$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7605e62e-ca82-37e2-a632-f1f3da89f2c5.roa File: 7605e62e-ca82-37e2-a632-f1f3da89f2c5.roa (raw, json) Hash identifier: yYE2O4vky84Ly3up11r9GgNSyEw1QSIZDNDNvtgDjdc= Subject key identifier: 39:D7:E9:EE:9A:B2:C0:88:02:EA:88:8D:0E:EC:6A:AA:57:55:62:DB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC0BCA4DE7F45B0FA66C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7605e62e-ca82-37e2-a632-f1f3da89f2c5.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.96.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:0b:ca:4d:e7:f4:5b:0f:a6:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=d61fa923-dc97-4584-a954-93543a617fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c1:69:79:25:7f:f8:58:3e:1f:83:6c:32:ae: c4:fa:1d:8b:dc:c8:73:56:a7:9c:5e:50:1f:a5:bd: d2:36:08:8f:ed:96:e5:42:ed:fd:48:f8:48:e8:b6: ec:5b:72:80:ee:4e:e1:05:4f:f6:d1:58:b9:54:29: 94:1e:a8:01:a6:44:8d:0d:6a:5e:46:14:51:a3:d4: 22:25:b8:f2:3a:83:ef:6d:8f:d4:5e:0b:24:0e:c2: 0d:2b:08:9d:8f:d3:f4:33:1e:f4:8e:43:05:23:e3: 3e:f4:17:c5:c6:7c:71:48:37:04:84:77:65:f8:c2: f8:03:57:4c:4f:27:f5:00:db:2f:bc:89:22:62:fa: 43:ea:16:a6:c7:f9:ab:62:a2:10:f3:18:37:9c:ea: 62:c0:29:60:7f:7f:da:2d:97:9f:2b:b8:d4:11:70: 79:f6:eb:c2:37:c8:52:42:42:6b:d7:f0:8f:b3:fc: 64:d2:19:d1:a7:ee:96:a3:19:ee:35:30:53:8d:b8: 07:4e:08:d1:3b:28:b2:58:1c:9f:15:09:ca:5c:f1: 0c:b6:6c:74:4e:51:3c:d0:a7:e5:dc:71:e4:6d:08: 43:55:a3:5a:b5:92:73:11:f6:ac:81:cd:2a:31:3e: 2f:8d:be:a0:a1:26:5a:26:10:85:5f:5e:15:23:1b: 00:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D7:E9:EE:9A:B2:C0:88:02:EA:88:8D:0E:EC:6A:AA:57:55:62:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7605e62e-ca82-37e2-a632-f1f3da89f2c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:9e:8a:88:fc:24:c0:78:fe:33:4c:e0:ea:b7:f7:71:90:93: ca:bd:8d:bd:58:92:ec:02:68:4a:5d:e5:c2:dc:e5:c3:e2:f8: 54:f7:b9:76:e9:7a:eb:47:d8:9a:c6:a5:88:5d:ad:60:d1:ef: e3:b8:47:f4:09:62:68:98:bb:a6:9f:80:c7:de:01:50:a1:0b: 25:89:dc:ff:d7:bd:3b:05:b4:7e:17:e8:3c:55:14:99:98:5e: 75:6b:b7:92:e7:0d:94:f6:ac:b6:a9:aa:84:98:ef:c9:b9:b3: 54:51:0f:af:20:1c:2c:0d:f0:94:f0:cd:9f:ba:07:29:71:ed: 59:16:ac:84:65:63:bd:31:a4:65:56:4d:21:b7:9d:dc:cf:40: b4:68:32:f5:ee:1a:91:0d:52:7c:3e:ed:ed:e8:b0:2e:1f:35: 39:14:77:80:47:ae:6a:c6:e8:d0:9e:cb:87:6e:4a:40:39:47: d5:4c:af:70:2c:dc:01:85:fc:7e:66:fa:34:66:16:8c:09:22: 6e:9d:1a:61:52:f3:22:cd:0d:98:bd:57:7d:66:07:2c:c6:b0: 58:51:20:39:aa:98:3e:55:e6:1a:33:30:01:95:70:4b:6f:77: cc:2d:64:8d:97:6d:d9:0f:e3:6e:b6:d0:6b:31:0a:f9:8a:02: fe:89:29:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AvKTef0Ww+mbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDYxZmE5MjMtZGM5Ny00NTg0LWE5NTQtOTM1NDNhNjE3ZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sFpeSV/+Fg+H4NsMq7E+h2L3MhzVqecXlAf pb3SNgiP7ZblQu39SPhI6LbsW3KA7k7hBU/20Vi5VCmUHqgBpkSNDWpeRhRRo9Qi JbjyOoPvbY/UXgskDsINKwidj9P0Mx70jkMFI+M+9BfFxnxxSDcEhHdl+ML4A1dM Tyf1ANsvvIkiYvpD6hamx/mrYqIQ8xg3nOpiwClgf3/aLZefK7jUEXB59uvCN8hS QkJr1/CPs/xk0hnRp+6WoxnuNTBTjbgHTgjROyiyWByfFQnKXPEMtmx0TlE80Kfl 3HHkbQhDVaNatZJzEfasgc0qMT4vjb6goSZaJhCFX14VIxsAXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnX6e6assCIAuqIjQ7saqpXVWLbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzYwNWU2MmUtY2E4Mi0z N2UyLWE2MzItZjFmM2RhODlmMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaeioj8JMB4/jNM4Oq393GQk8q9jb1YkuwCaEpd5cLc5cPi+FT3uXbp eutH2JrGpYhdrWDR7+O4R/QJYmiYu6afgMfeAVChCyWJ3P/XvTsFtH4X6DxVFJmY XnVrt5LnDZT2rLapqoSY78m5s1RRD68gHCwN8JTwzZ+6Bylx7VkWrIRlY70xpGVW TSG3ndzPQLRoMvXuGpENUnw+7e3osC4fNTkUd4BHrmrG6NCey4duSkA5R9VMr3As 3AGF/H5m+jRmFowJIm6dGmFS8yLNDZi9V31mByzGsFhRIDmqmD5V5hozMAGVcEtv d8wtZI2XbdkP42620GsxCvmKAv6JKSk= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:33 2025 by rpki-client