$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/759e20b9-7587-30a9-988b-afbfaaab852a.roa File: 759e20b9-7587-30a9-988b-afbfaaab852a.roa (raw, json) Hash identifier: gf9c+FA8QjwdOFq1zw/QLUHcBSnzS685+bsMJOcGCf4= Subject key identifier: F7:C0:69:CE:06:AE:82:82:0D:A8:AF:73:8D:D9:33:79:EE:32:FD:A1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3E568E59E267D930F1E40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/759e20b9-7587-30a9-988b-afbfaaab852a.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.108.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:e5:68:e5:9e:26:7d:93:0f:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=39dd29d6-39cc-4e6a-8018-44b47b959bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b9:01:f9:40:da:e5:45:32:66:54:54:00:34: 16:8c:f0:5f:05:fc:51:9e:00:63:d9:3c:4d:8c:7c: 2d:61:85:64:ac:a5:94:40:e9:25:3e:18:c2:41:00: 16:09:16:e6:a0:a2:a8:2f:31:13:a9:2f:4b:8d:ae: 31:e8:88:25:af:7a:e1:48:c0:0a:a4:d6:68:b9:d8: 0e:2e:f7:7e:19:23:13:03:20:f0:a7:11:b2:f5:6a: ae:86:7e:af:52:44:db:01:b9:b6:6f:ee:3b:b7:47: 52:92:ee:0f:e1:45:0a:d7:07:dc:68:b6:7b:ca:7e: 6d:44:64:08:64:b4:58:c6:a0:54:0f:27:0b:a6:88: 5a:50:33:7b:1b:59:4f:56:77:10:b4:75:fd:82:15: 63:00:ac:96:30:6e:07:81:ae:4f:4c:5e:c3:6c:89: ef:28:d5:48:27:98:64:d0:99:8c:58:89:1a:15:2f: c9:d6:62:bc:89:56:b7:66:80:7c:5f:2d:e1:aa:69: c5:9f:37:fe:84:68:b4:f3:59:9c:c5:07:ed:00:2a: 0a:ed:bc:28:a3:24:cf:47:42:8d:36:c2:b8:1b:28: 1b:c0:aa:5c:a1:8d:7f:29:59:ef:63:8c:0b:33:79: 8c:af:45:9d:50:79:0d:db:fe:10:63:03:bb:f5:ba: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C0:69:CE:06:AE:82:82:0D:A8:AF:73:8D:D9:33:79:EE:32:FD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/759e20b9-7587-30a9-988b-afbfaaab852a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:f7:16:40:4d:b1:84:5b:6c:b5:97:fd:75:9f:e3:80:12:39: 40:98:cd:26:d6:eb:35:0e:7d:4e:12:41:29:91:c6:b6:f4:d3: 16:04:f2:b8:e6:9c:23:e8:6f:01:1f:ee:82:12:40:52:89:16: d9:0e:d0:46:a7:90:bd:86:70:9d:cb:35:d3:b2:d6:02:18:b2: 0f:81:c9:fb:ae:f2:ce:46:62:27:36:57:5d:7a:44:10:00:4b: b0:eb:02:f9:95:61:b2:e3:70:fe:1a:28:41:c1:c1:51:12:99: b5:74:51:ac:38:83:0a:c2:bd:c2:58:0c:a4:dd:e8:c4:a3:7c: 51:7f:20:44:83:27:70:7d:20:e8:ef:29:55:77:3f:43:8a:82: b6:f5:b1:83:e2:38:bc:6f:e7:eb:fd:35:22:ab:3c:f9:2c:09: 09:e9:64:2a:b0:17:78:e4:14:f7:bf:63:27:7e:cc:d8:a5:bf: 70:ae:42:37:f5:ac:6c:ea:60:60:fe:22:08:64:f0:69:ab:09: 17:e6:f7:6d:e3:e9:b2:47:a3:c6:f7:bb:d4:db:98:b1:f5:c3: 5e:dc:ec:cc:3b:93:49:d2:41:57:32:19:f0:56:64:69:a0:5d: f6:fc:4a:40:57:84:0d:ca:d3:3b:d1:01:1d:e6:00:11:64:dd: 8a:e0:df:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+Vo5Z4mfZMPHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MzlkZDI5ZDYtMzljYy00ZTZhLTgwMTgtNDRiNDdiOTU5YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLkB+UDa5UUyZlRUADQWjPBfBfxRngBj2TxN jHwtYYVkrKWUQOklPhjCQQAWCRbmoKKoLzETqS9Lja4x6Iglr3rhSMAKpNZoudgO Lvd+GSMTAyDwpxGy9Wquhn6vUkTbAbm2b+47t0dSku4P4UUK1wfcaLZ7yn5tRGQI ZLRYxqBUDycLpohaUDN7G1lPVncQtHX9ghVjAKyWMG4Hga5PTF7DbInvKNVIJ5hk 0JmMWIkaFS/J1mK8iVa3ZoB8Xy3hqmnFnzf+hGi081mcxQftACoK7bwooyTPR0KN NsK4GygbwKpcoY1/KVnvY4wLM3mMr0WdUHkN2/4QYwO79bqcVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfAac4GroKCDaivc43ZM3nuMv2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzU5ZTIwYjktNzU4Ny0z MGE5LTk4OGItYWZiZmFhYWI4NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASGysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALP3FkBNsYRbbLWX/XWf44ASOUCYzSbW6zUOfU4SQSmRxrb00xYE8rjm nCPobwEf7oISQFKJFtkO0EankL2GcJ3LNdOy1gIYsg+Byfuu8s5GYic2V116RBAA S7DrAvmVYbLjcP4aKEHBwVESmbV0Uaw4gwrCvcJYDKTd6MSjfFF/IESDJ3B9IOjv KVV3P0OKgrb1sYPiOLxv5+v9NSKrPPksCQnpZCqwF3jkFPe/Yyd+zNilv3CuQjf1 rGzqYGD+Ighk8GmrCRfm923j6bJHo8b3u9TbmLH1w17c7Mw7k0nSQVcyGfBWZGmg Xfb8SkBXhA3K0zvRAR3mABFk3Yrg31E= -----END CERTIFICATE-----Generated at Sat Apr 5 18:39:22 2025 by rpki-client