$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4ca35b5-0120-363f-8788-e3c5e35a4c2a.roa File: a4ca35b5-0120-363f-8788-e3c5e35a4c2a.roa (raw, json) Hash identifier: ty93YCPyCWL6SxrJMfMBDqcJedeMl/YoQ7Rp/83t9Jk= Subject key identifier: 5B:7C:FF:3E:D7:2D:66:A4:F3:B7:3F:82:91:B0:C2:24:EC:22:AC:6F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC061103F4B251A51EFC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4ca35b5-0120-363f-8788-e3c5e35a4c2a.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.96.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:06:11:03:f4:b2:51:a5:1e:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=e958b368-81e5-4cd2-ab8f-253049cac6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:22:24:e0:65:4a:be:94:2c:5c:5d:84:47: cf:63:38:25:55:57:f2:7e:13:ed:fd:ef:8a:06:ee: 44:4b:54:83:fd:a4:e8:06:14:39:fd:39:fe:f7:95: f6:a5:e2:ab:6d:08:15:20:99:8b:7d:59:97:2c:ee: 5e:68:41:0a:28:b0:5c:5a:2b:bb:6f:0d:1a:fa:d6: c0:5c:21:29:72:10:7c:69:38:1b:11:8b:00:1b:b3: 90:5d:29:63:fe:ca:b9:2e:23:56:4c:09:19:ae:48: 75:6b:64:3f:0f:a3:56:ef:5c:09:6a:2a:37:cd:95: 53:81:e0:84:8a:7f:4a:86:5a:20:e7:bf:bb:b4:79: 68:7d:40:e9:d0:6f:00:dc:77:a5:b0:0e:18:7c:43: 4f:c9:ba:2c:ac:7b:ed:55:e0:8e:26:5e:24:4a:d1: b0:74:9d:1d:c4:d8:00:7a:da:a0:ac:40:9b:16:a0: c3:2c:5c:9b:a5:37:54:18:94:fe:0d:39:18:dd:38: d1:b3:3f:27:be:30:2f:51:e6:75:87:ef:2b:f1:c7: 4e:1b:04:2d:08:61:44:a9:26:1f:23:22:f2:19:f1: 1a:ab:9a:2f:34:51:b0:31:2c:4e:5d:37:7b:5e:0b: c9:0c:88:a1:03:b9:3d:2c:70:99:a5:c7:b6:75:08: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7C:FF:3E:D7:2D:66:A4:F3:B7:3F:82:91:B0:C2:24:EC:22:AC:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4ca35b5-0120-363f-8788-e3c5e35a4c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:55:b9:ac:86:46:20:6b:8e:5b:8a:ed:8e:a2:9e:79:a3:44: f6:2c:1a:e1:b1:eb:f9:8d:17:e0:0a:1e:d4:89:c3:e8:12:63: 4b:f7:ab:39:b7:9d:fa:03:81:7d:41:a9:73:48:68:60:10:ea: d5:e1:06:b6:74:4e:29:dd:94:97:c0:e7:29:af:d7:96:88:f7: 45:d4:ee:fd:12:e1:da:88:d8:b5:d5:b0:40:ce:37:91:7e:21: ce:f4:40:e0:43:39:ad:05:13:bc:98:d3:f6:a7:29:8d:a0:ef: ec:ae:37:d9:e3:4a:38:0d:27:53:79:b2:6f:27:21:56:09:4f: c6:4e:b1:7b:4e:2c:7c:b5:d3:53:39:51:44:8c:d8:57:15:85: bb:e5:a3:55:0f:c9:1c:86:f7:c4:d0:83:32:cb:a4:22:e7:8e: ce:a9:44:af:ef:53:ee:26:9b:21:d9:65:50:d9:eb:c8:36:3b: 6c:0a:f2:6d:fe:a1:3e:d9:92:d3:bc:74:40:70:3c:46:0d:18: 5b:d3:71:64:ee:12:9c:79:76:e2:10:86:c7:69:16:14:7e:31: 61:5a:f8:3c:3d:95:12:93:f1:ff:08:08:5f:85:23:62:8f:b3: 04:26:d8:7e:df:50:93:db:2c:e5:eb:b0:af:86:e2:c6:4c:ac: 8c:92:29:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AYRA/SyUaUe/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTk1OGIzNjgtODFlNS00Y2QyLWFiOGYtMjUzMDQ5Y2FjNmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE4iJOBlSr6ULFxdhEfPYzglVVfyfhPt/e+K Bu5ES1SD/aToBhQ5/Tn+95X2peKrbQgVIJmLfVmXLO5eaEEKKLBcWiu7bw0a+tbA XCEpchB8aTgbEYsAG7OQXSlj/sq5LiNWTAkZrkh1a2Q/D6NW71wJaio3zZVTgeCE in9Khlog57+7tHlofUDp0G8A3HelsA4YfENPybosrHvtVeCOJl4kStGwdJ0dxNgA etqgrECbFqDDLFybpTdUGJT+DTkY3TjRsz8nvjAvUeZ1h+8r8cdOGwQtCGFEqSYf IyLyGfEaq5ovNFGwMSxOXTd7XgvJDIihA7k9LHCZpce2dQh+YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt8/z7XLWak87c/gpGwwiTsIqxvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTRjYTM1YjUtMDEyMC0z NjNmLTg3ODgtZTNjNWUzNWE0YzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBVuayGRiBrjluK7Y6innmjRPYsGuGx6/mNF+AKHtSJw+gSY0v3qzm3 nfoDgX1BqXNIaGAQ6tXhBrZ0TindlJfA5ymv15aI90XU7v0S4dqI2LXVsEDON5F+ Ic70QOBDOa0FE7yY0/anKY2g7+yuN9njSjgNJ1N5sm8nIVYJT8ZOsXtOLHy101M5 UUSM2FcVhbvlo1UPyRyG98TQgzLLpCLnjs6pRK/vU+4mmyHZZVDZ68g2O2wK8m3+ oT7ZktO8dEBwPEYNGFvTcWTuEpx5duIQhsdpFhR+MWFa+Dw9lRKT8f8ICF+FI2KP swQm2H7fUJPbLOXrsK+G4sZMrIySKeM= -----END CERTIFICATE-----Generated at Thu Apr 10 05:23:33 2025 by rpki-client