$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa File: d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa (raw, json) Hash identifier: 8TEjmV7x4zEmNBpyHdusYTlqaeCOCPssQWQYhDGMXUk= Subject key identifier: 98:3B:60:B4:89:D8:DA:C7:87:D6:50:65:DC:91:BF:63:FB:F0:60:9A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C32F0FA64EDA72E263C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 71.255.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:32:f0:fa:64:ed:a7:2e:26:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=c0209867-3c49-4d97-bc05-1cd0165a54e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7a:6c:e4:29:41:85:b7:8c:51:89:c4:c2:fa: 3d:e6:74:54:75:d6:c2:58:65:6a:eb:80:10:4d:f1: 35:f4:06:6d:23:5f:fa:c5:62:25:cf:d1:52:08:9a: bf:5e:7e:89:85:c9:63:cb:6d:76:22:3b:22:49:59: d3:81:fd:b6:72:60:0c:4b:74:56:8e:51:f8:7d:75: 0b:4b:ed:0c:15:6a:a8:05:88:5b:9a:51:93:e9:3d: 95:03:60:92:95:73:2f:14:e6:57:06:63:06:3a:7e: ac:4c:87:99:e4:7c:67:98:5a:c4:cb:da:0e:03:92: 31:11:b2:09:42:02:dc:dc:de:98:ea:69:5d:cc:34: 10:a2:1c:9a:7f:43:20:dc:54:ef:0f:c8:bb:52:fa: cb:e9:86:c0:4b:67:c4:dc:dd:d6:02:79:02:8b:e8: 19:18:d9:fc:1e:fa:ea:fe:c6:42:a5:55:ad:e7:cc: 07:e3:f6:cb:c0:1e:df:2d:0f:c5:34:bd:e2:b1:c6: a9:95:b2:69:30:c2:93:23:5d:33:59:55:31:b0:b9: 72:83:61:d5:9f:0c:8f:62:ac:95:b4:8e:77:5e:fd: 6c:a8:a0:de:05:b3:50:d9:0a:dc:98:0b:15:e8:48: 77:87:c1:7e:db:0f:6c:7a:32:fd:2e:2c:92:c0:37: a3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3B:60:B4:89:D8:DA:C7:87:D6:50:65:DC:91:BF:63:FB:F0:60:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.255.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1f:a7:03:67:ea:38:68:17:35:c9:37:23:32:7f:8f:8e:27: b6:5f:18:c4:26:de:a2:7c:84:fe:1e:23:bf:74:76:72:6f:ab: dc:5f:aa:29:11:eb:77:34:95:16:73:66:72:ea:5a:a7:ac:81: 72:b4:2a:18:c0:c5:2c:1e:56:88:bc:99:a0:09:06:0e:21:16: f5:fb:59:44:78:68:a1:87:5c:42:a4:82:98:4b:ea:53:67:f3: b9:fa:0d:7f:7a:55:61:77:99:3e:ee:2f:86:f0:a3:c5:e6:09: fc:6e:f5:b7:93:67:12:57:16:70:2e:25:16:62:ab:78:4b:ca: 89:16:8e:8f:81:66:55:8f:77:09:ce:94:3f:09:11:cb:7b:25: bf:3e:87:9f:30:89:5f:05:31:03:ff:c4:31:c9:f5:14:54:17: 5c:15:be:11:1b:fb:8e:8f:ce:40:2a:89:b7:c9:d7:fb:ff:85: 14:49:b4:06:a6:18:5e:83:a6:e2:05:a8:19:ad:4f:e4:0e:80: d3:4c:34:1f:d9:a9:6f:0e:57:80:aa:35:8c:d9:63:97:af:5f: 89:17:b3:d9:a9:f9:54:0c:71:e1:ae:63:f9:c7:74:49:59:9a: ef:04:d7:96:09:41:05:1a:f9:1c:79:7f:02:5e:b2:20:97:e5: 43:db:a1:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDLw+mTtpy4mPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YzAyMDk4NjctM2M0OS00ZDk3LWJjMDUtMWNkMDE2NWE1NGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHps5ClBhbeMUYnEwvo95nRUddbCWGVq64AQ TfE19AZtI1/6xWIlz9FSCJq/Xn6Jhcljy212IjsiSVnTgf22cmAMS3RWjlH4fXUL S+0MFWqoBYhbmlGT6T2VA2CSlXMvFOZXBmMGOn6sTIeZ5HxnmFrEy9oOA5IxEbIJ QgLc3N6Y6mldzDQQohyaf0Mg3FTvD8i7UvrL6YbAS2fE3N3WAnkCi+gZGNn8Hvrq /sZCpVWt58wH4/bLwB7fLQ/FNL3iscaplbJpMMKTI10zWVUxsLlyg2HVnwyPYqyV tI53Xv1sqKDeBbNQ2QrcmAsV6Eh3h8F+2w9sejL9LiySwDejzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJg7YLSJ2NrHh9ZQZdyRv2P78GCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDg4MWQwMDktY2JmOC0z YTdkLWFhY2ItM2FiYmM4MTVlMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMfpwNn6jhoFzXJNyMyf4+OJ7ZfGMQm3qJ8hP4eI790dnJvq9xfqikR 63c0lRZzZnLqWqesgXK0KhjAxSweVoi8maAJBg4hFvX7WUR4aKGHXEKkgphL6lNn 87n6DX96VWF3mT7uL4bwo8XmCfxu9beTZxJXFnAuJRZiq3hLyokWjo+BZlWPdwnO lD8JEct7Jb8+h58wiV8FMQP/xDHJ9RRUF1wVvhEb+46PzkAqibfJ1/v/hRRJtAam GF6DpuIFqBmtT+QOgNNMNB/ZqW8OV4CqNYzZY5evX4kXs9mp+VQMceGuY/nHdElZ mu8E15YJQQUa+Rx5fwJesiCX5UPbodg= -----END CERTIFICATE-----Generated at Sun Apr 6 00:51:41 2025 by rpki-client