$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa File: c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa (raw, json) Hash identifier: W3rv+3WKWZGkPumhSvGGRzvc0gTcsk8L9AUzVTAZGvU= Subject key identifier: 18:88:30:04:53:31:C0:CB:E9:AA:60:81:9C:66:14:CC:AF:F5:F5:2B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F2416CA6EB434632CF40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 96.240.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f2:41:6c:a6:eb:43:46:32:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=6a00a56e-3fe3-4e91-866e-db7b89e0d387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:29:26:2a:6f:db:9e:18:34:fe:c3:46:91:f0: 43:3b:0b:48:2c:21:66:12:23:b1:46:fd:82:c9:f2: e2:77:10:cb:59:9a:60:2b:72:e8:30:41:f1:f4:6f: 6e:1c:fc:5b:dc:9a:07:d0:e0:d3:ed:60:4e:aa:93: 7d:3c:8d:79:af:ea:a8:2a:f0:13:7c:be:f5:06:70: ac:c8:a2:21:c5:30:1b:56:e5:3a:57:3b:74:dd:07: 3c:16:7a:f2:cd:1d:b3:e8:99:8d:74:74:08:e6:1a: d8:d2:e1:2d:28:5f:dc:0b:12:fb:4a:16:4a:a2:87: 11:d7:5a:2b:35:c0:5b:1c:ed:84:ca:cd:30:a8:ba: 10:b0:67:b4:87:fe:fe:4e:6d:58:56:9f:de:fe:0e: d0:3f:18:27:9b:90:c8:ce:6b:41:85:b4:70:44:84: 43:38:84:31:87:a2:7a:83:c6:4a:68:9f:98:b0:7f: 13:83:da:d8:4d:02:fa:cf:86:ac:59:16:fd:21:b5: 2d:c0:43:dc:c3:fb:54:1f:fa:b7:0a:09:d0:1e:a3: c9:ee:68:9e:1a:73:aa:0b:d8:19:f0:84:8a:c1:1f: 2b:28:c7:60:ce:9d:ed:d9:67:f6:18:21:2b:a3:ae: 47:d6:e2:d3:44:3a:bd:84:3d:07:a7:67:0c:7f:6b: 69:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:88:30:04:53:31:C0:CB:E9:AA:60:81:9C:66:14:CC:AF:F5:F5:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.240.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5c:c7:44:e5:34:87:db:10:59:32:2e:a8:da:23:0d:b7:70: 76:38:56:96:4d:bd:18:fc:34:47:9c:e1:7c:da:ad:3e:6b:f9: 1c:84:9e:bf:2b:8a:27:06:ab:69:71:0e:9e:df:b5:82:ca:9e: 69:50:38:4f:6a:7b:13:b9:4f:c2:68:5f:43:ea:9d:24:7c:61: 7a:c8:3b:3c:9b:1e:1c:4a:b0:b8:18:df:a6:8a:cf:0f:7d:3f: 25:cb:ed:1f:78:f0:f4:2e:0f:7f:79:b3:12:22:0c:4b:22:1e: 19:f1:53:c2:6e:46:01:11:9e:42:3a:18:b6:67:bd:5e:11:30: 01:3a:19:df:e5:af:c1:5d:2f:40:1e:07:15:49:6c:a6:d4:0d: d4:e4:ab:65:43:6a:68:6e:42:a3:a3:20:03:a8:3e:1b:e2:1d: 32:f0:c6:d6:bb:ff:35:07:15:92:3d:a0:0d:5e:80:4e:37:09: 88:fe:50:35:03:7b:bd:c4:be:69:06:4e:b9:1a:b4:df:d5:17: 2a:e8:6f:b4:fc:0b:ea:50:bb:c9:9b:09:8e:87:35:4d:e7:99: 3a:66:07:86:04:27:26:f5:84:82:16:db:3e:2c:e6:ec:70:b3: b0:37:7f:a0:55:b3:3a:94:bb:61:89:41:07:79:24:ad:b9:00: ec:73:da:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvJBbKbrQ0Yyz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NmEwMGE1NmUtM2ZlMy00ZTkxLTg2NmUtZGI3Yjg5ZTBkMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCkmKm/bnhg0/sNGkfBDOwtILCFmEiOxRv2C yfLidxDLWZpgK3LoMEHx9G9uHPxb3JoH0ODT7WBOqpN9PI15r+qoKvATfL71BnCs yKIhxTAbVuU6Vzt03Qc8FnryzR2z6JmNdHQI5hrY0uEtKF/cCxL7ShZKoocR11or NcBbHO2Eys0wqLoQsGe0h/7+Tm1YVp/e/g7QPxgnm5DIzmtBhbRwRIRDOIQxh6J6 g8ZKaJ+YsH8Tg9rYTQL6z4asWRb9IbUtwEPcw/tUH/q3CgnQHqPJ7mieGnOqC9gZ 8ISKwR8rKMdgzp3t2Wf2GCEro65H1uLTRDq9hD0Hp2cMf2tpswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiIMARTMcDL6apggZxmFMyv9fUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzhmMDZjMTItMmJlNy0z ZTg5LTkxYmItMzg1MGIyYWMwMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYPCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1cx0TlNIfbEFkyLqjaIw23cHY4VpZNvRj8NEec4XzarT5r+RyEnr8r iicGq2lxDp7ftYLKnmlQOE9qexO5T8JoX0PqnSR8YXrIOzybHhxKsLgY36aKzw99 PyXL7R948PQuD395sxIiDEsiHhnxU8JuRgERnkI6GLZnvV4RMAE6Gd/lr8FdL0Ae BxVJbKbUDdTkq2VDamhuQqOjIAOoPhviHTLwxta7/zUHFZI9oA1egE43CYj+UDUD e73EvmkGTrkatN/VFyrob7T8C+pQu8mbCY6HNU3nmTpmB4YEJyb1hIIW2z4s5uxw s7A3f6BVszqUu2GJQQd5JK25AOxz2vE= -----END CERTIFICATE-----Generated at Sun Apr 6 03:47:21 2025 by rpki-client