$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c829838-1482-3a20-82ea-a9981a23fcae.roa File: 6c829838-1482-3a20-82ea-a9981a23fcae.roa (raw, json) Hash identifier: VtlBi29qCWHBYPa4sEPNnWTCCTD5S76m0KMJXDNhanA= Subject key identifier: 4A:3F:46:68:B9:5E:72:41:A2:00:D9:FC:2C:69:B7:8F:AE:12:E5:08 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F63A6F03D7BEF58E0100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c829838-1482-3a20-82ea-a9981a23fcae.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 70.21.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f6:3a:6f:03:d7:be:f5:8e:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=662b031a-632b-49b4-9833-037c6c1e150b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4e:89:2c:71:48:f4:d5:66:29:87:40:2c:a9: 80:bd:5a:53:17:c1:c0:09:9d:87:0b:1a:fd:09:d3: a4:11:f8:4b:7f:2d:61:11:c9:91:65:34:5d:42:ad: 58:8b:64:09:85:04:b2:e2:17:16:36:82:62:48:6f: ec:4d:d7:b6:24:84:2e:b7:7c:57:22:66:d2:44:83: cc:00:ab:62:e4:37:00:56:1a:5b:f9:3a:95:48:c8: cf:a6:6e:80:1e:d3:50:39:7b:10:41:ab:1d:bb:0f: d8:d6:04:1e:6c:08:b1:db:35:11:25:8e:e6:13:69: 9b:01:a9:ad:ce:03:78:d0:b2:dd:2e:8e:5f:c1:36: 37:cd:0f:ba:14:0a:e6:2b:eb:db:8a:0a:60:11:98: 93:fe:ab:f3:86:a0:20:39:af:9c:c7:ba:1c:f0:1c: 4e:20:bd:c2:5a:46:a8:d7:5c:ff:56:4c:91:a6:68: 79:38:f6:69:1b:ee:73:0f:ce:eb:15:e3:a3:28:aa: 60:94:83:6e:3a:f9:2e:0b:5a:5b:20:64:28:f9:58: f6:11:7e:05:90:17:f6:7e:03:97:4a:83:07:ed:00: 1a:be:5c:92:a1:52:a0:33:d9:a7:f9:fc:35:58:17: c0:cc:4d:3e:3b:a8:61:ce:fd:f9:4a:0c:06:04:73: f1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3F:46:68:B9:5E:72:41:A2:00:D9:FC:2C:69:B7:8F:AE:12:E5:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c829838-1482-3a20-82ea-a9981a23fcae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.21.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b6:c9:99:a3:cf:24:fe:a2:37:c9:28:60:88:6a:b0:38:fc: 39:bb:0d:61:6a:35:0f:15:6e:22:72:c0:17:e8:05:46:93:f1: 8f:72:37:32:cf:14:e2:12:02:85:9d:93:41:6f:64:76:b5:c6: 9d:85:cb:07:bf:13:55:f6:40:73:41:da:4e:4f:14:94:62:a2: 83:aa:da:19:3b:82:11:3e:ae:38:25:54:04:65:be:7f:09:a4: 76:06:a3:81:89:12:b3:cd:6b:ed:81:f9:4d:d8:23:bd:05:dc: ce:7e:09:16:04:ea:ba:46:fa:98:b8:05:09:86:71:ae:0b:50: 90:0f:0f:01:38:cc:39:b6:b7:d6:0d:d6:2b:ca:24:32:f1:d6: 74:8e:ab:58:e8:66:99:b7:39:4d:3f:7c:7b:c3:06:f4:d1:16: 54:d5:d5:7a:f5:21:60:a2:5e:04:26:de:8a:1b:d6:27:03:cd: 9a:42:52:8e:a5:f5:47:75:5f:48:f5:f4:f4:3f:16:ea:89:ef: 67:4a:2f:e5:0a:b1:34:da:21:32:8a:60:d7:e3:e6:3a:04:60: eb:75:85:3e:cd:43:1d:ec:c0:57:91:d2:7e:aa:0c:5b:0a:c4: b0:aa:c9:d3:83:fa:66:fa:d4:6d:ef:fa:ed:a2:07:3c:52:ac: b8:a2:57:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvY6bwPXvvWOAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NjYyYjAzMWEtNjMyYi00OWI0LTk4MzMtMDM3YzZjMWUxNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU6JLHFI9NVmKYdALKmAvVpTF8HACZ2HCxr9 CdOkEfhLfy1hEcmRZTRdQq1Yi2QJhQSy4hcWNoJiSG/sTde2JIQut3xXImbSRIPM AKti5DcAVhpb+TqVSMjPpm6AHtNQOXsQQasduw/Y1gQebAix2zURJY7mE2mbAamt zgN40LLdLo5fwTY3zQ+6FArmK+vbigpgEZiT/qvzhqAgOa+cx7oc8BxOIL3CWkao 11z/VkyRpmh5OPZpG+5zD87rFeOjKKpglINuOvkuC1pbIGQo+Vj2EX4FkBf2fgOX SoMH7QAavlySoVKgM9mn+fw1WBfAzE0+O6hhzv35SgwGBHPxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo/Rmi5XnJBogDZ/Cxpt4+uEuUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmM4Mjk4MzgtMTQ4Mi0z YTIwLTgyZWEtYTk5ODFhMjNmY2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi2yZmjzyT+ojfJKGCIarA4/Dm7DWFqNQ8VbiJywBfoBUaT8Y9yNzLP FOISAoWdk0FvZHa1xp2Fywe/E1X2QHNB2k5PFJRiooOq2hk7ghE+rjglVARlvn8J pHYGo4GJErPNa+2B+U3YI70F3M5+CRYE6rpG+pi4BQmGca4LUJAPDwE4zDm2t9YN 1ivKJDLx1nSOq1joZpm3OU0/fHvDBvTRFlTV1Xr1IWCiXgQm3oob1icDzZpCUo6l 9Ud1X0j19PQ/FuqJ72dKL+UKsTTaITKKYNfj5joEYOt1hT7NQx3swFeR0n6qDFsK xLCqydOD+mb61G3v+u2iBzxSrLiiVwE= -----END CERTIFICATE-----Generated at Thu Apr 10 06:57:18 2025 by rpki-client