$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b298214-cb36-31a1-9024-4a9ad47eba3e.roa File: 7b298214-cb36-31a1-9024-4a9ad47eba3e.roa (raw, json) Hash identifier: KnYR3YN0b9splfNidudYS1prZ2KHIOTLRz75ARcrRhs= Subject key identifier: B5:E6:88:47:4A:25:07:A5:80:41:04:10:7F:B5:95:AF:78:44:7B:20 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858492184280AA792FA358BA16FE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b298214-cb36-31a1-9024-4a9ad47eba3e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 6167 IP address blocks: 208.210.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:28:0a:a7:92:fa:35:8b:a1:6f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=721f7d5f-ec5a-42f8-a219-29aff50abe61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:91:a8:c3:40:c7:45:c1:ab:69:95:d9:58:e7: 41:d3:dc:b5:87:86:bf:c0:48:22:8f:82:79:62:11: 38:8e:ee:fb:76:0f:d8:43:11:00:18:72:37:b5:fb: 6d:e1:37:6f:de:cf:78:09:c0:c4:80:31:83:50:5e: 8c:dd:7e:7c:32:a0:58:6a:64:a2:94:cb:e9:5a:2f: 64:cd:a8:33:2e:e5:6c:0c:91:13:1d:3e:9e:cc:13: 74:1d:d2:37:74:b4:7d:f6:1e:57:29:76:78:2a:2a: b5:86:7e:b1:53:3a:0c:88:01:39:7a:f4:48:e7:c0: 27:00:3c:1f:1e:87:18:fb:49:d9:6d:eb:89:7f:9a: df:23:57:4d:57:6e:fc:a0:e9:d0:54:dc:a4:63:24: 32:7e:13:3c:fd:19:2f:4c:74:f6:83:2b:53:e4:4c: 52:66:73:8e:9c:ea:e3:88:26:ff:17:5f:59:42:22: 0e:b0:38:f3:a2:be:47:d0:45:b8:65:6e:28:df:0f: ea:26:f1:23:8c:3f:1f:a0:7f:08:ca:cb:ac:7c:eb: 00:d0:80:c5:95:f6:d3:7e:24:00:e5:01:e1:22:11: ab:99:98:42:8b:8d:4e:be:62:3d:ba:3f:ee:e6:56: 27:58:31:9a:0f:6a:ca:31:11:18:13:47:03:0a:ab: 71:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:88:47:4A:25:07:A5:80:41:04:10:7F:B5:95:AF:78:44:7B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b298214-cb36-31a1-9024-4a9ad47eba3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.210.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b6:6b:a7:45:22:85:8b:9c:ce:47:80:0c:3d:8d:37:1f:2f: a8:8a:f6:77:7d:31:9a:1a:a3:b5:c3:c3:59:86:4f:1c:7e:ae: 41:66:1c:66:2a:1d:ef:6e:f0:08:51:a0:d1:50:f9:78:fe:79: 50:92:e4:b5:1f:61:96:f1:bd:fc:2c:d0:d1:a0:7e:5e:bd:ad: 52:d2:49:e0:07:bf:1a:35:3d:10:e4:ca:3f:4a:95:27:d6:61: 97:f1:29:3c:0c:8a:b6:68:0b:3e:c2:2b:03:8b:2a:44:10:e5: 32:78:e3:65:08:67:63:74:44:4e:96:ed:73:dc:dc:aa:da:e2: ee:89:07:05:d1:07:35:f7:e8:6c:76:52:fb:bb:c3:e2:71:c7: f9:fb:e2:ef:7f:f9:e2:d2:6e:ec:9c:7c:c6:86:82:05:cd:70: 8d:db:b8:9a:4d:5e:6f:de:d6:22:71:94:27:10:14:aa:ac:f9: 4b:9c:31:51:58:c2:ec:61:1b:40:e2:32:e6:f1:9b:73:48:74: 78:d5:6d:4b:6e:29:4e:78:af:42:37:5c:f0:49:56:4d:d1:ed: 75:29:fe:e5:f0:56:c4:22:aa:33:f6:0f:3f:1f:47:37:96:92: da:41:44:44:e4:d7:a0:b5:2e:b5:d6:d2:74:b1:21:b3:44:dc: 5d:66:63:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhCgKp5L6NYuhb+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NzIxZjdkNWYtZWM1YS00MmY4LWEyMTktMjlhZmY1MGFiZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpGow0DHRcGraZXZWOdB09y1h4a/wEgij4J5 YhE4ju77dg/YQxEAGHI3tftt4Tdv3s94CcDEgDGDUF6M3X58MqBYamSilMvpWi9k zagzLuVsDJETHT6ezBN0HdI3dLR99h5XKXZ4Kiq1hn6xUzoMiAE5evRI58AnADwf HocY+0nZbeuJf5rfI1dNV278oOnQVNykYyQyfhM8/RkvTHT2gytT5ExSZnOOnOrj iCb/F19ZQiIOsDjzor5H0EW4ZW4o3w/qJvEjjD8foH8IysusfOsA0IDFlfbTfiQA 5QHhIhGrmZhCi41OvmI9uj/u5lYnWDGaD2rKMREYE0cDCqtxpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXmiEdKJQelgEEEEH+1la94RHsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2IyOTgyMTQtY2IzNi0z MWExLTkwMjQtNGE5YWQ0N2ViYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0NKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS2a6dFIoWLnM5HgAw9jTcfL6iK9nd9MZoao7XDw1mGTxx+rkFmHGYq He9u8AhRoNFQ+Xj+eVCS5LUfYZbxvfws0NGgfl69rVLSSeAHvxo1PRDkyj9KlSfW YZfxKTwMirZoCz7CKwOLKkQQ5TJ442UIZ2N0RE6W7XPc3Kra4u6JBwXRBzX36Gx2 Uvu7w+Jxx/n74u9/+eLSbuycfMaGggXNcI3buJpNXm/e1iJxlCcQFKqs+UucMVFY wuxhG0DiMubxm3NIdHjVbUtuKU54r0I3XPBJVk3R7XUp/uXwVsQiqjP2Dz8fRzeW ktpBRETk16C1LrXW0nSxIbNE3F1mYzM= -----END CERTIFICATE-----Generated at Thu Apr 10 14:35:43 2025 by rpki-client