$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58690c4-f846-381c-92e5-cd15adc11a7c.roa File: d58690c4-f846-381c-92e5-cd15adc11a7c.roa (raw, json) Hash identifier: sOaETkR7qEulf1DgI0/hkr0HKyIdtwngez1oZMMEpkI= Subject key identifier: 42:61:60:C9:D8:43:6D:16:98:C1:CD:0B:47:C1:E0:36:FA:82:11:8E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3E61DEFA87A9FC0346F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58690c4-f846-381c-92e5-cd15adc11a7c.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.111.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:e6:1d:ef:a8:7a:9f:c0:34:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=5e5e1ccc-079b-422f-8c95-79a618744109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fd:b1:7a:fe:6e:ee:c0:94:76:12:e3:4d:d7: 4e:72:92:3c:3d:16:f8:f1:59:28:e0:a7:33:2c:cc: e1:d1:14:20:68:13:c7:40:bb:e7:ec:b1:1b:70:ac: 09:f3:68:66:87:11:06:49:ed:66:26:c4:02:6b:87: 12:91:06:af:c0:fe:44:b4:7f:d9:ef:a4:89:a8:58: 04:53:f7:45:f8:d2:3e:dc:f8:75:8e:23:5a:ca:91: 9d:5b:a9:2a:cf:de:cc:38:91:65:83:57:b9:ed:c3: 33:d0:d8:ce:79:58:60:5c:9e:d7:7e:f8:0d:1c:15: b3:3a:6e:f7:6f:8f:a0:54:ca:c5:21:09:1d:a3:0b: e4:f3:65:b2:e5:60:51:2c:95:81:02:79:6f:77:23: 48:82:2b:f0:f4:bd:be:26:9a:ea:38:12:b7:83:5a: 00:b7:cf:f4:4d:00:b8:27:cd:e5:30:a6:24:57:53: de:8f:f1:09:34:8f:a8:f2:98:88:a9:ba:7f:a9:7f: ec:54:e6:02:b2:43:2d:cb:45:a4:45:4d:f5:7a:02: 27:81:f2:3c:28:b7:33:df:98:7e:61:38:31:0a:d6: 1f:31:09:eb:1f:3f:9e:98:78:10:ec:38:3a:7a:9f: 1e:df:ee:4f:35:17:be:7a:d6:9e:af:6f:52:00:77: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:61:60:C9:D8:43:6D:16:98:C1:CD:0B:47:C1:E0:36:FA:82:11:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58690c4-f846-381c-92e5-cd15adc11a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.111.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:16:d3:47:0d:3e:6a:db:a6:be:58:88:eb:8a:2f:4a:10:32: 2b:8e:e0:fc:45:97:84:0d:97:4f:0b:d8:de:b5:33:9e:01:c4: cc:b9:27:4a:0d:18:f8:8f:7e:18:23:87:49:b9:be:b8:34:bf: 7b:ab:e6:b8:90:8f:4d:17:a5:53:b7:c0:0d:9a:47:67:72:35: 33:84:79:b7:05:e1:8a:0f:40:35:db:cf:72:f3:c2:a8:3d:cd: a6:9c:e6:83:41:6c:a6:8a:53:f3:9c:5f:80:dc:62:99:70:ff: 99:5d:1f:99:1c:ef:67:20:4c:40:7a:f2:21:8a:89:44:19:1b: 64:ba:43:25:0d:26:52:63:2b:3f:73:13:7c:97:23:a3:48:94: 2d:78:55:cb:37:8a:66:c7:9c:30:8b:8d:7e:68:f0:2c:63:68: c4:49:20:80:62:03:df:ca:01:07:28:7f:a9:13:61:36:5a:b5: 86:8d:c0:87:a4:35:7f:3a:20:fc:bf:ae:61:3b:c3:c8:a9:ee: c2:33:2b:5d:3f:34:bf:7e:0e:b1:6c:aa:e9:ea:c6:54:15:4b: f3:cb:39:d6:04:2c:d8:e0:da:f8:47:70:3a:fe:29:6f:26:11: 56:ed:c8:1f:b5:b6:39:ea:ab:8d:29:52:24:b7:0d:90:ad:53: 64:f1:a7:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+Yd76h6n8A0bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk NWU1ZTFjY2MtMDc5Yi00MjJmLThjOTUtNzlhNjE4NzQ0MTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/2xev5u7sCUdhLjTddOcpI8PRb48Vko4Kcz LMzh0RQgaBPHQLvn7LEbcKwJ82hmhxEGSe1mJsQCa4cSkQavwP5EtH/Z76SJqFgE U/dF+NI+3Ph1jiNaypGdW6kqz97MOJFlg1e57cMz0NjOeVhgXJ7XfvgNHBWzOm73 b4+gVMrFIQkdowvk82Wy5WBRLJWBAnlvdyNIgivw9L2+JprqOBK3g1oAt8/0TQC4 J83lMKYkV1Pej/EJNI+o8piIqbp/qX/sVOYCskMty0WkRU31egIngfI8KLcz35h+ YTgxCtYfMQnrHz+emHgQ7Dg6ep8e3+5PNRe+etaer29SAHdB9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJhYMnYQ20WmMHNC0fB4Db6ghGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDU4NjkwYzQtZjg0Ni0z ODFjLTkyZTUtY2QxNWFkYzExYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSG+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMW00cNPmrbpr5YiOuKL0oQMiuO4PxFl4QNl08L2N61M54BxMy5J0oN GPiPfhgjh0m5vrg0v3ur5riQj00XpVO3wA2aR2dyNTOEebcF4YoPQDXbz3Lzwqg9 zaac5oNBbKaKU/OcX4DcYplw/5ldH5kc72cgTEB68iGKiUQZG2S6QyUNJlJjKz9z E3yXI6NIlC14Vcs3imbHnDCLjX5o8CxjaMRJIIBiA9/KAQcof6kTYTZatYaNwIek NX86IPy/rmE7w8ip7sIzK10/NL9+DrFsqunqxlQVS/PLOdYELNjg2vhHcDr+KW8m EVbtyB+1tjnqq40pUiS3DZCtU2Txp1A= -----END CERTIFICATE-----Generated at Sat Apr 5 18:13:44 2025 by rpki-client