$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8ecdf10-1072-3cb2-be91-933c044e254e.roa File: b8ecdf10-1072-3cb2-be91-933c044e254e.roa (raw, json) Hash identifier: VJj7M0o/M/LwkokVExeSzUiycPLRPRZuGyhe5tToQJo= Subject key identifier: 41:6B:B3:B4:91:1A:64:E7:F3:48:B0:B8:3E:E2:1E:C4:BC:23:8F:F0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC10138695216D7DD9DE80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8ecdf10-1072-3cb2-be91-933c044e254e.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.97.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:10:13:86:95:21:6d:7d:d9:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=3a81af7c-d05e-4b81-88af-8616526b86db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:da:b9:28:1d:48:ad:fc:25:c7:f6:b8:4f:ab: 53:55:b4:82:6e:14:4a:aa:f1:e0:e0:b0:2a:9f:ac: d9:44:46:62:a9:06:06:3b:f0:29:82:16:79:af:75: cf:15:92:9c:70:73:a0:97:69:07:cd:2d:4e:e8:ce: c8:7b:c5:35:d4:f8:47:6f:67:07:3e:b2:37:0d:07: dd:8b:9f:7b:71:fe:03:e0:04:94:2b:dc:cc:d1:10: 1b:0f:3d:98:dc:3a:82:ec:f0:37:e4:91:48:01:b1: 39:4d:b9:53:b6:fd:a5:d8:76:88:8c:e6:49:53:2e: 1b:77:e7:00:6d:94:54:45:87:96:b8:a6:74:4b:bf: e7:8f:17:bc:b4:24:f3:33:e6:1f:25:f0:38:d6:05: 16:d1:86:0f:4a:90:0e:ed:e5:d1:cf:6c:ce:b9:d4: f7:9a:23:c6:4c:e2:c4:b3:c3:73:91:a1:fa:3a:26: e9:07:db:e7:b9:8a:2c:72:0c:3a:fd:f2:af:71:db: 24:4e:d8:79:94:c0:04:cc:a2:c9:46:e7:9b:6e:69: e7:e3:ac:f7:01:bc:36:4a:06:08:2d:f6:8a:0c:6e: 00:27:b9:2b:d1:53:00:54:dd:59:33:84:e1:f4:af: 67:3d:67:90:d7:33:47:3a:8b:51:8d:07:b3:66:52: 26:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6B:B3:B4:91:1A:64:E7:F3:48:B0:B8:3E:E2:1E:C4:BC:23:8F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8ecdf10-1072-3cb2-be91-933c044e254e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c7:a0:45:a1:14:c9:d4:04:1e:f4:d6:fc:8d:51:db:40:79: f4:68:8a:50:04:a8:83:1c:f1:9a:45:8e:f9:de:f3:09:1d:85: bc:1f:ab:b6:68:e0:5c:66:da:95:82:2a:92:e1:43:a6:5b:8c: 40:42:7f:2a:b4:e1:4c:da:ad:ee:4b:68:ee:7f:b6:59:39:f0: 91:13:7b:4d:d8:90:b1:8f:90:5c:93:d6:62:d5:09:51:d3:b8: bf:11:74:64:f1:a2:81:ef:12:5b:72:f3:c8:46:72:b1:58:c5: 10:f6:83:2a:88:9f:65:e0:16:a9:97:3b:42:f1:21:43:7b:e8: 8b:66:08:ea:e7:cd:34:4f:60:bb:5c:a8:4c:f7:e5:94:67:71: 9e:c7:7a:66:03:06:8c:f0:64:c8:ac:ce:a0:4f:d7:25:93:dc: 38:d4:d9:3d:e4:21:5d:5e:a7:40:ed:28:2c:94:51:de:08:83: 46:b5:00:4d:24:a0:8f:98:80:e5:1f:e6:cc:81:00:bd:85:67: ef:68:f9:ed:1c:57:86:6a:65:5b:bf:49:e8:2d:4c:44:f8:71: d1:e0:ec:09:69:6f:63:8a:0e:85:22:b0:31:86:9d:c4:91:6d: 43:35:7b:54:ec:df:51:64:ab:43:be:26:49:b6:b4:3e:e1:c6: 7c:7e:d1:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3BAThpUhbX3Z3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk M2E4MWFmN2MtZDA1ZS00YjgxLTg4YWYtODYxNjUyNmI4NmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdq5KB1Irfwlx/a4T6tTVbSCbhRKqvHg4LAq n6zZREZiqQYGO/ApghZ5r3XPFZKccHOgl2kHzS1O6M7Ie8U11PhHb2cHPrI3DQfd i597cf4D4ASUK9zM0RAbDz2Y3DqC7PA35JFIAbE5TblTtv2l2HaIjOZJUy4bd+cA bZRURYeWuKZ0S7/njxe8tCTzM+YfJfA41gUW0YYPSpAO7eXRz2zOudT3miPGTOLE s8NzkaH6OibpB9vnuYoscgw6/fKvcdskTth5lMAEzKLJRuebbmnn46z3Abw2SgYI LfaKDG4AJ7kr0VMAVN1ZM4Th9K9nPWeQ1zNHOotRjQezZlImuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFrs7SRGmTn80iwuD7iHsS8I4/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjhlY2RmMTAtMTA3Mi0z Y2IyLWJlOTEtOTMzYzA0NGUyNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESGGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbHoEWhFMnUBB701vyNUdtAefRoilAEqIMc8ZpFjvne8wkdhbwfq7Zo 4Fxm2pWCKpLhQ6ZbjEBCfyq04Uzare5LaO5/tlk58JETe03YkLGPkFyT1mLVCVHT uL8RdGTxooHvElty88hGcrFYxRD2gyqIn2XgFqmXO0LxIUN76ItmCOrnzTRPYLtc qEz35ZRncZ7HemYDBozwZMiszqBP1yWT3DjU2T3kIV1ep0DtKCyUUd4Ig0a1AE0k oI+YgOUf5syBAL2FZ+9o+e0cV4ZqZVu/SegtTET4cdHg7Alpb2OKDoUisDGGncSR bUM1e1Ts31Fkq0O+Jkm2tD7hxnx+0Ug= -----END CERTIFICATE-----Generated at Sun Apr 6 01:02:34 2025 by rpki-client