$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7eabfb2-67d5-3a50-ba21-ed738d399756.roa File: d7eabfb2-67d5-3a50-ba21-ed738d399756.roa (raw, json) Hash identifier: 5Rg2ozGZjFMLxYodUq0S9NtwqNKqNYWkowUjTZqhk5s= Subject key identifier: E4:90:77:2B:8E:88:40:31:A3:6E:85:9F:F6:45:6E:E0:3F:B6:E6:DD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3E158A0751B1680D18D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7eabfb2-67d5-3a50-ba21-ed738d399756.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.107.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:e1:58:a0:75:1b:16:80:d1:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=e9d35b4e-7e24-4b56-8d05-7ac56de5093b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:a2:02:e6:ed:00:14:32:73:68:07:87:f8: 3e:d6:32:48:af:b9:e1:78:71:b7:f8:c9:de:bb:d6: d9:c1:64:69:8f:7d:99:1d:e3:c2:57:7c:7b:a3:16: 4f:42:a3:f8:05:c2:c8:f8:1f:e8:37:3d:fc:6d:93: 65:e0:8e:80:83:ec:43:f6:bc:c6:a2:e9:6b:6a:a0: d2:7b:a4:30:cd:93:89:cc:28:28:58:da:ba:d3:f0: 6a:e0:d9:cb:88:12:22:b2:91:3b:b3:32:d5:0c:88: 15:4f:34:6b:98:1f:4f:43:64:b4:32:60:23:e5:1d: 20:c9:9b:c1:b8:54:81:ca:2d:81:cf:0d:e4:92:dc: be:02:36:20:f7:15:ab:63:b4:aa:fa:44:c1:17:4f: 5c:85:8d:aa:79:3c:42:02:01:87:64:ec:07:af:ee: cc:2a:cb:26:c2:64:a9:3e:d8:13:48:b2:8e:4b:6b: d7:0a:f7:63:37:13:7a:c9:ee:db:07:51:62:b7:5e: a4:d8:c2:05:30:38:9c:73:b4:f1:e9:e4:f2:f1:65: 47:9b:5f:2d:b9:b9:9e:b1:85:5b:fe:a5:fa:d8:75: 1e:9e:d0:90:73:85:f2:32:d1:ba:6c:f4:ad:79:23: 0a:22:a9:52:bd:64:5f:f1:c2:9e:63:84:39:c3:68: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:90:77:2B:8E:88:40:31:A3:6E:85:9F:F6:45:6E:E0:3F:B6:E6:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7eabfb2-67d5-3a50-ba21-ed738d399756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a0:d8:7f:a0:8c:45:f9:3e:56:13:4b:0a:6a:fd:02:16:be: f0:77:b8:51:4a:87:b9:2d:9c:10:22:b6:6a:00:4a:e9:77:7f: 4c:65:3c:7f:7b:31:20:10:f3:55:5f:af:f8:20:59:80:2c:61: fd:fd:b2:ca:eb:9c:ea:97:7e:4e:2e:ac:e7:3b:99:f4:ae:ce: 34:32:25:5e:fa:7b:72:96:1d:09:eb:54:b0:13:26:7f:b2:c7: 2e:02:ee:1e:ab:26:4d:b9:d0:82:ae:38:50:f1:49:99:74:7f: 92:a5:15:84:3e:b8:34:92:69:da:21:37:a7:46:98:21:02:d0: 9c:37:ef:71:4e:14:57:92:73:d9:3c:85:1e:51:79:17:13:a6: 8b:ea:4a:e7:aa:cd:48:df:04:1c:87:c8:05:9f:a1:52:52:f2: d7:85:f7:4b:73:08:4d:f9:db:ab:5e:6a:bd:75:61:b7:62:55: ae:7d:00:e7:67:c9:16:ee:a6:07:35:4d:fd:69:d7:a0:af:a1: c2:fd:5a:77:61:d1:5d:b2:f9:97:7b:82:46:7e:0b:35:9b:6d: 28:16:97:68:d8:81:2d:45:ca:be:78:3e:b8:4e:49:2d:38:b8: 80:ec:24:9e:50:e5:a1:0a:87:4c:c4:18:37:51:8c:a1:f8:08: 9e:62:0f:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+FYoHUbFoDRjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk ZTlkMzViNGUtN2UyNC00YjU2LThkMDUtN2FjNTZkZTUwOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sqiAubtABQyc2gHh/g+1jJIr7nheHG3+Mne u9bZwWRpj32ZHePCV3x7oxZPQqP4BcLI+B/oNz38bZNl4I6Ag+xD9rzGoulraqDS e6QwzZOJzCgoWNq60/Bq4NnLiBIispE7szLVDIgVTzRrmB9PQ2S0MmAj5R0gyZvB uFSByi2Bzw3kkty+AjYg9xWrY7Sq+kTBF09chY2qeTxCAgGHZOwHr+7MKssmwmSp PtgTSLKOS2vXCvdjNxN6ye7bB1Fit16k2MIFMDicc7Tx6eTy8WVHm18tubmesYVb /qX62HUentCQc4XyMtG6bPSteSMKIqlSvWRf8cKeY4Q5w2gYawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSQdyuOiEAxo26Fn/ZFbuA/tubdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDdlYWJmYjItNjdkNS0z YTUwLWJhMjEtZWQ3MzhkMzk5NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESGtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOg2H+gjEX5PlYTSwpq/QIWvvB3uFFKh7ktnBAitmoASul3f0xlPH97 MSAQ81Vfr/ggWYAsYf39ssrrnOqXfk4urOc7mfSuzjQyJV76e3KWHQnrVLATJn+y xy4C7h6rJk250IKuOFDxSZl0f5KlFYQ+uDSSadohN6dGmCEC0Jw373FOFFeSc9k8 hR5ReRcTpovqSueqzUjfBByHyAWfoVJS8teF90tzCE3526tear11YbdiVa59AOdn yRbupgc1Tf1p16CvocL9Wndh0V2y+Zd7gkZ+CzWbbSgWl2jYgS1Fyr54PrhOSS04 uIDsJJ5Q5aEKh0zEGDdRjKH4CJ5iDys= -----END CERTIFICATE-----Generated at Sun Apr 6 06:04:57 2025 by rpki-client