24:1c:d1:5f:f8:c1:2a:85:1f:05:a4: c1:67:8f:81:c2:5d:b8:84:a4:ab:bc:c1:85:1d:a4: 9d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B9:B6:DD:9E:D2:8F:2C:4D:22:AF:26:7F:91:8C:6F:80:21:0E:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5509b422-a722-3749-85b4-43ade592c8dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b5:ed:16:0e:a1:3c:88:2b:32:22:68:ec:e5:78:12:65:4e: 01:78:ec:b0:95:7a:59:82:cc:84:5b:00:4c:b3:dd:ea:82:89: 44:d3:29:e4:55:50:f7:fd:dc:91:ae:ee:21:6d:98:24:dc:a4: cb:fb:d6:3f:16:2f:92:3c:48:60:54:8c:7e:bf:9a:00:57:ae: 61:30:65:17:97:3e:76:61:5d:73:9f:e1:7b:22:43:d6:4e:61: 62:55:f4:cf:d8:a6:dc:34:67:e7:dc:46:f3:19:69:eb:ff:0c: e3:83:4a:e5:4b:e6:d1:a8:71:99:6e:3d:33:eb:6f:e0:95:a7: af:c7:a6:c3:de:d5:ca:30:5b:b1:24:89:24:4e:41:b8:d4:6a: 66:9f:6e:24:90:9b:99:50:a5:92:ae:88:d6:39:c3:e8:d2:c1: aa:76:f9:1c:f6:82:1b:2f:5c:82:40:8f:67:08:a7:02:8f:e2: 4c:7d:a9:8c:02:68:8d:86:6a:30:f3:ee:ad:d2:d7:bf:20:07: f5:a7:b6:19:6a:c4:60:47:96:fa:81:e1:ab:30:74:b4:73:25: 88:f8:45:72:1b:09:bc:70:07:a0:16:23:d5:c9:74:eb:5c:a8: e2:b8:dc:31:fb:da:38:a6:17:34:af:eb:e2:ab:a1:58:a8:a5: c9:55:cc:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+cThS8ixlkyY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MGU2NGNlNTEtODA2Zi00YmNmLWFiYmMtMzdmNDViYzUyYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstolvr7dYtHtJ95nfsWxgAlFNzIRJE6Tf/8/ 9eVc946mRvMmMDi+5DuxlwZbuv1U0Ljma7o4+F1JjivWUFjsxaQDCGtfaXVH/nC+ zr0veVvBHDAenZgB6v3PMVzEijLwN9E0WU/gWXWdYxSLlCtAtUoELKuy/7hHD6Si zatsZvuPQSPj9G8/o5UktMLJ0lTR9wR14pTSQ1KnPHzF/DmZcOpo8P6HlR9lCkWE vS+MPTwF116261DHgDIyYjNz0Kkkgx2dJH8/GqOyQh9s7EMJ4yH9tTLiXHWYAYdx ikhiboP4xUgtJBzRX/jBKoUfBaTBZ4+Bwl24hKSrvMGFHaSdTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMe5tt2e0o8sTSKvJn+RjG+AIQ7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTUwOWI0MjItYTcyMi0z NzQ5LTg1YjQtNDNhZGU1OTJjOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO17RYOoTyIKzIiaOzleBJlTgF47LCVelmCzIRbAEyz3eqCiUTTKeRV UPf93JGu7iFtmCTcpMv71j8WL5I8SGBUjH6/mgBXrmEwZReXPnZhXXOf4XsiQ9ZO YWJV9M/Yptw0Z+fcRvMZaev/DOODSuVL5tGocZluPTPrb+CVp6/HpsPe1cowW7Ek iSROQbjUamafbiSQm5lQpZKuiNY5w+jSwap2+Rz2ghsvXIJAj2cIpwKP4kx9qYwC aI2GajDz7q3S178gB/WnthlqxGBHlvqB4aswdLRzJYj4RXIbCbxwB6AWI9XJdOtc qOK43DH72jimFzSv6+KroViopclVzKc= -----END CERTIFICATE-----Generated at Sat Apr 5 21:54:39 2025 by rpki-client