$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a624ba-3c79-3e47-9e76-e225b85f2da1.roa File: d5a624ba-3c79-3e47-9e76-e225b85f2da1.roa (raw, json) Hash identifier: wLfHvjO91LqxeQpTPBTrI+AAd+SXAuR5fUtMg+6y5H8= Subject key identifier: 59:86:6F:17:96:BB:CC:28:54:A7:91:E1:24:D5:E1:99:A4:FB:8E:24 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D39C25C50AC9C7ABCF00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a624ba-3c79-3e47-9e76-e225b85f2da1.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 108.11.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d3:9c:25:c5:0a:c9:c7:ab:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=5a6049d3-d680-442a-9597-54bb4d0f8bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:82:6b:80:03:e9:32:12:aa:bd:ff:27:23:bf: ea:fb:fd:82:bf:cf:17:0f:da:14:6d:0a:2b:ed:32: c4:07:d7:e9:40:3c:4e:c8:f5:20:f7:fe:89:1a:3a: 0d:a3:1a:85:fe:d3:c9:89:b4:c1:f6:eb:97:00:e1: fd:72:2f:88:67:a7:04:a2:4d:e6:a4:f6:85:8f:67: 1e:47:86:21:ea:69:1c:58:9a:cc:6f:1d:fd:02:25: 34:30:f9:44:99:29:c3:98:4f:5d:bc:68:41:43:fc: 29:5b:43:9c:45:65:67:b8:2b:ae:c0:96:ea:37:04: e2:7c:6b:a6:1a:5b:1e:17:d5:b2:d8:bf:4d:8f:4a: fe:fb:ab:3e:db:f4:88:e2:0a:30:dd:47:97:47:cd: ec:5b:03:0f:99:8a:8e:dc:7e:6b:85:6c:ba:5e:81: c5:57:25:94:ea:bc:50:95:e2:08:e1:a6:14:bf:a5: d4:85:0d:44:e5:3b:c0:4d:e5:2b:0d:f6:74:b7:3f: 9c:57:3e:fb:01:98:4f:7c:cb:6e:0e:13:b0:1f:55: ab:17:e9:a0:89:bf:d1:26:73:ab:c0:f9:52:83:b3: b5:fb:b8:3c:02:e0:51:5a:f7:85:36:71:8e:8a:99: 8b:70:ef:24:ad:53:0f:10:1d:39:30:ec:85:87:39: 23:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:86:6F:17:96:BB:CC:28:54:A7:91:E1:24:D5:E1:99:A4:FB:8E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a624ba-3c79-3e47-9e76-e225b85f2da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.11.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b8:27:85:84:8f:b3:95:04:19:b4:bc:a9:3d:90:c5:b2:ec: e9:71:c5:f2:5e:6c:76:6e:b7:4a:9d:2f:36:b1:8a:21:d8:02: a6:64:d7:7b:89:1f:a3:92:7c:f5:5d:dd:83:d6:fe:a9:f9:c1: bd:d5:a9:dc:a9:47:8d:85:39:5c:3f:58:60:f5:3a:60:c9:f1: 82:8c:a0:10:5c:68:6d:59:46:35:ad:d5:2c:a9:f3:e8:8c:7f: c8:06:0f:b8:4c:ca:99:62:a7:8b:da:96:db:93:84:32:5c:c6: e0:c4:ac:5d:71:9e:d8:9f:a5:19:c7:57:79:1d:2c:f4:4f:6f: ce:ef:72:84:75:5d:bf:1b:17:16:ba:02:45:c9:d6:bf:5d:9d: 41:86:0f:e9:eb:b4:7a:d0:1e:a3:53:49:79:7d:39:4a:f0:ba: ef:c1:d9:4a:a3:c9:3b:f2:c5:5e:db:48:44:c0:d1:99:22:ed: 31:3f:53:27:f5:ca:af:12:d3:46:06:74:1c:23:3e:d6:2c:ba: cd:4d:2e:f6:08:d9:7d:c1:76:25:58:24:30:a8:d5:9e:c9:3d: 68:ce:0e:62:0c:8b:4f:d0:cc:50:43:43:9c:b4:57:b0:12:79: d8:45:ab:6f:c1:61:74:73:4a:08:d2:64:c5:b4:e8:80:3c:ba: 48:9e:b7:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtOcJcUKycerzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NWE2MDQ5ZDMtZDY4MC00NDJhLTk1OTctNTRiYjRkMGY4YmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4JrgAPpMhKqvf8nI7/q+/2Cv88XD9oUbQor 7TLEB9fpQDxOyPUg9/6JGjoNoxqF/tPJibTB9uuXAOH9ci+IZ6cEok3mpPaFj2ce R4Yh6mkcWJrMbx39AiU0MPlEmSnDmE9dvGhBQ/wpW0OcRWVnuCuuwJbqNwTifGum GlseF9Wy2L9Nj0r++6s+2/SI4gow3UeXR83sWwMPmYqO3H5rhWy6XoHFVyWU6rxQ leII4aYUv6XUhQ1E5TvATeUrDfZ0tz+cVz77AZhPfMtuDhOwH1WrF+mgib/RJnOr wPlSg7O1+7g8AuBRWveFNnGOipmLcO8krVMPEB05MOyFhzkjhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmGbxeWu8woVKeR4STV4Zmk+44kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDVhNjI0YmEtM2M3OS0z ZTQ3LTllNzYtZTIyNWI4NWYyZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbAsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC4J4WEj7OVBBm0vKk9kMWy7OlxxfJebHZut0qdLzaxiiHYAqZk13uJ H6OSfPVd3YPW/qn5wb3VqdypR42FOVw/WGD1OmDJ8YKMoBBcaG1ZRjWt1Syp8+iM f8gGD7hMyplip4valtuThDJcxuDErF1xntifpRnHV3kdLPRPb87vcoR1Xb8bFxa6 AkXJ1r9dnUGGD+nrtHrQHqNTSXl9OUrwuu/B2UqjyTvyxV7bSETA0Zki7TE/Uyf1 yq8S00YGdBwjPtYsus1NLvYI2X3BdiVYJDCo1Z7JPWjODmIMi0/QzFBDQ5y0V7AS edhFq2/BYXRzSgjSZMW06IA8ukiet64= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:17 2025 by rpki-client