$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb323c80-ce6e-31f5-a3b5-c4b3e7b18c14.roa File: bb323c80-ce6e-31f5-a3b5-c4b3e7b18c14.roa (raw, json) Hash identifier: J0IGmRsFD7IEVpCc0TxU7EOOmfC7FPJIQYxis32yWFw= Subject key identifier: DA:85:FD:9B:81:07:8D:5B:13:C1:23:FC:F7:F0:1E:E8:30:BC:39:ED Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246CFCD6C425A8B2F9D08C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb323c80-ce6e-31f5-a3b5-c4b3e7b18c14.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 72.95.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:cf:cd:6c:42:5a:8b:2f:9d:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=3ae8c65a-ecda-4767-923c-b3e647b62e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:51:3b:0e:ef:0d:0c:76:e8:b4:7e:2e:86: b4:b9:ae:e1:26:a0:48:c1:c3:b5:a5:2f:83:22:27: 49:b6:7c:93:d9:80:66:14:cf:15:b3:7b:25:66:b2: b5:dd:4f:ab:f2:5d:e4:32:e1:90:05:61:ed:69:09: da:27:b0:30:29:1c:26:22:b9:f1:f8:82:86:58:bf: cd:2d:f0:b2:4b:94:b0:0e:8a:e0:26:df:6d:c1:87: b3:4a:8d:f2:25:c9:ae:22:01:79:1b:dc:70:16:f6: bf:02:78:d0:6a:ec:f7:30:82:d6:c5:fd:6b:aa:8e: b3:97:0e:1d:85:84:bb:f3:9f:d8:0c:4c:69:17:58: b1:07:f0:8f:9a:76:12:1a:4f:b8:b8:85:88:9e:2d: 2d:6a:f9:94:a9:dd:82:0e:ca:89:b9:fe:af:65:83: 1a:ae:2a:68:39:5b:f6:8e:79:e5:0b:04:47:72:79: 54:96:6e:b9:ad:4d:d5:f0:05:82:b2:82:b9:65:d5: bb:72:e4:a2:e2:bb:65:0d:14:34:de:c7:74:95:98: 23:8e:22:b3:a4:eb:48:fc:f8:47:68:83:3d:22:29: ca:07:f1:cd:e5:db:bf:14:08:37:6b:ed:ab:6c:bb: 7c:10:b8:5f:30:d8:6c:b1:07:20:3b:6f:55:02:84: 17:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:FD:9B:81:07:8D:5B:13:C1:23:FC:F7:F0:1E:E8:30:BC:39:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb323c80-ce6e-31f5-a3b5-c4b3e7b18c14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.95.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:bb:79:ff:26:62:35:bd:ad:bd:f3:67:23:6e:b1:06:73:d0: 7d:d7:9d:2b:69:00:28:75:8f:65:fc:a8:fc:3f:56:7c:42:6a: 80:93:64:f2:b8:4e:c0:fc:3b:7e:e7:bf:c2:48:b3:2f:9c:03: b1:b5:1d:00:bf:79:d0:e6:03:68:b0:26:9c:b4:b2:bf:5e:a4: 47:6c:96:3e:94:35:76:8d:99:8b:d1:4d:a9:fd:0a:91:89:6f: 63:e8:d9:01:36:b9:04:50:a0:fa:70:6e:bf:c0:25:f9:3b:3c: 3b:cb:8b:e6:d0:b5:5a:70:64:c1:2b:9c:8e:71:7d:72:30:15: 59:1d:e3:f8:ed:c8:f3:08:ad:0a:ad:c5:cb:d9:15:80:4e:61: c7:ee:60:17:fa:f6:f2:37:27:d3:90:77:89:67:13:b8:69:06: 4c:73:80:32:6e:c3:af:91:82:e9:34:8f:77:ee:4a:1b:fb:f1: 76:cc:08:ef:71:ef:d8:62:e2:76:3f:84:d0:f0:89:66:a3:02: d4:65:84:a1:58:b5:8e:42:e7:79:76:ab:ef:bb:f9:7b:1d:62: 1b:60:ba:ae:82:7d:8b:58:81:e5:45:12:15:9b:b1:eb:11:45: 12:1a:cd:a0:27:5d:b7:6f:d6:5e:9c:f3:9f:31:bf:00:98:5e: c1:51:d2:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRs/NbEJaiy+dCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk M2FlOGM2NWEtZWNkYS00NzY3LTkyM2MtYjNlNjQ3YjYyZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKtROw7vDQx26LR+Loa0ua7hJqBIwcO1pS+D IidJtnyT2YBmFM8Vs3slZrK13U+r8l3kMuGQBWHtaQnaJ7AwKRwmIrnx+IKGWL/N LfCyS5SwDorgJt9twYezSo3yJcmuIgF5G9xwFva/AnjQauz3MILWxf1rqo6zlw4d hYS785/YDExpF1ixB/CPmnYSGk+4uIWIni0tavmUqd2CDsqJuf6vZYMaripoOVv2 jnnlCwRHcnlUlm65rU3V8AWCsoK5ZdW7cuSi4rtlDRQ03sd0lZgjjiKzpOtI/PhH aIM9IinKB/HN5du/FAg3a+2rbLt8ELhfMNhssQcgO29VAoQXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqF/ZuBB41bE8Ej/PfwHugwvDntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmIzMjNjODAtY2U2ZS0z MWY1LWEzYjUtYzRiM2U3YjE4YzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSF8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI67ef8mYjW9rb3zZyNusQZz0H3XnStpACh1j2X8qPw/VnxCaoCTZPK4 TsD8O37nv8JIsy+cA7G1HQC/edDmA2iwJpy0sr9epEdslj6UNXaNmYvRTan9CpGJ b2Po2QE2uQRQoPpwbr/AJfk7PDvLi+bQtVpwZMErnI5xfXIwFVkd4/jtyPMIrQqt xcvZFYBOYcfuYBf69vI3J9OQd4lnE7hpBkxzgDJuw6+Rguk0j3fuShv78XbMCO9x 79hi4nY/hNDwiWajAtRlhKFYtY5C53l2q++7+XsdYhtguq6CfYtYgeVFEhWbsesR RRIazaAnXbdv1l6c858xvwCYXsFR0gw= -----END CERTIFICATE-----Generated at Wed Apr 9 14:04:47 2025 by rpki-client