$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d63a9b60-7ef2-3367-b6ff-3814b86b1ba5.roa File: d63a9b60-7ef2-3367-b6ff-3814b86b1ba5.roa (raw, json) Hash identifier: 5JqI/RThs/eKOwwJrjeo7acxUnOcauVkbrGtcuIiPvk= Subject key identifier: 65:E3:B4:4F:07:71:C2:D1:F6:2D:BF:26:C1:BC:5F:87:F8:B2:23:E3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D0464F3BDE38EE195BC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d63a9b60-7ef2-3367-b6ff-3814b86b1ba5.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 71.164.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d0:46:4f:3b:de:38:ee:19:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bbf376ec-96e7-41bc-b951-bf65c54f5285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c7:12:2d:29:70:96:64:72:b3:08:dc:29:dc: 4e:bf:91:82:10:de:11:37:a1:4e:96:c3:27:e8:1d: 9a:76:1e:40:77:51:5b:fc:64:22:66:b0:71:66:2a: eb:46:7f:5b:c7:b1:1f:57:5b:ff:23:b4:2c:42:ba: 80:c1:2f:be:40:f2:87:77:4a:2e:9e:9f:73:05:1c: 93:df:12:5e:fe:94:31:70:db:1c:4a:e0:b8:a5:6a: f9:f4:1c:5c:b8:9b:53:9a:09:48:cf:8e:77:f8:94: 8c:0e:e0:5b:1a:c4:37:4a:0a:48:00:9a:6d:f4:0b: 06:7c:f7:6e:b8:0d:01:14:d1:ca:4a:4d:8d:4a:27: 81:59:ac:f5:0a:01:d7:97:67:ba:b9:25:ed:02:2b: 7d:e9:29:0a:af:2b:f2:eb:75:c3:7c:08:bb:ce:32: 64:35:53:55:05:fb:7f:44:04:7c:93:26:a2:4b:07: 02:f0:61:09:16:16:94:59:0b:16:ff:e0:79:e9:7b: 69:78:85:d6:08:aa:99:84:5f:3c:96:11:6d:9e:54: 39:04:41:77:38:2a:8c:33:a0:1e:c7:e2:cf:d1:0d: 3e:55:36:1b:35:2a:3f:4c:dd:51:c9:57:7b:1e:75: 23:8f:be:ad:2d:f2:b7:85:97:e9:5e:c1:f7:bb:0b: 46:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E3:B4:4F:07:71:C2:D1:F6:2D:BF:26:C1:BC:5F:87:F8:B2:23:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d63a9b60-7ef2-3367-b6ff-3814b86b1ba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.164.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:fc:51:95:11:61:9d:f3:a6:d0:20:3d:9e:fc:07:ea:e1:bc: 6e:c3:73:8b:b6:d0:92:d0:ae:70:a9:d7:c8:7e:d9:4c:4f:d3: 41:58:41:8c:25:e5:5d:1e:b7:96:5f:8a:60:ac:c4:83:bd:ff: 8d:fd:18:cd:a0:c1:38:5e:2c:17:ee:7c:13:20:b5:3a:d0:2c: 9a:42:af:af:16:87:94:a3:1f:b3:c6:20:4f:2a:f4:94:e8:5c: 91:bd:b1:f1:c8:68:1d:2e:40:f8:c9:46:0e:61:4f:ef:b4:2c: 97:1b:6f:e5:aa:b1:34:25:4a:d7:b4:08:9b:84:14:5f:97:f7: 15:bd:4b:0c:4c:eb:12:9d:d2:ab:cd:fa:d0:93:14:11:97:60: 7b:8a:2f:96:6a:70:3e:32:22:23:81:01:62:b3:c7:78:f9:91: 0a:fa:79:39:11:3a:c7:7b:a0:e6:1e:e8:e5:43:14:bd:35:90: 61:e0:e0:da:c2:cf:d2:f3:f7:b6:2d:1f:e5:c4:ae:76:18:ac: e1:af:ea:29:74:9a:57:17:4b:6f:f9:c8:af:8b:97:76:73:13: 86:7a:5a:bf:8f:40:30:7d:82:d4:92:e1:e1:a1:93:e3:8d:c8: 1b:70:4c:80:bc:61:ee:9b:4a:2e:7d:a9:89:6d:44:dd:46:10: 1e:7e:c8:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtBGTzveOO4ZW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmJmMzc2ZWMtOTZlNy00MWJjLWI5NTEtYmY2NWM1NGY1Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgccSLSlwlmRyswjcKdxOv5GCEN4RN6FOlsMn 6B2adh5Ad1Fb/GQiZrBxZirrRn9bx7EfV1v/I7QsQrqAwS++QPKHd0ounp9zBRyT 3xJe/pQxcNscSuC4pWr59BxcuJtTmglIz453+JSMDuBbGsQ3SgpIAJpt9AsGfPdu uA0BFNHKSk2NSieBWaz1CgHXl2e6uSXtAit96SkKryvy63XDfAi7zjJkNVNVBft/ RAR8kyaiSwcC8GEJFhaUWQsW/+B56XtpeIXWCKqZhF88lhFtnlQ5BEF3OCqMM6Ae x+LP0Q0+VTYbNSo/TN1RyVd7HnUjj76tLfK3hZfpXsH3uwtGvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXjtE8HccLR9i2/JsG8X4f4siPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDYzYTliNjAtN2VmMi0z MzY3LWI2ZmYtMzgxNGI4NmIxYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR6RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD8UZURYZ3zptAgPZ78B+rhvG7Dc4u20JLQrnCp18h+2UxP00FYQYwl 5V0et5ZfimCsxIO9/439GM2gwTheLBfufBMgtTrQLJpCr68Wh5SjH7PGIE8q9JTo XJG9sfHIaB0uQPjJRg5hT++0LJcbb+WqsTQlSte0CJuEFF+X9xW9SwxM6xKd0qvN +tCTFBGXYHuKL5ZqcD4yIiOBAWKzx3j5kQr6eTkROsd7oOYe6OVDFL01kGHg4NrC z9Lz97YtH+XErnYYrOGv6il0mlcXS2/5yK+Ll3ZzE4Z6Wr+PQDB9gtSS4eGhk+ON yBtwTIC8Ye6bSi59qYltRN1GEB5+yKM= -----END CERTIFICATE-----Generated at Sun Apr 6 01:09:45 2025 by rpki-client