$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871ae4b0-a747-399d-90cc-9f91678c7d4e.roa File: 871ae4b0-a747-399d-90cc-9f91678c7d4e.roa (raw, json) Hash identifier: aJsAZj4hn/75lzMACG7cc0WL/iJ2xL9C+Cy95c1E8zY= Subject key identifier: FE:98:B8:FC:1D:F1:30:5B:DF:66:B8:4C:0E:E7:49:70:79:81:2A:BA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC0D0765A891B53BE82610 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871ae4b0-a747-399d-90cc-9f91678c7d4e.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.96.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:0d:07:65:a8:91:b5:3b:e8:26:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=0bc34139-ba84-4ecc-af17-7d953e855bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d8:81:e6:b5:b8:9a:d4:e5:05:c7:09:02:9c: 4d:02:db:e0:07:a3:32:db:19:7e:28:cd:07:9b:98: 38:b8:22:5c:be:1d:d3:33:28:68:e1:17:cc:37:3e: e1:43:1e:b8:2e:70:22:d3:3c:82:26:f5:5e:7f:50: d1:31:94:a2:ef:c5:a7:ee:4f:d4:a0:30:82:2b:c2: 1a:ad:ef:cc:95:f8:80:45:63:33:92:e4:26:b1:d9: 5c:b8:a3:d0:a2:72:8b:8e:c4:af:0b:d2:50:00:10: c9:20:df:30:bf:94:92:76:33:ac:25:5d:6c:e9:62: ac:52:73:ba:03:f4:8b:42:76:68:f0:64:a5:d3:f7: 3b:ee:25:8b:34:9f:63:99:8f:63:60:a8:04:2a:53: 3b:7c:2b:3f:91:bd:94:af:29:14:8e:5f:3d:d6:e3: da:94:e3:13:98:23:7a:a6:0a:c8:43:09:24:22:d1: 6d:71:56:27:28:fc:ac:5c:7f:64:d2:e7:e1:c5:34: 87:7b:32:ea:c5:f6:20:b7:0f:67:dd:6f:f2:52:a7: 00:f7:73:ed:26:a6:6f:0e:66:17:53:0a:54:e6:66: 2c:c9:b6:cb:12:c2:a0:97:96:ae:82:bf:95:c9:64: 06:ca:f0:fd:bd:7f:b8:e7:cd:2a:32:5f:dd:eb:85: cd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:98:B8:FC:1D:F1:30:5B:DF:66:B8:4C:0E:E7:49:70:79:81:2A:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871ae4b0-a747-399d-90cc-9f91678c7d4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:76:08:59:03:72:5e:b8:6e:57:af:d0:dd:90:bc:09:ff:35: b2:db:0d:6b:4c:70:6e:0b:75:a8:73:9d:c7:87:70:f5:61:e7: ab:5b:f9:90:19:91:7c:dd:21:d9:7f:69:43:97:c6:59:b9:fa: a3:82:9a:e5:d6:0e:9a:8f:fb:cd:4d:e3:90:02:87:00:d9:1f: 3b:15:4f:13:99:17:0e:bc:ed:85:14:9e:b4:e1:dc:9d:55:3c: 0c:51:fc:8f:9d:09:0f:dd:d6:ac:c6:4f:78:81:4d:81:36:63: 7b:8b:27:3a:8a:99:e7:19:f0:16:8c:db:3a:fa:ca:99:62:7c: 7b:7a:0e:5e:18:5a:5a:27:7f:de:62:d1:5f:5f:4e:fa:14:cd: cd:85:6a:42:a3:42:a2:9f:15:24:a2:82:42:f1:17:22:f1:c3: f1:44:f1:0d:10:e5:2f:72:eb:83:e6:a9:d3:2d:e7:0b:48:13: 78:af:65:db:c1:a2:3b:07:00:df:1f:07:a7:b9:2a:fe:5c:c4: d9:03:27:42:9e:02:a5:70:b5:5c:b4:82:4d:03:e3:d7:c7:4c: 21:20:a5:03:48:09:08:8c:7e:f3:47:e6:2d:fb:be:41:e3:c1: 13:bb:a5:ba:6f:c5:9e:94:a6:04:bd:48:f3:65:b0:a2:2b:64: bd:1a:f5:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3A0HZaiRtTvoJhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MGJjMzQxMzktYmE4NC00ZWNjLWFmMTctN2Q5NTNlODU1YmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdiB5rW4mtTlBccJApxNAtvgB6My2xl+KM0H m5g4uCJcvh3TMyho4RfMNz7hQx64LnAi0zyCJvVef1DRMZSi78Wn7k/UoDCCK8Ia re/MlfiARWMzkuQmsdlcuKPQonKLjsSvC9JQABDJIN8wv5SSdjOsJV1s6WKsUnO6 A/SLQnZo8GSl0/c77iWLNJ9jmY9jYKgEKlM7fCs/kb2UrykUjl891uPalOMTmCN6 pgrIQwkkItFtcVYnKPysXH9k0ufhxTSHezLqxfYgtw9n3W/yUqcA93PtJqZvDmYX UwpU5mYsybbLEsKgl5augr+VyWQGyvD9vX+4580qMl/d64XNSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6YuPwd8TBb32a4TA7nSXB5gSq6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODcxYWU0YjAtYTc0Ny0z OTlkLTkwY2MtOWY5MTY3OGM3ZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB2CFkDcl64blev0N2QvAn/NbLbDWtMcG4LdahznceHcPVh56tb+ZAZ kXzdIdl/aUOXxlm5+qOCmuXWDpqP+81N45AChwDZHzsVTxOZFw687YUUnrTh3J1V PAxR/I+dCQ/d1qzGT3iBTYE2Y3uLJzqKmecZ8BaM2zr6yplifHt6Dl4YWlonf95i 0V9fTvoUzc2FakKjQqKfFSSigkLxFyLxw/FE8Q0Q5S9y64PmqdMt5wtIE3ivZdvB ojsHAN8fB6e5Kv5cxNkDJ0KeAqVwtVy0gk0D49fHTCEgpQNICQiMfvNH5i37vkHj wRO7pbpvxZ6UpgS9SPNlsKIrZL0a9QE= -----END CERTIFICATE-----Generated at Sat Apr 5 18:39:10 2025 by rpki-client