$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6b8ca04-3f2f-3cb2-bc72-a0aa5062cfa2.roa File: e6b8ca04-3f2f-3cb2-bc72-a0aa5062cfa2.roa (raw, json) Hash identifier: M6bsgxaQUMglel3jGQB/1D2lufpcQ/iidnzk8kP3khg= Subject key identifier: 61:04:87:A1:7B:21:25:2A:61:78:FF:D8:D0:3B:E7:80:05:F7:23:62 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3DD3DFCE58A2E55563DE4 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6b8ca04-3f2f-3cb2-bc72-a0aa5062cfa2.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.97.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:dd:3d:fc:e5:8a:2e:55:56:3d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=2bdd51a5-f092-4f0f-b4e3-f7389d9117eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:4d:6b:02:9e:b0:1d:66:e1:00:bf:54:27: 99:26:03:46:a2:f2:85:a5:a3:7f:54:ab:9b:b3:dd: 62:8c:4e:1a:e3:27:c7:5c:14:85:ef:ef:c0:b5:16: 56:7f:c8:d9:1f:f9:b8:a3:15:00:d5:49:ec:1e:4f: 6e:83:69:4a:20:d4:fb:f3:ba:35:bb:ab:71:5c:53: c6:f2:95:f9:2c:aa:d2:df:c2:b2:de:3b:97:7d:97: f0:0a:d1:55:4c:d9:a2:8e:14:e0:fe:55:fa:d3:33: a9:ef:30:dd:6d:43:09:5b:2d:d8:29:b3:8a:82:e1: ef:ee:d3:36:aa:7f:5c:88:8c:73:db:2d:53:90:b6: 66:97:ac:33:36:b5:75:a7:db:90:51:15:4a:25:20: 6e:cf:5c:05:a7:54:a7:09:61:a6:1e:fa:fe:90:e9: 58:82:0a:d7:9c:cd:46:5d:cf:40:6a:a2:4a:9a:ef: 33:cd:5b:85:3a:1f:83:94:81:1b:cf:d6:91:52:88: 0a:9d:f6:94:17:28:80:9c:c3:2b:6c:7f:0f:a0:d7: 9f:01:25:ff:07:22:45:ba:63:8d:20:2f:32:39:b2: 0f:f7:4c:22:0f:bb:78:a0:9f:c5:e7:6f:32:5d:81: 81:4d:39:13:67:f6:d3:9f:24:67:d8:7a:93:f0:24: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:04:87:A1:7B:21:25:2A:61:78:FF:D8:D0:3B:E7:80:05:F7:23:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6b8ca04-3f2f-3cb2-bc72-a0aa5062cfa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:62:33:11:18:22:47:57:c9:ee:8d:9a:72:68:74:4a:05:35: f8:72:af:fa:b3:ef:a3:9e:86:a8:56:e3:f2:d7:34:45:bf:11: b1:17:d9:c8:24:7c:39:cf:3e:b5:9d:af:18:c8:bb:b0:67:2f: a7:8e:e5:3a:b4:88:d8:60:fc:37:f1:6b:7f:a1:c6:00:78:87: 1a:40:64:cc:85:b0:da:44:08:8e:bf:a4:54:8e:83:23:9e:93: 1b:27:2b:b8:bc:45:79:5c:18:82:98:0e:e0:87:09:53:f6:c1: 9c:34:3f:8d:b4:76:e6:fe:09:c8:66:16:fc:fe:33:d8:a8:1e: 0f:c8:f1:5a:b3:1f:fe:d5:00:c8:f7:b1:fd:19:55:25:78:8d: bc:10:60:bf:c0:55:a8:2a:85:c6:b2:be:79:e7:44:67:52:f1: e7:d8:69:05:91:2b:d7:92:e7:2e:7e:f1:2e:cf:59:39:14:c6: 54:50:3a:be:6b:d6:eb:af:76:e5:77:aa:a5:29:81:57:51:7b: 03:1f:50:3a:72:dc:e5:78:16:1f:58:89:ba:09:59:6a:6f:4d: b0:cc:cc:94:48:17:2c:0b:5e:f5:c6:ea:d2:3f:26:33:43:65: cc:0d:67:23:b2:30:03:ba:64:d3:28:9c:55:f6:e4:bf:3f:4c: 66:45:a2:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0909/OWKLlVWPeQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MmJkZDUxYTUtZjA5Mi00ZjBmLWI0ZTMtZjczODlkOTExN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvVNawKesB1m4QC/VCeZJgNGovKFpaN/VKub s91ijE4a4yfHXBSF7+/AtRZWf8jZH/m4oxUA1UnsHk9ug2lKINT787o1u6txXFPG 8pX5LKrS38Ky3juXfZfwCtFVTNmijhTg/lX60zOp7zDdbUMJWy3YKbOKguHv7tM2 qn9ciIxz2y1TkLZml6wzNrV1p9uQURVKJSBuz1wFp1SnCWGmHvr+kOlYggrXnM1G Xc9AaqJKmu8zzVuFOh+DlIEbz9aRUogKnfaUFyiAnMMrbH8PoNefASX/ByJFumON IC8yObIP90wiD7t4oJ/F528yXYGBTTkTZ/bTnyRn2HqT8CSVlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEEh6F7ISUqYXj/2NA754AF9yNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTZiOGNhMDQtM2YyZi0z Y2IyLWJjNzItYTBhYTUwNjJjZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBiMxEYIkdXye6NmnJodEoFNfhyr/qz76OehqhW4/LXNEW/EbEX2cgk fDnPPrWdrxjIu7BnL6eO5Tq0iNhg/Dfxa3+hxgB4hxpAZMyFsNpECI6/pFSOgyOe kxsnK7i8RXlcGIKYDuCHCVP2wZw0P420dub+CchmFvz+M9ioHg/I8VqzH/7VAMj3 sf0ZVSV4jbwQYL/AVagqhcayvnnnRGdS8efYaQWRK9eS5y5+8S7PWTkUxlRQOr5r 1uuvduV3qqUpgVdRewMfUDpy3OV4Fh9YiboJWWpvTbDMzJRIFywLXvXG6tI/JjND ZcwNZyOyMAO6ZNMonFX25L8/TGZFogI= -----END CERTIFICATE-----Generated at Sat Apr 5 20:29:49 2025 by rpki-client