$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e09acd9b-bfda-365c-95cd-5d3a226620f4.roa File: e09acd9b-bfda-365c-95cd-5d3a226620f4.roa (raw, json) Hash identifier: 4Wh2iyTLNW3YYf0IGKFcRDeEwVOWR+5h6oTt9vrozCY= Subject key identifier: F4:B5:D3:B4:45:E7:4D:44:ED:75:ED:16:38:91:17:66:98:CC:62:B4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D10272B3F3B47EFFCE00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e09acd9b-bfda-365c-95cd-5d3a226620f4.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 71.240.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d1:02:72:b3:f3:b4:7e:ff:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=15b35ede-3815-456e-abc5-ad4382d59796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:62:c1:66:43:ac:ba:ce:3b:58:10:9a:de:d8: d1:8d:0e:89:b9:28:b5:76:82:a0:bf:62:3f:7e:b9: c2:e8:c3:d3:01:6f:e5:0b:72:ef:57:b6:df:1d:5b: 16:af:7c:89:77:9a:aa:2e:03:5b:b4:14:1f:99:48: d0:99:71:38:82:60:ba:1f:e8:e1:f4:1a:81:92:17: d0:2a:76:dd:a8:c8:24:b2:a1:7c:fe:75:76:a6:4e: 58:b8:13:49:79:67:bc:78:50:ba:98:ce:58:45:71: c1:89:7e:26:0f:b8:9d:2e:2a:7f:48:91:99:88:8c: b8:7e:93:8f:98:cf:11:11:7d:d7:0e:17:6b:ef:d1: 96:6e:bc:d7:32:ae:4d:46:b6:32:73:e8:54:5c:2e: 28:36:76:45:1e:86:82:d1:e2:3d:0c:d4:1e:4d:b6: 35:a3:2b:bf:ad:ab:61:f2:e2:3a:63:0b:58:2c:6c: 70:61:11:8d:cb:03:3f:4d:24:88:b6:dd:0c:9b:91: b5:33:08:ee:ff:8c:33:5e:3a:63:02:36:07:77:ce: af:72:0c:3d:c5:e5:f5:d2:16:bb:30:6f:f1:94:b9: c8:8d:8d:b3:f2:a4:f2:04:0c:07:a6:a0:83:a6:27: bd:89:4d:b3:c2:44:75:f0:d8:1e:52:77:7a:cd:cd: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B5:D3:B4:45:E7:4D:44:ED:75:ED:16:38:91:17:66:98:CC:62:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e09acd9b-bfda-365c-95cd-5d3a226620f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.240.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:4b:2d:72:24:4b:a9:90:1b:fc:23:d4:49:26:aa:64:e1:e0: 46:3b:ad:5c:ef:f8:42:b8:ef:9b:b5:c4:98:08:39:4b:43:e4: 42:b7:1d:b1:88:7f:c0:8e:78:12:3b:9c:3d:d4:c9:e3:5f:e4: f5:75:0b:b0:0c:f5:c5:5a:8d:06:4d:2e:19:47:37:47:de:63: db:53:8b:1f:ee:ab:2e:41:15:6e:51:b1:c7:0d:28:34:13:7d: fe:16:0c:d5:72:a0:37:24:f3:af:fa:5d:78:f3:53:8c:88:b4: 94:e9:f0:fa:b0:69:b6:33:9c:92:a9:c0:7f:99:f2:87:6f:dd: 48:b3:1c:18:85:9e:a6:1b:d4:8d:42:46:64:dc:59:40:c8:c6: be:46:de:75:4e:c9:6e:06:67:5e:ae:45:e3:4b:95:8c:10:1e: 0e:9c:b1:37:ce:70:cf:2e:99:6e:89:0d:24:4a:e3:bd:f5:5e: 1e:9b:4a:19:6e:4a:d1:b5:3c:69:b0:d5:ba:64:ba:58:6b:5a: 65:94:e9:3a:92:c7:bd:cf:96:6b:34:b4:5e:f2:ef:a7:85:f6: cb:27:6d:db:b0:15:d6:42:7d:47:1c:f0:9e:de:0f:1f:87:fd: 7e:91:a4:ff:a1:28:75:40:8e:2d:90:14:29:f4:fb:ce:d9:44: a9:28:7b:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtECcrPztH7/zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MTViMzVlZGUtMzgxNS00NTZlLWFiYzUtYWQ0MzgyZDU5Nzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mLBZkOsus47WBCa3tjRjQ6JuSi1doKgv2I/ frnC6MPTAW/lC3LvV7bfHVsWr3yJd5qqLgNbtBQfmUjQmXE4gmC6H+jh9BqBkhfQ KnbdqMgksqF8/nV2pk5YuBNJeWe8eFC6mM5YRXHBiX4mD7idLip/SJGZiIy4fpOP mM8REX3XDhdr79GWbrzXMq5NRrYyc+hUXC4oNnZFHoaC0eI9DNQeTbY1oyu/rath 8uI6YwtYLGxwYRGNywM/TSSItt0Mm5G1Mwju/4wzXjpjAjYHd86vcgw9xeX10ha7 MG/xlLnIjY2z8qTyBAwHpqCDpie9iU2zwkR18NgeUnd6zc2JYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS107RF501E7XXtFjiRF2aYzGK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTA5YWNkOWItYmZkYS0z NjVjLTk1Y2QtNWQzYTIyNjYyMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR/AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJLLXIkS6mQG/wj1EkmqmTh4EY7rVzv+EK475u1xJgIOUtD5EK3HbGI f8COeBI7nD3UyeNf5PV1C7AM9cVajQZNLhlHN0feY9tTix/uqy5BFW5RsccNKDQT ff4WDNVyoDck86/6XXjzU4yItJTp8PqwabYznJKpwH+Z8odv3UizHBiFnqYb1I1C RmTcWUDIxr5G3nVOyW4GZ16uReNLlYwQHg6csTfOcM8umW6JDSRK4731Xh6bShlu StG1PGmw1bpkulhrWmWU6TqSx73Plms0tF7y76eF9ssnbduwFdZCfUcc8J7eDx+H /X6RpP+hKHVAji2QFCn0+87ZRKkoe9A= -----END CERTIFICATE-----Generated at Sun Apr 6 03:50:00 2025 by rpki-client