$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c69372c1-e785-39f1-a692-392662651d5d.roa File: c69372c1-e785-39f1-a692-392662651d5d.roa (raw, json) Hash identifier: oRFYlY5BWjoktc1URLnZ0bxkboNgOSJg4fRmblYyRU4= Subject key identifier: 7A:A5:3B:C7:D8:FF:AD:08:C5:51:89:40:54:E9:8C:27:98:8C:A5:62 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC0C6CE509B1F62E1F39C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c69372c1-e785-39f1-a692-392662651d5d.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.96.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:0c:6c:e5:09:b1:f6:2e:1f:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=d8b0438e-782e-4dd4-88ee-4b2e18441804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:6c:58:99:af:a8:85:3d:72:a8:14:f5:05: b4:66:35:71:fe:2e:dd:f3:34:5d:8b:22:a5:da:72: a6:1a:c8:a3:64:b0:99:2c:48:1b:2e:d6:5a:ea:31: 3d:8f:b3:7b:12:3f:da:e6:f7:d8:eb:ee:c8:52:4d: 64:a8:b1:8a:42:11:fd:2e:f4:13:f7:18:26:0e:bd: 20:41:10:a5:e4:a7:07:0e:c3:4f:fc:73:b3:36:62: c0:6c:64:10:b7:97:2f:a0:46:3a:f1:b4:f3:66:33: 12:c7:3a:8a:8f:79:81:29:7f:ad:76:f4:6b:d9:a5: 0f:46:23:73:08:10:aa:fc:3a:59:96:6a:d9:28:70: 51:49:ae:18:a0:a8:fc:85:ee:83:95:a9:61:36:18: ca:21:8f:9b:6f:ee:c1:ef:dc:46:ae:32:8b:6c:00: 30:9a:15:74:69:23:51:00:5f:2a:d6:8f:17:17:22: 54:06:f0:40:af:25:b3:39:47:60:1f:2c:8e:bd:50: e9:97:73:5d:5d:a3:ae:43:a8:f7:2d:c5:ba:bb:2c: f6:57:5f:c3:99:3c:5c:54:01:11:1d:5b:b7:45:f4: a8:36:49:94:f0:da:34:59:95:b2:71:53:c9:09:07: dc:fa:43:86:fa:c3:1c:5e:d9:8a:6d:f4:cf:e0:03: ca:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A5:3B:C7:D8:FF:AD:08:C5:51:89:40:54:E9:8C:27:98:8C:A5:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c69372c1-e785-39f1-a692-392662651d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:72:89:44:60:88:4a:c6:6d:65:9c:3e:d9:09:2c:14:25:a6: 2b:8a:ee:37:9b:dc:5b:b6:45:81:87:d8:fb:b2:c4:63:1a:77: bb:5f:6c:07:ee:ea:dc:6d:ae:b4:66:5c:2f:19:3d:3a:60:0a: 24:47:54:60:b8:64:2e:75:a9:fa:8d:ef:6b:ad:db:ed:e7:d5: 96:9f:9e:54:b5:96:33:aa:68:26:9f:4f:c6:24:95:b0:df:b4: a5:ed:e0:0e:26:b6:2c:60:97:2d:82:bf:e6:d7:0d:69:b3:59: 61:ea:ed:56:21:d0:08:17:73:5f:3d:f0:b3:f4:6c:7d:51:35: f1:a6:5b:fe:c7:4b:e6:db:63:a3:9c:da:c6:97:5f:09:89:fd: 99:04:0a:24:c7:d2:3f:c2:76:4b:7f:9c:71:59:e8:db:76:c2: c3:96:26:89:97:23:84:c0:93:77:bd:89:d4:3f:ab:66:a0:29: 30:24:a4:c4:b2:a3:30:89:20:96:81:bc:6e:6b:5b:66:78:86: 7f:d6:8e:1a:37:fd:16:7f:aa:20:0b:e4:cd:08:4b:ae:b5:9c: 1b:99:ba:e5:07:aa:07:2e:35:6d:1a:65:4d:53:97:fc:79:89: 23:c0:b5:5a:ce:30:ba:dd:69:40:80:31:e0:84:46:cd:50:64: 36:b3:fc:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Axs5Qmx9i4fOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDhiMDQzOGUtNzgyZS00ZGQ0LTg4ZWUtNGIyZTE4NDQxODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO1sWJmvqIU9cqgU9QW0ZjVx/i7d8zRdiyKl 2nKmGsijZLCZLEgbLtZa6jE9j7N7Ej/a5vfY6+7IUk1kqLGKQhH9LvQT9xgmDr0g QRCl5KcHDsNP/HOzNmLAbGQQt5cvoEY68bTzZjMSxzqKj3mBKX+tdvRr2aUPRiNz CBCq/DpZlmrZKHBRSa4YoKj8he6DlalhNhjKIY+bb+7B79xGrjKLbAAwmhV0aSNR AF8q1o8XFyJUBvBAryWzOUdgHyyOvVDpl3NdXaOuQ6j3LcW6uyz2V1/DmTxcVAER HVu3RfSoNkmU8No0WZWycVPJCQfc+kOG+sMcXtmKbfTP4APKrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqlO8fY/60IxVGJQFTpjCeYjKViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzY5MzcyYzEtZTc4NS0z OWYxLWE2OTItMzkyNjYyNjUxZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVyiURgiErGbWWcPtkJLBQlpiuK7jeb3Fu2RYGH2PuyxGMad7tfbAfu 6txtrrRmXC8ZPTpgCiRHVGC4ZC51qfqN72ut2+3n1ZafnlS1ljOqaCafT8YklbDf tKXt4A4mtixgly2Cv+bXDWmzWWHq7VYh0AgXc1898LP0bH1RNfGmW/7HS+bbY6Oc 2saXXwmJ/ZkECiTH0j/Cdkt/nHFZ6Nt2wsOWJomXI4TAk3e9idQ/q2agKTAkpMSy ozCJIJaBvG5rW2Z4hn/Wjho3/RZ/qiAL5M0IS661nBuZuuUHqgcuNW0aZU1Tl/x5 iSPAtVrOMLrdaUCAMeCERs1QZDaz/NA= -----END CERTIFICATE-----Generated at Sun Apr 6 06:18:01 2025 by rpki-client