$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b33085c1-0646-3575-8641-5c9a64b050f0.roa File: b33085c1-0646-3575-8641-5c9a64b050f0.roa (raw, json) Hash identifier: rSxv6fhkSgRmZE7gFFuCkCi9/RBnWyLa3hWqL/+veYs= Subject key identifier: B0:68:42:85:34:E8:10:38:02:FE:CE:8D:0F:7A:9C:87:D6:59:42:46 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC0EBE813D4644183C8AC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b33085c1-0646-3575-8641-5c9a64b050f0.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.104.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:0e:be:81:3d:46:44:18:3c:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=fbc4ce11-5954-4a5e-b9e8-ebbd77b70383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:72:7a:bb:b1:e1:c8:eb:25:14:60:e5:c9:e3: 08:75:0e:83:1a:1b:d1:c3:e3:36:c3:cb:2c:bc:d1: 38:b3:4e:5d:29:f6:80:38:82:04:4c:e1:95:bb:9c: 15:d9:4f:8a:d6:78:f4:6e:44:66:56:27:05:76:35: 44:5f:41:8f:e5:99:b4:7b:f1:fb:cd:b9:c4:4f:5c: a9:8d:f5:8d:d7:3b:4b:7a:54:91:99:e2:fa:42:45: 1c:9f:54:eb:58:3c:5b:50:65:7e:1f:3e:1e:3d:8b: 8d:d4:89:35:ee:e8:75:19:e6:c1:43:f1:cf:d0:19: 74:bb:2e:a2:ff:83:a4:02:b6:f7:1e:e6:99:94:5e: 68:fa:5f:69:83:a2:f9:bb:08:9e:46:64:af:b0:a1: 1f:dd:bf:72:60:5f:74:09:46:e7:c0:ee:fa:54:cb: 9d:61:57:c8:c9:a9:cd:75:8d:98:07:1e:aa:6d:46: 20:3a:8e:81:c6:92:ff:b2:f8:29:1b:f5:7f:9e:da: 59:08:db:30:41:6a:01:0b:a5:af:93:aa:5b:84:8f: 18:c3:e3:84:56:0b:cb:73:71:67:ba:8c:4f:5b:5e: 36:1d:14:1b:a5:61:1a:0f:ee:6f:19:ae:a1:86:0d: 92:ac:59:9f:c0:48:1b:1c:87:42:f6:95:d6:72:ba: 3f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:68:42:85:34:E8:10:38:02:FE:CE:8D:0F:7A:9C:87:D6:59:42:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b33085c1-0646-3575-8641-5c9a64b050f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.104.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:24:a4:15:54:22:70:25:f4:51:ff:55:a5:3e:f2:0f:05:62: 78:0b:93:43:d7:eb:f5:1a:35:25:0e:41:94:46:a5:0f:bc:f6: da:95:45:dc:84:50:f9:33:06:33:07:53:84:e2:42:e3:e4:71: 8b:26:01:be:31:dc:50:e5:47:bb:c6:41:e1:7a:37:19:49:8d: b5:91:cd:0b:54:d0:ff:44:52:0a:33:92:fb:5c:f9:97:c0:07: ce:78:ec:2e:07:78:ba:39:af:88:89:96:71:5f:8d:6b:37:32: c6:e0:12:fc:06:b6:bc:af:e2:16:b1:ae:36:21:24:45:e1:a5: ef:72:ca:70:91:f0:19:e9:0f:5d:2d:31:49:84:00:04:af:5b: f7:f6:71:c0:ba:e6:0e:1c:67:85:f4:ab:a6:05:2c:d8:e2:67: d6:2b:7a:56:55:1d:0b:e6:8d:f6:61:59:a5:a2:b4:d6:a0:be: c0:ce:98:e2:29:95:3b:59:88:3a:02:9e:ee:95:5b:4c:b6:ce: 4a:db:29:20:b0:54:2d:47:7d:a6:c4:d8:de:d1:16:63:4a:bb: 8b:95:2f:59:1b:d0:3a:f6:12:02:1d:eb:fc:6a:ff:0c:4d:d7: e0:3a:1b:33:94:af:72:ae:3d:48:7c:5e:80:da:b5:c7:62:31: a5:a0:24:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3A6+gT1GRBg8isAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZmJjNGNlMTEtNTk1NC00YTVlLWI5ZTgtZWJiZDc3YjcwMzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HJ6u7HhyOslFGDlyeMIdQ6DGhvRw+M2w8ss vNE4s05dKfaAOIIETOGVu5wV2U+K1nj0bkRmVicFdjVEX0GP5Zm0e/H7zbnET1yp jfWN1ztLelSRmeL6QkUcn1TrWDxbUGV+Hz4ePYuN1Ik17uh1GebBQ/HP0Bl0uy6i /4OkArb3HuaZlF5o+l9pg6L5uwieRmSvsKEf3b9yYF90CUbnwO76VMudYVfIyanN dY2YBx6qbUYgOo6BxpL/svgpG/V/ntpZCNswQWoBC6Wvk6pbhI8Yw+OEVgvLc3Fn uoxPW142HRQbpWEaD+5vGa6hhg2SrFmfwEgbHIdC9pXWcro/0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBoQoU06BA4Av7OjQ96nIfWWUJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjMzMDg1YzEtMDY0Ni0z NTc1LTg2NDEtNWM5YTY0YjA1MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUkpBVUInAl9FH/VaU+8g8FYngLk0PX6/UaNSUOQZRGpQ+89tqVRdyE UPkzBjMHU4TiQuPkcYsmAb4x3FDlR7vGQeF6NxlJjbWRzQtU0P9EUgozkvtc+ZfA B8547C4HeLo5r4iJlnFfjWs3MsbgEvwGtryv4haxrjYhJEXhpe9yynCR8BnpD10t MUmEAASvW/f2ccC65g4cZ4X0q6YFLNjiZ9YrelZVHQvmjfZhWaWitNagvsDOmOIp lTtZiDoCnu6VW0y2zkrbKSCwVC1HfabE2N7RFmNKu4uVL1kb0Dr2EgId6/xq/wxN 1+A6GzOUr3KuPUh8XoDatcdiMaWgJDM= -----END CERTIFICATE-----Generated at Sun Apr 6 10:04:15 2025 by rpki-client