$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b04685c-198f-3930-8130-bd1a003c13da.roa File: 9b04685c-198f-3930-8130-bd1a003c13da.roa (raw, json) Hash identifier: rSTuu1mcJ+XUYKeHq1IJrV3Vln0c4A1lj23tohC6eP0= Subject key identifier: 60:19:CD:83:07:0B:F4:E0:07:B5:ED:AC:1B:4E:E2:03:98:4E:B0:26 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D1AF58CF7A178CD8BA38 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b04685c-198f-3930-8130-bd1a003c13da.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 108.11.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d1:af:58:cf:7a:17:8c:d8:ba:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=ab995118-188d-49b5-8e91-f3ad2c6c4294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bf:71:75:b5:b8:6d:a4:9d:0e:9f:87:ee:0e: 0a:b2:e5:00:70:ec:d8:b2:34:c5:bc:b1:e2:b3:44: a5:ea:62:9f:b7:0f:ca:7d:d1:14:73:3d:1c:a5:01: 1c:b8:a1:1c:8f:d8:a5:6a:75:fb:88:34:24:9f:ee: 98:97:0e:d8:21:c7:e1:f6:48:35:b1:c4:43:b4:03: 5d:f3:fa:2d:4b:a4:14:cd:ba:e8:d2:4e:4a:42:ec: 3b:be:a7:fa:67:93:6c:22:eb:50:df:c8:a0:b4:46: f3:e4:6c:3f:cf:8c:c5:d5:11:97:de:b2:92:bc:22: bf:54:02:1c:30:6f:14:a5:28:ba:c8:00:bd:28:a6: ff:10:1a:d9:81:01:11:05:b2:bc:80:4d:fd:b6:08: a7:02:d6:b5:8f:67:30:32:ba:33:a1:06:a1:89:c4: 4d:b7:b5:f8:eb:ed:9f:a0:57:7a:00:fb:e9:21:ce: 88:12:20:0f:0a:36:c7:05:17:0b:3b:63:a0:90:8b: 2b:d8:b1:90:ac:b1:dd:ef:36:26:a1:cd:d5:27:6c: 43:92:c9:52:9b:9c:f1:c7:23:a1:81:ab:d5:3a:5e: e9:78:a7:e4:5e:5f:f4:26:a7:4a:f4:d3:d5:5a:db: 84:d7:dd:34:d0:48:82:f7:ee:82:a6:9c:47:91:55: e8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:19:CD:83:07:0B:F4:E0:07:B5:ED:AC:1B:4E:E2:03:98:4E:B0:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b04685c-198f-3930-8130-bd1a003c13da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.11.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:11:b1:d5:46:40:81:5f:9d:5c:c1:53:bb:75:af:2a:81:f4: 9c:12:4d:5b:25:bc:f4:8f:7a:cb:7c:4f:0f:df:9f:f9:33:57: 10:3c:39:bf:d6:96:e9:0b:dd:b5:a2:7f:36:ac:5d:31:24:7e: cd:1f:99:14:50:f2:c2:90:c4:72:b4:fb:0c:c2:6c:2c:3d:09: 6e:fe:18:1f:9a:3c:ec:02:ff:31:49:a9:e3:71:60:90:c4:87: 31:19:7d:9b:0f:50:9c:96:ec:00:da:0c:e3:d3:17:a5:c3:5d: d5:5b:0f:29:d3:03:f9:a1:ba:9c:ab:08:81:f6:80:95:11:6c: 05:92:45:fe:b1:17:b1:89:50:bb:c3:e9:3b:af:d0:7a:83:04: 29:b4:b5:a2:5f:5a:7e:69:b2:45:e9:38:19:c9:7b:3b:24:93: e9:42:2b:1a:d6:19:d3:66:e1:97:ea:4c:76:87:f0:ad:7e:fd: 14:e8:70:68:c3:86:67:96:ed:34:73:03:bf:8f:1f:5c:37:2c: f5:87:2f:a8:a6:76:a3:68:c4:3e:7a:28:09:1e:d8:0c:61:18: bc:66:f4:0c:9f:b9:89:89:a5:5f:af:b3:61:01:f4:b8:f5:e0: cc:e9:f9:65:6f:e2:61:1b:12:e4:0a:00:b5:b1:29:e2:24:e6: 32:56:1d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtGvWM96F4zYujgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YWI5OTUxMTgtMTg4ZC00OWI1LThlOTEtZjNhZDJjNmM0Mjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL9xdbW4baSdDp+H7g4KsuUAcOzYsjTFvLHi s0Sl6mKftw/KfdEUcz0cpQEcuKEcj9ilanX7iDQkn+6Ylw7YIcfh9kg1scRDtANd 8/otS6QUzbro0k5KQuw7vqf6Z5NsIutQ38igtEbz5Gw/z4zF1RGX3rKSvCK/VAIc MG8UpSi6yAC9KKb/EBrZgQERBbK8gE39tginAta1j2cwMrozoQahicRNt7X46+2f oFd6APvpIc6IEiAPCjbHBRcLO2OgkIsr2LGQrLHd7zYmoc3VJ2xDkslSm5zxxyOh gavVOl7peKfkXl/0JqdK9NPVWtuE19000EiC9+6CppxHkVXoFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAZzYMHC/TgB7XtrBtO4gOYTrAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWIwNDY4NWMtMTk4Zi0z OTMwLTgxMzAtYmQxYTAwM2MxM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbAuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQRsdVGQIFfnVzBU7t1ryqB9JwSTVslvPSPest8Tw/fn/kzVxA8Ob/W lukL3bWifzasXTEkfs0fmRRQ8sKQxHK0+wzCbCw9CW7+GB+aPOwC/zFJqeNxYJDE hzEZfZsPUJyW7ADaDOPTF6XDXdVbDynTA/mhupyrCIH2gJURbAWSRf6xF7GJULvD 6Tuv0HqDBCm0taJfWn5pskXpOBnJezskk+lCKxrWGdNm4ZfqTHaH8K1+/RTocGjD hmeW7TRzA7+PH1w3LPWHL6imdqNoxD56KAke2AxhGLxm9AyfuYmJpV+vs2EB9Lj1 4Mzp+WVv4mEbEuQKALWxKeIk5jJWHVg= -----END CERTIFICATE-----Generated at Sun Apr 6 06:04:44 2025 by rpki-client