$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b757d29a-92f9-3a7c-94bc-5866b5dc2145.roa File: b757d29a-92f9-3a7c-94bc-5866b5dc2145.roa (raw, json) Hash identifier: hNZNBUX2CcbRpjLFZAFqkQl0ACeGuDRwqlCLEkwXYRQ= Subject key identifier: CF:55:29:3A:FF:C6:5A:C7:3A:2C:5A:37:B2:85:61:17:AD:F2:1D:69 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3E74D0551ED3975D2DD00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b757d29a-92f9-3a7c-94bc-5866b5dc2145.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.103.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:e7:4d:05:51:ed:39:75:d2:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=dca9aeb3-e948-4f0f-a90e-d2584b734644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:47:a5:f6:bf:54:bf:bd:5f:4b:eb:39:c8:20: 00:07:a2:cb:35:40:f2:d8:8b:59:cf:85:98:f7:a2: cb:44:9f:bf:d6:19:e8:ed:b5:52:e4:bd:52:50:d3: 7f:9b:7f:13:98:82:35:a1:22:ab:78:16:48:1d:a4: f4:a3:84:44:4f:8a:11:d6:e2:6f:72:6f:1b:42:5e: 73:f2:58:09:b9:2e:71:ab:29:4f:ac:d3:c2:59:e5: ef:66:2c:8c:f0:91:c5:82:03:37:ce:91:a3:30:c5: 66:a5:7a:f4:50:9f:37:09:4e:0c:a7:3d:f7:c3:c5: 7f:cb:cf:c2:6a:a4:f7:ff:1e:a5:43:82:e2:db:f2: c0:49:d5:42:d1:dc:17:da:42:eb:7f:82:a8:1b:a0: b7:29:26:e1:f0:f2:18:df:94:ef:c2:cc:56:0d:32: ad:ca:0e:f4:ed:bf:51:a2:53:eb:b4:f4:5c:fc:eb: 1a:71:8b:19:82:ff:09:31:8d:cc:30:fd:58:1f:aa: 97:5d:6b:1c:ca:46:14:a3:93:66:f9:36:d8:28:18: 73:ca:5c:e6:0e:e2:0e:04:d1:8a:e9:3e:8a:0d:da: fc:b7:64:4b:b7:e3:f8:8d:8a:bd:39:f9:cb:92:aa: e7:c5:fe:10:e2:15:b2:4e:94:5c:22:d5:23:f3:f8: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:55:29:3A:FF:C6:5A:C7:3A:2C:5A:37:B2:85:61:17:AD:F2:1D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b757d29a-92f9-3a7c-94bc-5866b5dc2145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.103.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:69:db:23:c6:9f:1b:93:fa:11:92:6e:bc:5d:ce:ac:90:c9: a6:0d:56:fe:f9:66:07:83:6f:40:75:eb:bc:90:8a:72:b1:c5: 5a:13:24:8d:39:47:eb:3e:cc:70:15:69:76:6c:d3:95:93:67: 2d:51:49:db:2c:6f:83:d1:52:12:3c:15:02:ca:04:83:b4:31: 3c:01:f9:21:35:0a:7a:93:ce:c6:e2:59:25:83:3d:c4:90:a8: f6:c8:39:75:e3:06:4e:76:c2:35:47:09:3f:01:3d:39:77:b6: 7c:71:19:1d:a1:73:94:a9:e8:db:b7:fc:a3:2e:2f:a3:e3:69: 9d:0b:7c:dc:47:5c:15:e1:bd:22:18:02:bb:cc:da:3b:54:1a: cb:67:10:68:76:f4:cb:94:27:50:dd:2b:9a:a6:3c:20:ea:09: ec:ac:40:80:38:6e:99:d3:67:b5:29:65:35:5d:2a:aa:9f:a7: 8e:73:56:0f:64:8a:9a:22:98:55:59:c3:81:29:22:c6:c7:d5: 7e:7b:ba:70:5e:df:65:ee:2d:bc:8c:11:5d:68:c2:12:5c:c0: f3:a4:be:a8:94:5a:1e:5f:ed:00:18:7b:41:e5:5b:3c:d8:e6: 83:4c:50:29:4f:57:01:d5:8a:40:65:f4:e0:8f:1c:39:da:ed: 4f:a2:d5:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+dNBVHtOXXS3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk ZGNhOWFlYjMtZTk0OC00ZjBmLWE5MGUtZDI1ODRiNzM0NjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkel9r9Uv71fS+s5yCAAB6LLNUDy2ItZz4WY 96LLRJ+/1hno7bVS5L1SUNN/m38TmII1oSKreBZIHaT0o4RET4oR1uJvcm8bQl5z 8lgJuS5xqylPrNPCWeXvZiyM8JHFggM3zpGjMMVmpXr0UJ83CU4Mpz33w8V/y8/C aqT3/x6lQ4Li2/LASdVC0dwX2kLrf4KoG6C3KSbh8PIY35TvwsxWDTKtyg707b9R olPrtPRc/OsacYsZgv8JMY3MMP1YH6qXXWscykYUo5Nm+TbYKBhzylzmDuIOBNGK 6T6KDdr8t2RLt+P4jYq9OfnLkqrnxf4Q4hWyTpRcItUj8/iWtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9VKTr/xlrHOixaN7KFYRet8h1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjc1N2QyOWEtOTJmOS0z YTdjLTk0YmMtNTg2NmI1ZGMyMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhp2yPGnxuT+hGSbrxdzqyQyaYNVv75ZgeDb0B167yQinKxxVoTJI05 R+s+zHAVaXZs05WTZy1RSdssb4PRUhI8FQLKBIO0MTwB+SE1CnqTzsbiWSWDPcSQ qPbIOXXjBk52wjVHCT8BPTl3tnxxGR2hc5Sp6Nu3/KMuL6PjaZ0LfNxHXBXhvSIY ArvM2jtUGstnEGh29MuUJ1DdK5qmPCDqCeysQIA4bpnTZ7UpZTVdKqqfp45zVg9k ipoimFVZw4EpIsbH1X57unBe32XuLbyMEV1owhJcwPOkvqiUWh5f7QAYe0HlWzzY 5oNMUClPVwHVikBl9OCPHDna7U+i1aE= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:29 2025 by rpki-client