$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e636e9f-1a75-3eac-a0fa-14b5168280fc.roa File: 7e636e9f-1a75-3eac-a0fa-14b5168280fc.roa (raw, json) Hash identifier: yZC2Hm/MZ3NlbW09dhOyJizXkE2s1OsD2BEWBfNzfQc= Subject key identifier: BF:BD:19:0F:9D:B8:11:CC:ED:2E:54:6C:DB:24:F1:27:86:95:AF:0D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246CE4587B203642E1CD880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e636e9f-1a75-3eac-a0fa-14b5168280fc.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 70.109.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ce:45:87:b2:03:64:2e:1c:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=a7e58bbf-e2d6-41c0-96fc-f7024f761d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:63:4c:51:99:ed:58:f9:11:90:3e:16:67:f6: 70:ef:30:f9:30:d4:83:c1:03:b2:08:b1:b9:cc:c1: 12:ae:8c:12:e4:eb:21:9a:9d:1a:f2:77:05:ca:5f: 3e:a8:13:1d:b9:78:95:96:5d:95:09:de:89:3b:bf: ae:a6:8a:b2:c4:04:ff:6b:75:55:b9:5e:83:d9:07: e4:29:91:0e:20:08:fe:12:0d:06:e9:d9:88:a7:4f: ba:bc:79:c5:4c:65:6f:9a:a9:76:9c:c2:af:c6:8f: 1b:5b:9d:db:4d:5a:ab:01:53:af:fd:4f:29:9d:63: 06:31:92:29:88:e7:e2:31:4d:4c:1a:4c:c1:2a:8e: e3:7f:81:10:41:84:d9:44:1e:98:0d:26:08:52:48: 26:ab:be:d8:d3:6a:58:55:aa:14:2d:0e:c4:c0:7b: 76:d2:a2:d8:5c:9b:3e:e2:3f:f1:2f:e8:f0:9b:46: bc:d3:ad:7b:d3:2c:96:73:bc:f6:b4:a6:2a:4d:71: d2:15:60:15:de:07:30:c0:86:fd:d3:aa:76:bc:37: 10:7e:64:ba:b0:6b:e1:f3:bb:9a:64:8c:7a:67:f0: e5:49:b7:c6:f8:b4:ae:e1:5c:b5:a0:f7:7e:68:60: 17:a0:30:32:8e:fd:6e:c6:3c:53:c5:34:04:f0:01: 6f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BD:19:0F:9D:B8:11:CC:ED:2E:54:6C:DB:24:F1:27:86:95:AF:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e636e9f-1a75-3eac-a0fa-14b5168280fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.109.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:06:ab:0f:fa:2c:16:b1:78:b7:9c:78:77:a4:4e:bc:36:fb: a1:14:e3:54:5f:3b:b5:b8:a7:9c:29:94:4d:ec:34:16:73:76: 6c:2a:35:37:68:82:7d:8f:6d:37:e9:39:c8:e2:d8:1d:75:5d: 92:31:91:54:06:cc:f2:99:24:14:9e:2e:77:e7:97:19:dd:2b: 84:d2:e3:da:19:0e:6b:fc:81:e7:4c:2f:e7:c6:26:0b:aa:62: 27:95:cd:bc:3c:9f:68:02:f7:31:f6:ca:62:8c:99:3a:9f:76: 00:73:02:32:df:08:9e:24:d7:ef:69:45:05:60:66:53:23:9a: a7:0b:3c:47:ae:01:22:d6:f8:37:25:8a:3b:c2:74:aa:c2:bb: a4:c8:de:2a:64:4b:f7:11:6b:3c:46:2a:ea:38:c7:3c:57:5b: 57:18:23:91:ed:df:a3:92:a7:d1:fb:79:c6:04:38:d2:5a:ec: cd:ff:ac:08:3e:30:67:2c:ff:5d:0a:2a:95:40:6e:2b:db:40: 26:2c:c2:c3:ad:ac:1d:ec:f9:71:d1:2c:d8:37:2c:46:50:07: 1d:e1:0c:95:41:76:cf:e5:f6:e4:3a:71:15:39:12:01:54:2d: 21:37:14:c5:ca:47:28:45:23:7f:92:0c:9d:65:2a:7d:b6:dd: 17:51:15:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRs5Fh7IDZC4c2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YTdlNThiYmYtZTJkNi00MWMwLTk2ZmMtZjcwMjRmNzYxZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2NMUZntWPkRkD4WZ/Zw7zD5MNSDwQOyCLG5 zMESrowS5Oshmp0a8ncFyl8+qBMduXiVll2VCd6JO7+upoqyxAT/a3VVuV6D2Qfk KZEOIAj+Eg0G6dmIp0+6vHnFTGVvmql2nMKvxo8bW53bTVqrAVOv/U8pnWMGMZIp iOfiMU1MGkzBKo7jf4EQQYTZRB6YDSYIUkgmq77Y02pYVaoULQ7EwHt20qLYXJs+ 4j/xL+jwm0a806170yyWc7z2tKYqTXHSFWAV3gcwwIb906p2vDcQfmS6sGvh87ua ZIx6Z/DlSbfG+LSu4Vy1oPd+aGAXoDAyjv1uxjxTxTQE8AFvlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+9GQ+duBHM7S5UbNsk8SeGla8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2U2MzZlOWYtMWE3NS0z ZWFjLWEwZmEtMTRiNTE2ODI4MGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERm0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgGqw/6LBaxeLeceHekTrw2+6EU41RfO7W4p5wplE3sNBZzdmwqNTdo gn2PbTfpOcji2B11XZIxkVQGzPKZJBSeLnfnlxndK4TS49oZDmv8gedML+fGJguq YieVzbw8n2gC9zH2ymKMmTqfdgBzAjLfCJ4k1+9pRQVgZlMjmqcLPEeuASLW+Dcl ijvCdKrCu6TI3ipkS/cRazxGKuo4xzxXW1cYI5Ht36OSp9H7ecYEONJa7M3/rAg+ MGcs/10KKpVAbivbQCYswsOtrB3s+XHRLNg3LEZQBx3hDJVBds/l9uQ6cRU5EgFU LSE3FMXKRyhFI3+SDJ1lKn223RdRFVU= -----END CERTIFICATE-----Generated at Sat Apr 5 21:24:49 2025 by rpki-client