$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3406df6-c3a3-36ac-9211-24fe2ddb0c36.roa File: c3406df6-c3a3-36ac-9211-24fe2ddb0c36.roa (raw, json) Hash identifier: XxmTZLuEbgTpinF8MKQIkGxTbONesOToVzr+/Gt9wMg= Subject key identifier: 43:24:04:2C:22:66:8D:22:91:3E:0F:29:F8:65:19:D4:C8:66:E3:11 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3DAA5F6956D3750FBF500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3406df6-c3a3-36ac-9211-24fe2ddb0c36.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.108.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:da:a5:f6:95:6d:37:50:fb:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=ea4dab2f-6e8a-47a3-893b-16636ca0e092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:79:96:bd:e3:3d:04:2f:8d:f5:6d:0c:83: b8:b6:7f:b5:53:43:ad:2f:c8:69:ef:fd:26:3a:fc: 81:6c:47:96:05:de:8f:f6:35:42:2e:14:29:15:d5: 56:cd:8c:c2:76:f6:02:72:ac:e0:aa:a9:c8:83:78: 98:1a:35:13:3a:62:5c:98:7b:ec:b9:83:62:60:ba: db:02:cc:9f:c1:95:1d:90:66:53:dc:6d:70:36:43: fb:97:31:86:27:5b:15:23:aa:d0:10:a9:69:4c:52: 39:1a:71:ad:be:37:92:1a:7b:25:fb:31:59:16:4d: 9b:62:db:65:32:12:22:c0:f0:d3:9e:6c:10:7b:64: 4a:ab:88:3d:f8:45:52:26:15:fd:76:0d:91:21:24: b5:4d:84:da:39:24:ac:46:27:b8:12:c4:10:90:88: d2:ca:43:f3:5d:51:2d:b6:5e:70:23:c6:13:ea:be: f0:aa:ee:c6:b9:18:63:6a:cc:5f:e7:b6:d4:04:ba: d8:8e:c3:49:6a:de:82:91:43:2a:08:a1:05:c0:3c: 57:9d:c2:c8:b4:53:4b:b2:e8:47:e2:88:de:32:97: a6:81:40:3f:b2:a4:72:2b:94:3b:0c:f8:c4:8c:0a: 28:7c:21:e4:0d:f0:60:59:cd:3e:2e:67:9e:5b:b1: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:24:04:2C:22:66:8D:22:91:3E:0F:29:F8:65:19:D4:C8:66:E3:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3406df6-c3a3-36ac-9211-24fe2ddb0c36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:31:ad:dd:6e:95:4f:80:18:05:b5:d4:74:af:3e:a4:55:fc: 09:56:80:73:62:0c:cf:31:dc:8d:21:b2:08:1e:04:05:76:d4: 61:c1:64:b8:fa:ab:56:2b:da:3e:00:32:1d:c9:f9:8f:64:78: 45:0b:81:bd:a9:a6:9d:7f:20:5b:92:64:9c:3c:17:d5:2c:5d: 17:f6:c4:13:24:46:da:9f:c7:66:84:63:bf:03:eb:05:eb:04: 15:d0:38:5c:dc:ba:a9:46:fe:9f:36:74:c6:e9:e1:e8:ea:3c: 23:e0:b6:28:fe:fe:77:21:29:5e:89:34:2a:30:f7:91:6a:30: 27:74:42:00:ce:f7:8f:9b:82:66:ab:c6:e9:c7:11:a1:ff:bf: 29:51:89:7d:dd:b0:9d:fc:b3:a2:78:2d:b8:5a:77:ba:c9:f6: 91:4b:7f:79:f7:48:10:8e:94:51:82:41:00:de:07:55:b5:25: d0:ef:9a:33:74:a1:8d:88:bb:de:a4:36:0c:63:b8:20:d6:c2: ee:dd:11:68:4f:42:f9:9d:16:df:67:e3:09:f8:76:b3:26:31: 3b:ae:f0:61:46:1e:98:76:3e:8e:02:ca:e5:f7:11:36:d5:84: f3:0c:7f:68:1d:1f:71:f0:06:3c:b6:98:cf:ff:73:c5:29:e1: ee:99:6e:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09ql9pVtN1D79QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk ZWE0ZGFiMmYtNmU4YS00N2EzLTg5M2ItMTY2MzZjYTBlMDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus15lr3jPQQvjfVtDIO4tn+1U0OtL8hp7/0m OvyBbEeWBd6P9jVCLhQpFdVWzYzCdvYCcqzgqqnIg3iYGjUTOmJcmHvsuYNiYLrb AsyfwZUdkGZT3G1wNkP7lzGGJ1sVI6rQEKlpTFI5GnGtvjeSGnsl+zFZFk2bYttl MhIiwPDTnmwQe2RKq4g9+EVSJhX9dg2RISS1TYTaOSSsRie4EsQQkIjSykPzXVEt tl5wI8YT6r7wqu7GuRhjasxf57bUBLrYjsNJat6CkUMqCKEFwDxXncLItFNLsuhH 4ojeMpemgUA/sqRyK5Q7DPjEjAoofCHkDfBgWc0+LmeeW7HzMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMkBCwiZo0ikT4PKfhlGdTIZuMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzM0MDZkZjYtYzNhMy0z NmFjLTkyMTEtMjRmZTJkZGIwYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASGxCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUxrd1ulU+AGAW11HSvPqRV/AlWgHNiDM8x3I0hsggeBAV21GHBZLj6 q1Yr2j4AMh3J+Y9keEULgb2ppp1/IFuSZJw8F9UsXRf2xBMkRtqfx2aEY78D6wXr BBXQOFzcuqlG/p82dMbp4ejqPCPgtij+/nchKV6JNCow95FqMCd0QgDO94+bgmar xunHEaH/vylRiX3dsJ38s6J4Lbhad7rJ9pFLf3n3SBCOlFGCQQDeB1W1JdDvmjN0 oY2Iu96kNgxjuCDWwu7dEWhPQvmdFt9n4wn4drMmMTuu8GFGHph2Po4CyuX3ETbV hPMMf2gdH3HwBjy2mM//c8Up4e6Zbto= -----END CERTIFICATE-----Generated at Sat Apr 5 21:24:37 2025 by rpki-client