$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de9ef1b4-ac14-30c7-9be3-9c6ec9059c64.roa File: de9ef1b4-ac14-30c7-9be3-9c6ec9059c64.roa (raw, json) Hash identifier: 9PiL3tXXHDW8VK+ZcMmoCFJIR1SMco8FPnvzCuMfpsY= Subject key identifier: B7:13:CD:C3:B3:3D:55:CF:8E:52:87:39:66:87:52:FB:6E:62:55:10 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC04A8823A5D5071484900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de9ef1b4-ac14-30c7-9be3-9c6ec9059c64.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.96.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:04:a8:82:3a:5d:50:71:48:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=d8bf5bc6-6332-4c94-b9dd-7682b259bb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:15:86:fa:a1:7d:75:65:32:06:ab:76:cb:94: f1:e0:47:5d:d6:c8:58:22:8b:c3:b7:51:0d:c2:4f: ff:d2:0a:ae:c1:c0:74:e3:e4:9b:9f:bf:ba:42:88: ac:61:55:fd:15:c4:ab:18:e8:67:2f:bf:92:5e:69: 1d:0b:52:67:49:c0:b3:b2:c7:87:a7:41:ef:01:13: 4d:98:c0:4f:cc:ab:15:c3:6f:13:46:37:7c:5c:4f: c6:92:b6:5a:54:e8:2d:7c:be:a0:45:5d:e2:a4:86: 51:6d:0b:4e:ad:5c:ca:ce:2f:bc:fc:77:2f:3b:7d: f7:d8:4a:22:ef:11:ad:b7:f1:25:56:e8:64:9e:b9: 93:ee:43:ba:bb:4e:c9:88:97:48:b7:b7:e2:8d:13: 0c:d6:96:93:4a:eb:02:cc:07:5f:4c:d1:b8:30:8c: 78:6c:73:85:33:e2:0f:3a:8a:77:a4:06:fb:f8:a2: 8a:9c:82:5b:74:f3:0c:7d:5f:af:85:d8:6d:6c:fa: 5c:0a:6b:55:dd:70:9d:4f:c3:63:17:23:17:bf:58: 2f:42:8c:3f:35:d7:75:ea:f1:58:5c:6b:3c:7f:9f: 94:e6:62:db:f4:90:78:d3:d9:2e:aa:77:6b:e5:4f: 7f:66:b6:49:e9:db:e2:d9:b0:ff:ea:08:86:02:49: 3e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:13:CD:C3:B3:3D:55:CF:8E:52:87:39:66:87:52:FB:6E:62:55:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de9ef1b4-ac14-30c7-9be3-9c6ec9059c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:4d:52:97:17:61:13:9d:e9:2b:15:73:74:55:94:f5:21:03: b9:ad:64:b7:c5:71:e3:c3:c7:90:fd:03:fa:7b:27:b0:1d:b5: 7d:32:14:34:c3:2e:0a:f0:db:95:7f:4f:5e:aa:04:c5:a9:56: 70:02:d5:6e:ca:9b:28:e5:6c:5b:da:a8:c1:9a:2c:25:c5:6a: 18:fb:68:68:0c:00:60:b7:92:8f:17:99:48:6a:71:54:79:d4: f8:7c:fd:d8:e4:bd:6a:ed:49:0f:2c:0e:ba:4a:41:19:ac:58: 59:03:b9:2f:d2:42:05:62:8a:88:ed:45:1b:f3:02:26:07:8f: 15:50:84:4f:0f:5e:6b:2d:87:31:cc:dd:66:bf:18:8a:11:1c: 82:bc:c4:38:64:28:c5:c7:e1:f3:f2:b3:77:e3:5e:c3:2f:08: f4:65:58:62:c8:1a:f0:44:2a:c2:53:9e:ff:79:85:16:37:29: 78:17:ec:47:ff:18:31:72:10:3b:d0:82:b0:57:98:b3:48:7f: e5:b2:31:1d:83:a2:5b:21:92:45:08:7a:87:f9:45:1a:e2:70: 7e:59:9f:31:c2:9a:a8:3c:ba:54:99:ce:13:12:40:8d:54:17: 07:9c:d5:18:4c:4f:bb:cd:6e:e3:4e:a6:46:7c:2c:aa:2a:37: a9:87:b6:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3ASogjpdUHFISQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDhiZjViYzYtNjMzMi00Yzk0LWI5ZGQtNzY4MmIyNTliYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBWG+qF9dWUyBqt2y5Tx4Edd1shYIovDt1EN wk//0gquwcB04+Sbn7+6QoisYVX9FcSrGOhnL7+SXmkdC1JnScCzsseHp0HvARNN mMBPzKsVw28TRjd8XE/GkrZaVOgtfL6gRV3ipIZRbQtOrVzKzi+8/HcvO3332Eoi 7xGtt/ElVuhknrmT7kO6u07JiJdIt7fijRMM1paTSusCzAdfTNG4MIx4bHOFM+IP Oop3pAb7+KKKnIJbdPMMfV+vhdhtbPpcCmtV3XCdT8NjFyMXv1gvQow/Ndd16vFY XGs8f5+U5mLb9JB409kuqndr5U9/ZrZJ6dvi2bD/6giGAkk+AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcTzcOzPVXPjlKHOWaHUvtuYlUQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGU5ZWYxYjQtYWMxNC0z MGM3LTliZTMtOWM2ZWM5MDU5YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRNUpcXYROd6SsVc3RVlPUhA7mtZLfFcePDx5D9A/p7J7AdtX0yFDTD Lgrw25V/T16qBMWpVnAC1W7KmyjlbFvaqMGaLCXFahj7aGgMAGC3ko8XmUhqcVR5 1Ph8/djkvWrtSQ8sDrpKQRmsWFkDuS/SQgViiojtRRvzAiYHjxVQhE8PXmsthzHM 3Wa/GIoRHIK8xDhkKMXH4fPys3fjXsMvCPRlWGLIGvBEKsJTnv95hRY3KXgX7Ef/ GDFyEDvQgrBXmLNIf+WyMR2DolshkkUIeof5RRricH5ZnzHCmqg8ulSZzhMSQI1U Fwec1RhMT7vNbuNOpkZ8LKoqN6mHtuk= -----END CERTIFICATE-----Generated at Sat Apr 5 23:22:22 2025 by rpki-client