$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a609e0bb-bbc9-30a7-b4f9-3a7873fd4d1d.roa File: a609e0bb-bbc9-30a7-b4f9-3a7873fd4d1d.roa (raw, json) Hash identifier: ubAxiAbsoeI8PdK+OholMooNMqMpW1TbyGbbBZQnsj4= Subject key identifier: 50:84:0A:2E:CA:C2:9E:3A:4F:53:A3:F3:47:3B:AD:4C:B0:22:B1:A0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC0D18BF5CF6B3F2416820 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a609e0bb-bbc9-30a7-b4f9-3a7873fd4d1d.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.104.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:0d:18:bf:5c:f6:b3:f2:41:68:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=339ad0dd-e878-40c6-a28f-df40900ee49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:76:35:dd:52:86:44:03:7f:00:c2:1b:12:06: 91:d1:99:5b:59:ba:51:e9:8f:fa:df:89:61:16:ad: d6:e5:61:26:a1:1f:a6:2f:87:7c:56:90:9d:72:bd: 07:aa:32:6c:18:9b:21:89:df:8a:c3:02:b9:91:eb: 0a:c6:d9:a8:dc:2e:9a:54:5b:9a:f3:31:64:7a:ef: a2:11:2d:19:d9:b7:bc:19:ce:d5:24:11:bb:de:10: 9f:f8:7c:b2:23:99:51:4c:1d:83:5c:1c:0b:87:4a: b6:6f:9c:5d:e7:00:4b:00:e9:12:f0:34:7d:98:d4: fa:b2:5b:76:e9:a5:07:7f:bc:84:b1:52:bd:b2:b2: e4:b8:db:d0:45:69:3a:ad:24:d7:70:9b:a7:14:66: f9:cf:1c:fa:eb:e3:df:b4:99:0c:66:c1:e8:53:f0: 86:a2:51:af:d8:85:69:25:42:cb:f3:6c:46:18:33: b5:a5:7d:11:97:37:b9:1c:70:cb:ca:ea:43:52:d1: 8a:ad:64:e6:db:1c:61:b7:26:a1:ba:9d:68:40:bd: 6d:38:99:4a:c3:dc:98:a0:ce:d6:1d:de:62:39:4e: 28:05:3a:bb:5c:1c:99:e3:bf:6b:d3:92:c0:8a:f5: 02:eb:77:8c:5f:a4:05:9c:dd:f8:60:44:92:ba:40: 7a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:84:0A:2E:CA:C2:9E:3A:4F:53:A3:F3:47:3B:AD:4C:B0:22:B1:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a609e0bb-bbc9-30a7-b4f9-3a7873fd4d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.104.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8f:fa:d5:de:7d:5a:28:90:19:b6:52:fb:82:fd:74:10:47: 0e:29:bd:10:2a:75:7b:79:2b:6b:c4:d1:5f:b0:00:e2:06:e7: 83:8f:02:62:65:7d:59:b4:bf:d5:00:81:eb:37:e3:32:5a:67: ef:4f:17:fc:91:65:94:c6:7b:3e:e3:4e:30:10:4d:ac:1b:4a: cb:cb:c5:72:e6:51:cb:24:31:f0:6f:b1:e6:f3:b5:25:1a:05: 99:db:80:5a:90:22:6c:d8:9f:47:35:68:f6:a9:f4:fc:13:2d: 38:92:1b:16:0f:34:b6:0b:c5:77:90:81:71:1c:6b:d9:02:93: b5:e5:a1:b0:1f:fc:20:40:66:50:38:ad:25:51:31:7a:da:66: 4b:34:f5:e8:ff:11:c4:76:cf:ff:36:80:47:61:4b:7a:f3:81: b4:a4:b7:72:8b:0a:38:97:31:a8:07:8e:83:2e:48:00:bc:a0: 52:2b:70:ba:40:4b:b2:5b:fb:47:07:52:3e:d2:e4:e9:63:eb: 2c:52:42:57:69:2a:b6:5e:21:15:b3:21:e9:4a:4b:68:82:94: 9b:56:ea:75:d1:7a:c9:85:ee:30:6c:9b:aa:aa:a8:95:1b:52: 71:22:a2:00:fb:e1:52:7a:8e:9a:82:3f:41:43:5e:5f:58:46: 0b:b0:a6:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3A0Yv1z2s/JBaCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MzM5YWQwZGQtZTg3OC00MGM2LWEyOGYtZGY0MDkwMGVlNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHY13VKGRAN/AMIbEgaR0ZlbWbpR6Y/634lh Fq3W5WEmoR+mL4d8VpCdcr0HqjJsGJshid+KwwK5kesKxtmo3C6aVFua8zFkeu+i ES0Z2be8Gc7VJBG73hCf+HyyI5lRTB2DXBwLh0q2b5xd5wBLAOkS8DR9mNT6slt2 6aUHf7yEsVK9srLkuNvQRWk6rSTXcJunFGb5zxz66+PftJkMZsHoU/CGolGv2IVp JULL82xGGDO1pX0Rlze5HHDLyupDUtGKrWTm2xxhtyahup1oQL1tOJlKw9yYoM7W Hd5iOU4oBTq7XByZ479r05LAivUC63eMX6QFnN34YESSukB61wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCECi7Kwp46T1Oj80c7rUywIrGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTYwOWUwYmItYmJjOS0z MGE3LWI0ZjktM2E3ODczZmQ0ZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyP+tXefVookBm2UvuC/XQQRw4pvRAqdXt5K2vE0V+wAOIG54OPAmJl fVm0v9UAges34zJaZ+9PF/yRZZTGez7jTjAQTawbSsvLxXLmUcskMfBvsebztSUa BZnbgFqQImzYn0c1aPap9PwTLTiSGxYPNLYLxXeQgXEca9kCk7XlobAf/CBAZlA4 rSVRMXraZks09ej/EcR2z/82gEdhS3rzgbSkt3KLCjiXMagHjoMuSAC8oFIrcLpA S7Jb+0cHUj7S5Olj6yxSQldpKrZeIRWzIelKS2iClJtW6nXResmF7jBsm6qqqJUb UnEiogD74VJ6jpqCP0FDXl9YRguwppw= -----END CERTIFICATE-----Generated at Sun Apr 6 08:42:42 2025 by rpki-client