$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa File: aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa (raw, json) Hash identifier: yJDjxBc8/Bpc9FZ2TmI57fTMpCXVgKqbB803JgAHeQU= Subject key identifier: 26:10:40:0A:B1:89:B8:74:D3:D5:BB:DB:F0:C0:FE:68:3A:55:65:BD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246FB393839FF5A368DF300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 173.59.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:fb:39:38:39:ff:5a:36:8d:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=4cd98582-2524-4fda-a79b-5a246423b6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:f9:eb:0f:57:a5:98:fe:8c:2c:ff:75:d7: 0b:73:6d:13:73:8c:42:f6:47:db:59:cd:50:92:e3: 71:73:1c:7c:eb:cc:47:9b:1e:04:f9:d3:63:2c:1d: 6a:c7:55:76:23:98:b8:ce:17:1c:4d:10:92:6b:87: 56:5b:dc:ed:9c:62:2d:0d:30:f0:62:79:36:e6:6d: a0:f6:c2:e0:67:ae:0f:6f:6f:69:43:d0:3e:b8:c3: c0:51:db:20:01:2c:e3:23:1a:2c:bd:8c:bf:3a:a4: 33:58:51:fa:5c:88:7c:55:1e:ad:49:d5:34:a1:6b: 0b:c7:b9:90:f6:f0:f0:a1:94:95:bd:5b:8c:d2:39: 0d:ae:6a:48:25:46:88:60:cb:ee:00:76:3c:8b:0c: 69:27:0e:2d:d7:b1:06:68:37:f4:45:da:8a:21:1b: 45:fd:ef:86:35:b8:6a:30:ce:00:12:54:55:27:9a: 59:d9:eb:f9:df:79:73:cf:90:6a:00:5c:f8:a9:04: cc:a1:09:9c:64:21:8c:e9:ef:0c:52:cc:cf:cc:40: 69:81:92:19:5b:ff:13:40:4a:54:54:32:04:19:98: cb:af:1a:f3:99:c6:f4:a9:73:ed:98:6d:c8:88:b2: c7:b2:c9:9b:5d:18:97:84:57:20:97:9c:de:6d:cd: 8d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:10:40:0A:B1:89:B8:74:D3:D5:BB:DB:F0:C0:FE:68:3A:55:65:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.59.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:19:17:0e:dd:c1:fd:af:93:9e:3f:26:0d:c6:14:62:ac:01: 73:8b:46:44:af:eb:65:0a:37:84:a8:ef:aa:a7:b3:ee:2c:2f: c5:6b:60:65:42:ae:34:e8:f1:17:d0:a7:17:49:c0:f1:be:3f: e2:41:52:3d:75:06:96:46:17:1c:7a:97:1e:e1:3a:03:32:55: d5:77:b5:eb:df:c9:13:28:a0:23:8b:10:a7:c9:0e:0c:d2:4a: 1d:ea:e2:d5:da:66:c0:bd:01:b9:7e:12:cd:8d:a6:b3:03:c5: 04:a9:4a:de:07:e0:f8:c6:45:d0:8b:8c:3f:d4:85:69:09:d1: cf:41:0d:c7:08:ba:b6:01:8c:91:1b:e7:f8:9b:c2:23:8e:1d: 30:5e:66:5e:4e:80:69:20:f0:85:c5:91:63:2c:68:99:13:18: d7:bb:e7:b3:e2:57:60:fd:0b:f3:f5:4a:39:11:70:47:7e:d3: b8:7d:21:93:f2:bc:8c:0c:6e:6b:3e:da:2a:5b:4d:b1:20:b4: 9d:ea:6b:bb:4f:18:e3:4d:ac:96:02:6c:79:12:27:e0:e1:8e: 0f:be:6a:f8:df:ea:35:89:20:16:71:1c:9a:91:3f:1f:6e:7b: 15:c6:62:35:f5:43:81:03:1a:b4:be:47:b4:e8:cd:8e:01:90: d9:80:f8:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvs5ODn/WjaN8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NGNkOTg1ODItMjUyNC00ZmRhLWE3OWItNWEyNDY0MjNiNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirf56w9XpZj+jCz/ddcLc20Tc4xC9kfbWc1Q kuNxcxx868xHmx4E+dNjLB1qx1V2I5i4zhccTRCSa4dWW9ztnGItDTDwYnk25m2g 9sLgZ64Pb29pQ9A+uMPAUdsgASzjIxosvYy/OqQzWFH6XIh8VR6tSdU0oWsLx7mQ 9vDwoZSVvVuM0jkNrmpIJUaIYMvuAHY8iwxpJw4t17EGaDf0RdqKIRtF/e+GNbhq MM4AElRVJ5pZ2ev533lzz5BqAFz4qQTMoQmcZCGM6e8MUszPzEBpgZIZW/8TQEpU VDIEGZjLrxrzmcb0qXPtmG3IiLLHssmbXRiXhFcgl5zebc2NCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYQQAqxibh009W72/DA/mg6VWW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWZmMmJmYjMtYzNkMC0z ZTAyLTkyYzgtNjM0NTFjZjc1NjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrTtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIZFw7dwf2vk54/Jg3GFGKsAXOLRkSv62UKN4So76qns+4sL8VrYGVC rjTo8RfQpxdJwPG+P+JBUj11BpZGFxx6lx7hOgMyVdV3tevfyRMooCOLEKfJDgzS Sh3q4tXaZsC9Abl+Es2NprMDxQSpSt4H4PjGRdCLjD/UhWkJ0c9BDccIurYBjJEb 5/ibwiOOHTBeZl5OgGkg8IXFkWMsaJkTGNe757PiV2D9C/P1SjkRcEd+07h9IZPy vIwMbms+2ipbTbEgtJ3qa7tPGONNrJYCbHkSJ+Dhjg++avjf6jWJIBZxHJqRPx9u exXGYjX1Q4EDGrS+R7TozY4BkNmA+Ao= -----END CERTIFICATE-----Generated at Sun Apr 6 03:44:09 2025 by rpki-client