$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ae03dfa-5312-3307-9f3e-000039f415c6.roa File: 7ae03dfa-5312-3307-9f3e-000039f415c6.roa (raw, json) Hash identifier: tCY6H787SuE39nV8fROf/IM3wesLCiUV2LpCyfaGkcs= Subject key identifier: 14:70:D7:96:7E:F3:0B:8A:42:A6:37:C5:97:8A:4D:24:0B:86:6B:E3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F42C0284D585CB161A10 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ae03dfa-5312-3307-9f3e-000039f415c6.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 74.111.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f4:2c:02:84:d5:85:cb:16:1a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=abcb7a4d-c975-48ed-929f-a41605a83ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a5:dc:34:dc:79:14:cd:ed:b3:ba:b8:5a:07: ad:c8:09:01:95:cb:0c:18:a8:72:13:7f:f4:f2:75: bb:70:34:e1:b1:4b:fb:60:35:ac:b9:63:8f:eb:bf: 9b:79:d6:75:4a:7a:17:cd:c1:01:3c:d5:01:7b:59: 2d:48:ba:52:af:52:b3:27:bb:4a:57:42:a2:ff:62: 1c:1c:33:61:70:10:1e:f1:7e:1a:5d:d0:1b:83:6d: bd:d6:8a:5b:0b:d6:2b:8c:9c:e2:cf:8b:40:cb:f0: 12:5f:ca:af:a6:c8:b4:35:e1:19:4f:4f:07:c0:1c: c1:b1:3e:61:e6:fe:71:00:1a:10:39:d5:e9:d2:39: cf:0b:d2:04:54:eb:e3:c5:64:ca:1a:7b:0d:c1:59: 16:b7:f7:84:1d:39:19:31:49:fc:70:90:2a:8a:76: 28:8b:c1:2e:db:b5:ec:5c:05:96:28:11:e8:6d:47: 31:f0:4e:75:4c:49:6d:68:3c:7b:94:b5:17:64:fb: 09:bd:d7:bf:7b:69:2f:06:4c:87:49:85:d6:12:4d: fa:9a:27:97:91:e8:01:f9:9c:ba:cf:8d:4e:90:eb: 91:36:91:14:9e:2c:60:2c:c7:3b:57:28:de:bb:8e: 10:10:be:e2:61:b6:bb:f5:1e:5a:0f:1b:ea:94:10: b1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:70:D7:96:7E:F3:0B:8A:42:A6:37:C5:97:8A:4D:24:0B:86:6B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ae03dfa-5312-3307-9f3e-000039f415c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 74.111.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:af:a6:77:23:03:0a:9e:fd:05:f3:c8:c3:0a:2c:3b:6e:96: 50:eb:5d:37:57:9e:78:c7:3f:84:b8:df:1c:e0:30:be:08:93: dd:ff:3d:24:60:0c:ea:5f:20:4c:5a:02:8f:05:cd:08:22:0b: 8c:b1:74:1e:98:50:41:6e:b6:d0:22:06:41:77:7f:f9:1e:96: 6d:e7:47:9f:c1:79:29:28:22:ad:b2:db:4d:95:21:8e:a0:22: cd:c3:32:ce:eb:eb:57:1a:92:12:e3:d3:d3:7c:51:7a:3a:db: e3:07:73:77:8c:79:95:d4:94:e2:5e:a7:50:3e:b5:49:06:52: df:0b:7a:d5:ae:d6:39:86:be:da:e6:9b:97:2b:f0:64:a8:9e: 24:ce:78:76:8d:3b:16:67:e3:23:10:29:12:16:cc:8e:58:99: b7:52:48:0d:b3:90:24:e4:bb:44:62:8f:ba:7b:a7:95:71:6d: e3:1c:c1:7e:58:54:5d:48:e3:06:02:13:57:b6:30:1e:d6:d4: 0f:3d:74:fd:5c:24:6f:46:86:64:55:01:fa:29:6c:a6:bd:50: 44:6b:27:54:f5:6d:ae:d9:fd:40:e5:13:1f:18:df:ca:9c:92: 24:3e:86:4c:92:85:39:3b:58:2e:b3:ae:9e:74:d6:75:34:a4: 61:b6:66:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvQsAoTVhcsWGhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YWJjYjdhNGQtYzk3NS00OGVkLTkyOWYtYTQxNjA1YTgzY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+KXcNNx5FM3ts7q4WgetyAkBlcsMGKhyE3/0 8nW7cDThsUv7YDWsuWOP67+bedZ1SnoXzcEBPNUBe1ktSLpSr1KzJ7tKV0Ki/2Ic HDNhcBAe8X4aXdAbg2291opbC9YrjJziz4tAy/ASX8qvpsi0NeEZT08HwBzBsT5h 5v5xABoQOdXp0jnPC9IEVOvjxWTKGnsNwVkWt/eEHTkZMUn8cJAqinYoi8Eu27Xs XAWWKBHobUcx8E51TEltaDx7lLUXZPsJvde/e2kvBkyHSYXWEk36mieXkegB+Zy6 z41OkOuRNpEUnixgLMc7Vyjeu44QEL7iYba79R5aDxvqlBCxCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRw15Z+8wuKQqY3xZeKTSQLhmvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2FlMDNkZmEtNTMxMi0z MzA3LTlmM2UtMDAwMDM5ZjQxNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSm9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJevpncjAwqe/QXzyMMKLDtullDrXTdXnnjHP4S43xzgML4Ik93/PSRg DOpfIExaAo8FzQgiC4yxdB6YUEFuttAiBkF3f/kelm3nR5/BeSkoIq2y202VIY6g Is3DMs7r61cakhLj09N8UXo62+MHc3eMeZXUlOJep1A+tUkGUt8LetWu1jmGvtrm m5cr8GSoniTOeHaNOxZn4yMQKRIWzI5YmbdSSA2zkCTku0Rij7p7p5VxbeMcwX5Y VF1I4wYCE1e2MB7W1A89dP1cJG9GhmRVAfopbKa9UERrJ1T1ba7Z/UDlEx8Y38qc kiQ+hkyShTk7WC6zrp501nU0pGG2ZlY= -----END CERTIFICATE-----Generated at Thu Apr 10 14:55:34 2025 by rpki-client