$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b38fa417-68e2-35fd-be67-57faa973b58f.roa File: b38fa417-68e2-35fd-be67-57faa973b58f.roa (raw, json) Hash identifier: cbInOvRlP2EIVDl8v4jTdzOaXIG1OFOSNhJTBhtZHpE= Subject key identifier: 22:11:6B:88:EB:50:99:E5:AC:76:F9:EC:E5:B3:3D:19:31:30:CB:69 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3E21DE96121BE5DB54B60 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b38fa417-68e2-35fd-be67-57faa973b58f.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.111.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:e2:1d:e9:61:21:be:5d:b5:4b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=41b0c2e4-4fa4-445d-84ac-09458cf85edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b5:11:09:b6:a7:2c:90:6c:fa:1e:2c:0e:c2: 35:12:48:45:02:c8:ae:81:72:61:a8:11:c0:eb:aa: 6c:e0:6b:56:1f:52:8f:95:87:f2:3a:b1:54:cc:0a: 3f:12:cb:0a:dd:4b:1b:95:6a:34:fc:40:ed:ee:50: 3f:22:ce:9e:26:e7:91:fe:fe:fe:64:2e:b0:ab:3c: 06:e0:28:ec:8c:f7:47:83:56:a6:cd:a0:34:06:0c: 15:97:a1:d4:f9:42:42:c6:67:ec:81:8f:5c:a8:7b: 10:21:9b:d8:1c:85:62:c7:49:d6:92:41:20:5c:28: cc:ba:27:97:95:6a:17:cf:46:4d:7e:ea:68:88:b7: 09:1e:fc:42:ec:3f:ba:60:69:c2:c4:b6:1d:ea:47: a2:88:71:17:1a:37:75:2e:21:4b:95:fe:f6:00:df: 15:6d:22:de:08:4d:61:96:8f:bf:c4:38:41:b7:13: 00:87:a3:b3:fe:cc:f0:69:fb:92:e9:e3:e5:cc:02: 23:b8:7d:07:65:fe:82:28:9b:13:58:fe:41:26:ad: 3a:27:2d:34:52:ff:10:be:ee:fe:a1:c8:20:2f:3c: d3:7a:8a:1a:b0:4b:3b:4c:6a:1f:9f:4b:cf:43:3c: 68:95:32:a0:47:84:51:7e:21:07:66:ab:c9:6a:9d: c1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:11:6B:88:EB:50:99:E5:AC:76:F9:EC:E5:B3:3D:19:31:30:CB:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b38fa417-68e2-35fd-be67-57faa973b58f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.111.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:74:90:5a:ea:3c:25:bf:08:f4:32:69:72:24:23:32:ea:09: cd:98:76:ea:e0:2d:18:2e:51:8e:7b:8f:30:c5:12:9a:08:af: 17:51:2e:d3:9c:c9:fe:64:20:74:8f:04:c2:d3:e1:a7:74:96: c3:5a:d6:7d:ca:46:e2:10:5b:09:05:63:46:99:3b:cd:5d:e7: 05:04:49:23:2a:93:81:90:cb:c2:6e:dd:ec:10:cb:cd:cb:6f: ae:d8:6b:8b:57:86:72:3b:eb:74:18:53:6e:07:20:7b:a6:1a: 6e:2f:45:34:e4:68:31:16:5c:95:4e:4b:d4:14:1f:2c:4e:46: 4c:d2:4a:49:e7:21:24:25:4e:5b:00:73:dd:4a:88:03:cd:de: f9:f6:67:16:eb:ad:54:89:84:a8:bb:87:d4:bb:5b:42:e0:0a: b2:d9:9a:6a:66:94:f4:db:42:ff:e4:5e:5c:9b:77:ed:23:33: e1:82:3e:54:82:e4:16:58:b3:58:5e:bf:93:91:eb:b1:7b:fa: 1b:a4:b9:f8:e8:91:7f:b2:d0:ed:30:1e:83:9d:34:16:5d:59: 1b:3f:62:df:61:60:ce:37:ca:35:38:2e:44:44:95:fa:f4:44: d1:40:a0:77:68:43:b8:3f:7a:37:99:0e:73:a7:df:a8:7b:f8: d0:a3:7b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+Id6WEhvl21S2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk NDFiMGMyZTQtNGZhNC00NDVkLTg0YWMtMDk0NThjZjg1ZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LURCbanLJBs+h4sDsI1EkhFAsiugXJhqBHA 66ps4GtWH1KPlYfyOrFUzAo/EssK3UsblWo0/EDt7lA/Is6eJueR/v7+ZC6wqzwG 4CjsjPdHg1amzaA0BgwVl6HU+UJCxmfsgY9cqHsQIZvYHIVix0nWkkEgXCjMuieX lWoXz0ZNfupoiLcJHvxC7D+6YGnCxLYd6keiiHEXGjd1LiFLlf72AN8VbSLeCE1h lo+/xDhBtxMAh6Oz/szwafuS6ePlzAIjuH0HZf6CKJsTWP5BJq06Jy00Uv8Qvu7+ ocggLzzTeooasEs7TGofn0vPQzxolTKgR4RRfiEHZqvJap3BzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIRa4jrUJnlrHb57OWzPRkxMMtpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjM4ZmE0MTctNjhlMi0z NWZkLWJlNjctNTdmYWE5NzNiNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSG/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN0kFrqPCW/CPQyaXIkIzLqCc2YdurgLRguUY57jzDFEpoIrxdRLtOc yf5kIHSPBMLT4ad0lsNa1n3KRuIQWwkFY0aZO81d5wUESSMqk4GQy8Ju3ewQy83L b67Ya4tXhnI763QYU24HIHumGm4vRTTkaDEWXJVOS9QUHyxORkzSSknnISQlTlsA c91KiAPN3vn2ZxbrrVSJhKi7h9S7W0LgCrLZmmpmlPTbQv/kXlybd+0jM+GCPlSC 5BZYs1hev5OR67F7+hukufjokX+y0O0wHoOdNBZdWRs/Yt9hYM43yjU4LkRElfr0 RNFAoHdoQ7g/ejeZDnOn36h7+NCje60= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:41 2025 by rpki-client