$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a2ebc81-1f9a-3dfd-9f0e-45f10498c201.roa File: 7a2ebc81-1f9a-3dfd-9f0e-45f10498c201.roa (raw, json) Hash identifier: 0mFhlIScud49Ow6i29Da/L5qN6bt2lyTZNCnADOVfJY= Subject key identifier: 1F:3F:10:BF:42:51:C6:28:98:9E:A7:C2:8C:0C:36:DB:37:34:50:7F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246FC050F111A5615A4FD40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a2ebc81-1f9a-3dfd-9f0e-45f10498c201.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 108.26.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:fc:05:0f:11:1a:56:15:a4:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=83d959f2-a8d0-479c-b03d-f7fdf0c0de13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:54:c5:81:80:4e:94:6c:a4:75:9e:ee:96:e8: 65:a1:f1:e1:c5:cc:e8:a6:b7:b1:e8:95:b9:61:45: 11:10:b1:c6:dc:a3:71:c2:0d:e6:d3:33:30:a1:1e: 25:42:4f:7b:e7:9e:cd:41:c1:ef:d4:a3:e0:60:f5: 8a:67:2f:40:8b:8f:2d:c7:2a:13:15:d6:31:d1:05: 14:7f:ef:ab:3a:40:92:21:f8:99:3a:cc:94:61:c2: bb:59:49:24:e5:eb:ab:c4:50:e7:25:28:4e:0b:ad: 66:b1:23:3d:d0:cd:ad:6c:08:50:6a:99:9e:a9:ed: e8:38:a5:0e:ce:bb:43:ef:c1:ca:2d:55:ac:c0:07: de:6b:b5:98:df:06:4f:1e:31:3c:6a:93:30:d0:bb: 95:59:96:6d:6f:02:6a:36:d3:78:d2:ff:08:86:9a: c0:b7:e5:ac:07:f3:02:b6:f0:5b:6f:44:64:4f:4d: aa:08:1c:da:e9:9b:4e:4f:ad:00:b5:29:42:c5:30: 0c:9c:74:d1:a7:3b:b0:8d:d0:9f:94:e1:d2:34:f8: 4b:92:1b:72:e0:60:fc:2a:d2:d9:67:8b:4f:8a:b1: 67:07:0d:a6:d7:25:f3:c1:04:f4:96:21:24:89:48: b1:54:4a:21:89:af:bb:26:cb:f9:7b:66:aa:38:dd: e3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3F:10:BF:42:51:C6:28:98:9E:A7:C2:8C:0C:36:DB:37:34:50:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a2ebc81-1f9a-3dfd-9f0e-45f10498c201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.26.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:17:28:c0:02:3d:0d:e8:fd:37:86:53:bb:2e:d3:b8:3f:10: f3:a3:e9:5e:b7:8b:e4:50:e3:46:dc:55:79:b8:3d:ac:b9:e1: 45:2a:58:98:94:a3:7c:03:c5:61:1c:2d:ca:db:ab:c1:7e:ea: 73:ee:1d:24:f5:55:f8:97:fb:fe:60:12:39:3d:f9:fa:de:0f: c1:cb:bd:e4:89:37:4d:ce:eb:54:0b:c6:81:02:3b:0a:a6:74: fa:41:47:ab:e4:d9:3f:a7:b3:6c:59:44:12:76:68:c1:62:12: 7e:8d:08:de:68:d9:49:d4:5f:45:80:a8:ab:33:67:1e:0c:6d: 0c:8f:43:0c:61:d7:75:11:3a:58:da:80:5d:9b:63:3c:2f:1b: bd:66:d9:72:dd:0d:76:24:a3:42:1d:37:62:13:70:55:62:2d: 18:fb:82:1d:7d:81:5b:e3:d7:d1:cd:48:60:d4:4d:45:4a:6c: 91:82:cb:ef:3c:ae:14:b7:8f:58:2f:8f:4c:1a:f3:b5:ae:d5: fa:f2:bf:1c:04:50:cf:ee:a0:cc:5d:95:82:24:7d:37:2c:96: 04:e4:ed:14:58:14:83:95:07:f7:cc:24:54:1c:ac:14:b1:de: a7:26:d3:75:f8:cf:9b:38:f5:09:fd:17:fb:13:10:66:78:89: ad:22:ff:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvwFDxEaVhWk/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ODNkOTU5ZjItYThkMC00NzljLWIwM2QtZjdmZGYwYzBkZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1TFgYBOlGykdZ7uluhlofHhxczoprex6JW5 YUURELHG3KNxwg3m0zMwoR4lQk97557NQcHv1KPgYPWKZy9Ai48txyoTFdYx0QUU f++rOkCSIfiZOsyUYcK7WUkk5eurxFDnJShOC61msSM90M2tbAhQapmeqe3oOKUO zrtD78HKLVWswAfea7WY3wZPHjE8apMw0LuVWZZtbwJqNtN40v8IhprAt+WsB/MC tvBbb0RkT02qCBza6ZtOT60AtSlCxTAMnHTRpzuwjdCflOHSNPhLkhty4GD8KtLZ Z4tPirFnBw2m1yXzwQT0liEkiUixVEohia+7Jsv5e2aqON3j2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8/EL9CUcYomJ6nwowMNts3NFB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2EyZWJjODEtMWY5YS0z ZGZkLTlmMGUtNDVmMTA0OThjMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbBqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcXKMACPQ3o/TeGU7su07g/EPOj6V63i+RQ40bcVXm4Pay54UUqWJiU o3wDxWEcLcrbq8F+6nPuHST1VfiX+/5gEjk9+freD8HLveSJN03O61QLxoECOwqm dPpBR6vk2T+ns2xZRBJ2aMFiEn6NCN5o2UnUX0WAqKszZx4MbQyPQwxh13UROlja gF2bYzwvG71m2XLdDXYko0IdN2ITcFViLRj7gh19gVvj19HNSGDUTUVKbJGCy+88 rhS3j1gvj0wa87Wu1fryvxwEUM/uoMxdlYIkfTcslgTk7RRYFIOVB/fMJFQcrBSx 3qcm03X4z5s49Qn9F/sTEGZ4ia0i/1c= -----END CERTIFICATE-----Generated at Sun Apr 6 01:07:37 2025 by rpki-client