$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa File: b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa (raw, json) Hash identifier: IObEUum6iKW5PgW5fNFMMKrgk/LjcepwfncFmvs4HFc= Subject key identifier: D0:63:86:04:3E:D5:72:79:20:DF:CB:9F:D5:06:46:72:BF:6C:0B:4C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D710DCF945E359CFAD00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 173.66.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d7:10:dc:f9:45:e3:59:cf:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=f11715d1-4f7a-4624-b20e-321720ea8a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:23:2e:88:c4:00:60:e8:ab:c0:5e:4b:01: bf:5a:53:32:85:9d:47:f9:39:7f:b5:37:c1:1a:51: 39:71:57:5f:93:c8:63:0a:0c:bc:64:c0:7c:b3:c9: cb:83:29:97:7b:1d:99:fc:09:0d:31:47:8e:db:a2: f9:21:2d:7f:0c:96:1f:08:d7:f0:12:f5:32:35:d9: 06:d2:a8:c0:f3:d2:9c:67:b5:d4:19:a9:97:4e:45: 80:e0:81:4e:5f:ce:5e:69:f4:0b:0a:79:ae:04:c8: 8a:cf:03:b2:02:b5:41:97:c2:ce:56:f9:57:30:73: a5:67:c2:39:8d:b6:03:48:e9:1a:5b:33:63:dd:ab: 45:e0:97:5f:13:52:01:6a:10:2c:c4:10:c8:99:96: 3d:f9:8e:ac:28:73:14:67:96:14:cc:11:7a:c7:8c: ae:a8:b4:26:d2:7b:48:29:a8:f7:6c:02:79:f1:19: a6:ea:4f:7f:cf:08:a0:b0:eb:d2:72:63:aa:23:f7: bf:1c:e7:ef:d7:9c:9e:11:c1:cb:7e:48:a7:78:1b: f0:70:43:9c:8b:78:55:b8:30:10:90:f4:44:6d:e6: 46:b7:6f:46:6a:3f:d2:c7:7d:f4:67:d7:cd:e8:34: 43:41:78:a2:98:e0:b3:2b:2e:0d:58:d4:15:11:cf: 2c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:63:86:04:3E:D5:72:79:20:DF:CB:9F:D5:06:46:72:BF:6C:0B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:69:cc:a1:21:89:28:06:69:5f:c8:72:1e:af:b8:94:39:38: 3d:7c:12:bb:01:ac:a6:bb:3a:e0:d2:af:94:6d:00:3d:50:a5: 7d:dc:c3:02:9d:41:b1:45:bb:d5:af:44:32:65:14:83:83:ca: 6f:a1:05:3a:dc:2e:f5:f7:b4:bc:d0:2d:67:80:99:f7:5f:8b: 4c:44:53:fb:41:d7:92:78:b3:fe:20:2a:ec:d4:d1:ad:02:fd: ff:d9:5b:35:50:fb:23:03:32:95:9d:db:d3:05:77:4a:eb:24: 21:0f:9c:7c:00:25:62:d9:a6:8a:d1:b3:fa:a5:53:ae:1f:ec: 6d:b1:78:1f:55:da:35:dc:57:78:5b:2c:e2:7d:7f:c6:87:55: a3:4e:35:4c:83:0d:2d:53:db:18:7d:81:5d:42:28:9a:6e:6d: dc:39:35:49:9d:f0:15:85:23:20:0e:5a:be:6b:17:ed:cb:96: 0a:0f:b0:37:d8:ad:2f:83:01:0c:a7:28:11:c0:6d:f5:a3:ad: d5:b5:e7:c9:13:d3:68:cc:45:4a:8b:d6:9d:96:1e:da:b5:8c: 76:f0:51:3b:b2:8b:bb:ed:3b:05:a0:6a:40:f8:19:4d:45:d1: 28:5d:27:d7:71:9f:f6:b8:cf:b2:83:70:f6:a8:3f:e4:9b:3d: 0d:f9:5a:72 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRtcQ3PlF41nPrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZjExNzE1ZDEtNGY3YS00NjI0LWIyMGUtMzIxNzIwZWE4YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNsjLojEAGDoq8BeSwG/WlMyhZ1H+Tl/tTfB GlE5cVdfk8hjCgy8ZMB8s8nLgymXex2Z/AkNMUeO26L5IS1/DJYfCNfwEvUyNdkG 0qjA89KcZ7XUGamXTkWA4IFOX85eafQLCnmuBMiKzwOyArVBl8LOVvlXMHOlZ8I5 jbYDSOkaWzNj3atF4JdfE1IBahAsxBDImZY9+Y6sKHMUZ5YUzBF6x4yuqLQm0ntI Kaj3bAJ58Rmm6k9/zwigsOvScmOqI/e/HOfv15yeEcHLfkineBvwcEOci3hVuDAQ kPREbeZGt29Gaj/Sx330Z9fN6DRDQXiimOCzKy4NWNQVEc8sOQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNBjhgQ+1XJ5IN/Ln9UGRnK/bAtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjU5Yzc3MjEtZDlkZC0z ZmEzLWI2NTQtZmIzY2NmOGU2OWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArUIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPmnMoSGJKAZpX8hyHq+4lDk4PXwSuwGsprs64NKvlG0APVClfdzDAp1B sUW71a9EMmUUg4PKb6EFOtwu9fe0vNAtZ4CZ91+LTERT+0HXkniz/iAq7NTRrQL9 /9lbNVD7IwMylZ3b0wV3SuskIQ+cfAAlYtmmitGz+qVTrh/sbbF4H1XaNdxXeFss 4n1/xodVo041TIMNLVPbGH2BXUIomm5t3Dk1SZ3wFYUjIA5avmsX7cuWCg+wN9it L4MBDKcoEcBt9aOt1bXnyRPTaMxFSovWnZYe2rWMdvBRO7KLu+07BaBqQPgZTUXR KF0n13Gf9rjPsoNw9qg/5Js9Dflacg== -----END CERTIFICATE-----Generated at Sat Apr 5 18:29:13 2025 by rpki-client