$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9976b2fb-b203-3175-a71d-677938bf8dd6.roa File: 9976b2fb-b203-3175-a71d-677938bf8dd6.roa (raw, json) Hash identifier: LwJLLZkf9s8/BTYKA2q2qhPNeIq3uR3gWuGEk/VDuhc= Subject key identifier: A1:7B:C9:18:35:66:94:71:B5:9A:39:99:A0:8B:62:8D:73:0B:5C:31 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D24AF437ADCD851ABE00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9976b2fb-b203-3175-a71d-677938bf8dd6.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 108.22.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d2:4a:f4:37:ad:cd:85:1a:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=a3c863fa-aa94-4a6c-92df-1187ee958d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7e:94:d9:2b:57:07:6d:47:0b:3d:7f:e5:63: cf:a9:95:54:e3:97:f8:6f:4e:86:ae:e3:a3:6e:da: 57:07:b6:1f:8e:3e:09:76:00:53:fb:3b:f2:de:93: e9:2a:73:1b:5b:b6:b3:f1:3b:8c:86:6c:55:69:0b: 6a:66:7a:ad:8d:70:c7:ee:6a:d4:34:7b:6b:8c:66: 01:46:96:2b:10:3c:6c:9e:c3:97:61:9f:0a:d7:b3: 46:b5:79:bc:65:57:c6:1f:fd:73:d6:b4:c1:05:7e: 23:fe:fb:5f:fc:4d:94:c2:b0:0a:8e:15:63:0e:dd: 3f:98:39:88:ef:17:5e:81:fa:fa:0d:b5:71:b8:0a: 8d:56:c8:23:80:8a:9d:5e:2e:23:0e:a0:c8:06:7b: ca:4a:c1:0f:6f:25:5e:2c:3c:30:d6:5f:d3:e2:f4: ac:86:90:37:29:e5:8e:ca:56:e9:ba:c4:4f:e4:aa: c8:5b:74:32:ca:0a:af:71:20:49:7c:1f:cd:c0:2c: 3a:1e:88:6e:d1:1b:75:d2:da:ed:20:b4:dd:53:bd: 5d:8c:e1:87:da:e0:0b:96:28:b6:21:e7:6e:1e:22: dc:76:8f:02:0c:cf:d5:fa:95:5f:0a:c8:d6:0d:0c: 39:59:a2:d5:69:89:b4:02:74:3d:2e:f8:22:b4:bb: d1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7B:C9:18:35:66:94:71:B5:9A:39:99:A0:8B:62:8D:73:0B:5C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9976b2fb-b203-3175-a71d-677938bf8dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:87:c9:cd:3b:44:2a:b0:9e:9a:dd:05:11:28:12:88:07:c7: 9a:bd:a4:3d:1b:ec:4e:8d:08:89:c8:a5:99:5c:86:d9:48:d9: f4:e8:a3:a6:6a:e8:1c:f6:06:d0:d4:05:e4:7b:21:4d:33:7c: 5c:e7:c2:6c:ed:90:1b:82:93:60:bd:c9:0e:16:62:21:09:5a: a6:ba:ad:2e:2c:50:53:4f:fd:14:87:c8:8d:91:be:6b:f2:b5: 5c:6d:64:67:75:f1:df:e6:86:49:3d:20:0b:14:a4:ef:fc:de: 70:23:99:0e:92:f5:4d:15:26:72:4b:b2:ad:0d:38:d6:15:36: 93:79:03:41:1a:93:8d:48:15:6f:26:80:fd:4f:fc:fd:4a:c4: 82:f0:88:dc:38:d8:d1:5b:7f:25:43:f3:f3:67:e7:f7:8e:a3: 43:f7:38:96:f6:d9:1b:3c:b3:9b:33:0f:75:7c:ae:39:30:a7: dc:7c:1c:f7:8e:66:cf:bf:05:c3:88:ec:5d:5c:db:0d:9e:81: e3:92:1d:30:0c:c6:d1:9d:a1:85:ae:7b:44:bc:5e:3b:a1:29: 32:bb:cf:e8:70:14:5f:08:3b:a0:06:fd:ea:49:ae:06:3b:ec: c9:a6:b5:30:3a:00:f6:ca:3b:1e:b9:d6:66:b2:25:3a:32:87: e9:1a:ff:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtJK9DetzYUavgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YTNjODYzZmEtYWE5NC00YTZjLTkyZGYtMTE4N2VlOTU4ZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX6U2StXB21HCz1/5WPPqZVU45f4b06GruOj btpXB7Yfjj4JdgBT+zvy3pPpKnMbW7az8TuMhmxVaQtqZnqtjXDH7mrUNHtrjGYB RpYrEDxsnsOXYZ8K17NGtXm8ZVfGH/1z1rTBBX4j/vtf/E2UwrAKjhVjDt0/mDmI 7xdegfr6DbVxuAqNVsgjgIqdXi4jDqDIBnvKSsEPbyVeLDww1l/T4vSshpA3KeWO ylbpusRP5KrIW3QyygqvcSBJfB/NwCw6Hohu0Rt10trtILTdU71djOGH2uALlii2 IeduHiLcdo8CDM/V+pVfCsjWDQw5WaLVaYm0AnQ9LvgitLvRNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF7yRg1ZpRxtZo5maCLYo1zC1wxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTk3NmIyZmItYjIwMy0z MTc1LWE3MWQtNjc3OTM4YmY4ZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbBbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmHyc07RCqwnprdBREoEogHx5q9pD0b7E6NCInIpZlchtlI2fToo6Zq 6Bz2BtDUBeR7IU0zfFznwmztkBuCk2C9yQ4WYiEJWqa6rS4sUFNP/RSHyI2Rvmvy tVxtZGd18d/mhkk9IAsUpO/83nAjmQ6S9U0VJnJLsq0NONYVNpN5A0Eak41IFW8m gP1P/P1KxILwiNw42NFbfyVD8/Nn5/eOo0P3OJb22Rs8s5szD3V8rjkwp9x8HPeO Zs+/BcOI7F1c2w2egeOSHTAMxtGdoYWue0S8XjuhKTK7z+hwFF8IO6AG/epJrgY7 7MmmtTA6APbKOx651mayJToyh+ka/10= -----END CERTIFICATE-----Generated at Sun Apr 6 05:18:40 2025 by rpki-client