$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e1c68eb-3226-3840-9908-9bb928de3ba6.roa File: 8e1c68eb-3226-3840-9908-9bb928de3ba6.roa (raw, json) Hash identifier: ah6ZIC6FXs9Kq48Wons8mKEyJMU5furY7LLXc4y9C20= Subject key identifier: 9E:3C:2A:9B:EA:7B:24:14:23:5A:BA:62:C4:6B:1A:46:BF:84:4E:BF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244A89736E01070AB48F40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e1c68eb-3226-3840-9908-9bb928de3ba6.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 65.216.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4a:89:73:6e:01:07:0a:b4:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=b883088d-16e1-4005-91c1-1bfcbab35e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:e2:a2:50:a4:14:f6:da:0d:d1:91:e0:c3: 5f:f8:49:f7:64:59:cf:a7:08:b5:4e:70:ce:15:67: 4b:fc:a4:a3:24:46:f4:3a:3b:95:e3:aa:b4:9c:57: 36:b5:f5:54:65:0a:01:bd:45:65:71:ff:be:8a:50: 04:e0:37:a0:b7:38:84:58:34:34:e3:3c:78:88:c8: 9a:4d:97:72:e2:eb:b3:92:35:53:3d:2c:4c:13:89: a4:f1:93:e7:dc:f9:3a:10:3c:88:84:80:44:6a:86: 44:0e:54:f2:2b:d4:a9:9a:45:4b:28:a5:f7:33:5d: c0:13:56:d5:22:f2:7d:27:e0:4b:3e:ba:8e:87:c8: 28:75:27:8e:77:6a:d7:b6:ce:ff:1d:c5:e5:bf:45: 00:04:4e:be:8f:ae:a6:50:6d:58:de:22:a9:6c:88: bc:9a:59:62:6f:41:0e:35:3e:6d:21:d3:48:d1:7c: 10:f9:9d:cb:17:78:b6:22:c8:53:7b:d7:98:54:59: 3e:12:b3:6e:52:56:79:18:a1:2f:58:24:e2:47:7f: 69:0f:fe:15:a2:46:d2:26:b3:6b:aa:38:df:c8:04: 12:90:23:88:25:db:fb:2c:e0:f2:fc:c2:1e:9e:dc: 74:2e:6f:da:e4:c2:2f:7d:3b:b3:e5:d8:98:63:98: 92:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3C:2A:9B:EA:7B:24:14:23:5A:BA:62:C4:6B:1A:46:BF:84:4E:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e1c68eb-3226-3840-9908-9bb928de3ba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 65.216.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:fa:61:0e:4d:55:d9:9d:6e:ac:a6:ff:43:4c:58:be:5c:65: 68:85:68:8c:25:7f:ae:fc:42:31:38:ac:f5:db:7e:d5:a8:cb: 31:7e:06:d5:34:6c:29:9a:27:e7:b0:88:a1:64:bf:c9:fb:bb: 13:5d:77:a5:91:f0:48:89:c9:63:a3:1f:a9:87:bb:c0:c1:f7: 39:1e:e7:5a:cc:ee:ca:cf:b0:d8:04:f6:41:ea:28:a7:49:aa: b9:de:50:02:4a:66:c7:36:b6:31:f2:83:cb:28:9d:33:c0:84: 5e:58:0f:22:5e:ba:c9:60:b3:78:06:a8:a9:33:1f:10:b7:10: 02:09:42:35:62:38:49:11:44:c4:9e:df:16:14:14:c6:f6:c0: 09:d9:05:09:a9:9b:d1:a1:68:94:a6:95:66:d6:33:22:95:d7: d7:c5:ca:6e:2a:3c:5b:9a:44:2d:d3:ee:ac:a4:d8:76:95:e9: 49:36:b6:9a:25:f3:38:2c:78:e0:08:e7:ed:47:06:0a:d1:71: de:61:5d:e6:b3:80:b4:cb:3d:62:45:78:6d:3c:2a:a1:e3:91: 7f:e4:42:fc:90:3d:54:65:0f:b5:81:20:b6:41:84:57:ae:2c: 0c:89:39:f4:94:c7:48:ef:c3:e0:33:59:4d:9f:2b:36:15:ef: d9:5b:05:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEqJc24BBwq0j0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk Yjg4MzA4OGQtMTZlMS00MDA1LTkxYzEtMWJmY2JhYjM1ZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWziolCkFPbaDdGR4MNf+En3ZFnPpwi1TnDO FWdL/KSjJEb0OjuV46q0nFc2tfVUZQoBvUVlcf++ilAE4DegtziEWDQ04zx4iMia TZdy4uuzkjVTPSxME4mk8ZPn3Pk6EDyIhIBEaoZEDlTyK9SpmkVLKKX3M13AE1bV IvJ9J+BLPrqOh8godSeOd2rXts7/HcXlv0UABE6+j66mUG1Y3iKpbIi8mllib0EO NT5tIdNI0XwQ+Z3LF3i2IshTe9eYVFk+ErNuUlZ5GKEvWCTiR39pD/4VokbSJrNr qjjfyAQSkCOIJdv7LODy/MIentx0Lm/a5MIvfTuz5diYY5iS4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ48KpvqeyQUI1q6YsRrGka/hE6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGUxYzY4ZWItMzIyNi0z ODQwLTk5MDgtOWJiOTI4ZGUzYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQdjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALD6YQ5NVdmdbqym/0NMWL5cZWiFaIwlf678QjE4rPXbftWoyzF+BtU0 bCmaJ+ewiKFkv8n7uxNdd6WR8EiJyWOjH6mHu8DB9zke51rM7srPsNgE9kHqKKdJ qrneUAJKZsc2tjHyg8sonTPAhF5YDyJeuslgs3gGqKkzHxC3EAIJQjViOEkRRMSe 3xYUFMb2wAnZBQmpm9GhaJSmlWbWMyKV19fFym4qPFuaRC3T7qyk2HaV6Uk2tpol 8zgseOAI5+1HBgrRcd5hXeazgLTLPWJFeG08KqHjkX/kQvyQPVRlD7WBILZBhFeu LAyJOfSUx0jvw+AzWU2fKzYV79lbBdU= -----END CERTIFICATE-----Generated at Sat Apr 5 18:44:58 2025 by rpki-client