$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d566a20-db3f-3ba5-a3f5-5685134127e8.roa File: 7d566a20-db3f-3ba5-a3f5-5685134127e8.roa (raw, json) Hash identifier: 65nH1BqUFAuNjL3HOrjKdpfHiJfddwDIzUyh8pMBjAg= Subject key identifier: 65:B9:35:C7:9E:A6:A0:10:C5:FF:03:C7:E7:9A:47:ED:06:2F:22:B9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584902EC36A69149C5E089D74E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d566a20-db3f-3ba5-a3f5-5685134127e8.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 701 IP address blocks: 71.252.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:36:a6:91:49:c5:e0:89:d7:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=ce6987af-122b-46e9-97b6-3c6f8731c95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6c:c6:f8:b5:94:bc:cf:cb:e2:56:08:e2:94: a9:71:72:aa:66:6a:48:91:dc:47:dd:5a:44:13:12: f1:11:68:89:90:de:89:3f:d6:1a:82:b0:71:de:39: 2c:24:59:36:77:84:1e:6e:63:48:89:0a:56:cf:5f: 2b:9b:95:62:db:42:b4:eb:d1:ac:cf:0f:42:4f:9a: cd:a4:ad:a9:f1:b6:e9:24:84:b5:0e:76:0d:1d:bb: 46:a3:a8:62:cf:16:82:f2:b4:ed:65:cf:2e:52:b2: 7d:1a:8e:72:37:b0:a5:4f:d3:9b:a3:32:7c:0a:ca: d6:2d:50:a4:05:9d:7b:e5:65:e8:32:a8:56:c7:d0: 9f:64:97:48:71:6f:bf:3c:08:cc:18:66:57:9f:11: b6:ce:a7:e2:95:45:76:da:bc:66:61:28:a7:a1:f0: e6:05:58:ae:46:48:fa:3b:70:e7:f6:7e:52:94:d5: ac:cd:1a:3b:db:e3:f9:82:93:e5:aa:42:d1:29:c6: 9f:7c:55:67:65:61:10:fc:4e:d4:53:9e:7a:f8:2f: 43:74:b7:55:08:de:1b:75:03:b4:ec:c0:e9:ce:e1: 38:17:73:6e:d5:41:ad:04:0a:d3:9c:ee:10:86:40: d7:3f:81:b2:47:08:da:28:91:b7:8b:e7:58:b0:72: f1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B9:35:C7:9E:A6:A0:10:C5:FF:03:C7:E7:9A:47:ED:06:2F:22:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d566a20-db3f-3ba5-a3f5-5685134127e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.252.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:af:24:1f:fa:79:08:cd:98:90:91:cb:d3:a2:09:2c:e9:12: 40:fc:84:1b:05:de:de:2a:f2:5a:fc:70:35:e5:1c:ff:4b:64: 01:0e:d2:16:fc:79:e8:f5:51:c3:f1:b6:ea:aa:cd:47:6c:32: 43:2c:a8:9f:ba:4d:a9:9d:aa:c0:e0:88:92:84:37:3f:2f:a5: 03:1b:65:fd:50:69:9e:b5:ce:58:24:86:80:f7:5c:eb:27:c1: 8d:ac:e7:56:bc:be:d6:00:7e:a4:ac:a0:6a:8e:80:6d:9b:fd: a9:a0:6c:30:34:53:2b:1f:7e:91:dd:e7:54:6c:b6:6a:a3:dc: ba:16:27:a8:de:35:2f:28:cf:47:57:ad:cc:f6:37:57:b6:b9: a6:fd:c9:07:d5:6f:18:d6:a0:bf:ec:92:1b:c8:aa:21:88:dc: 31:42:85:47:eb:59:b4:1d:89:05:2c:f3:23:56:21:bf:3a:21: 39:fe:35:d2:7e:0e:c9:80:09:93:e4:3b:43:b0:a0:88:54:f8: 0b:7b:7e:b6:af:a5:7f:fe:16:f7:15:e5:9d:2c:8f:dd:bb:aa: 9b:7e:8b:c0:0f:d2:1f:b5:e6:1f:68:66:85:62:73:d7:b5:d6: 32:56:3e:77:f3:77:b9:8b:e4:66:cd:cf:ec:3f:fd:88:a3:31: 72:ce:c2:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7DamkUnF4InXToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk Y2U2OTg3YWYtMTIyYi00NmU5LTk3YjYtM2M2Zjg3MzFjOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2zG+LWUvM/L4lYI4pSpcXKqZmpIkdxH3VpE ExLxEWiJkN6JP9YagrBx3jksJFk2d4QebmNIiQpWz18rm5Vi20K069Gszw9CT5rN pK2p8bbpJIS1DnYNHbtGo6hizxaC8rTtZc8uUrJ9Go5yN7ClT9ObozJ8CsrWLVCk BZ175WXoMqhWx9CfZJdIcW+/PAjMGGZXnxG2zqfilUV22rxmYSinofDmBViuRkj6 O3Dn9n5SlNWszRo72+P5gpPlqkLRKcaffFVnZWEQ/E7UU556+C9DdLdVCN4bdQO0 7MDpzuE4F3Nu1UGtBArTnO4QhkDXP4GyRwjaKJG3i+dYsHLxWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGW5NceepqAQxf8Dx+eaR+0GLyK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2Q1NjZhMjAtZGIzZi0z YmE1LWEzZjUtNTY4NTEzNDEyN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR/wBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWvJB/6eQjNmJCRy9OiCSzpEkD8hBsF3t4q8lr8cDXlHP9LZAEO0hb8 eej1UcPxtuqqzUdsMkMsqJ+6TamdqsDgiJKENz8vpQMbZf1QaZ61zlgkhoD3XOsn wY2s51a8vtYAfqSsoGqOgG2b/amgbDA0UysffpHd51Rstmqj3LoWJ6jeNS8oz0dX rcz2N1e2uab9yQfVbxjWoL/skhvIqiGI3DFChUfrWbQdiQUs8yNWIb86ITn+NdJ+ DsmACZPkO0OwoIhU+At7fravpX/+FvcV5Z0sj927qpt+i8AP0h+15h9oZoVic9e1 1jJWPnfzd7mL5GbNz+w//YijMXLOwss= -----END CERTIFICATE-----Generated at Sat Apr 5 18:09:53 2025 by rpki-client