$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e795e18e-49df-3fdb-9efa-11e55d60ff58.roa File: e795e18e-49df-3fdb-9efa-11e55d60ff58.roa (raw, json) Hash identifier: X9GmeXW6ntf37Onc9V//fMA9/XAg6rgoYLJ4rjA9A94= Subject key identifier: BE:FD:00:F4:EC:B8:42:42:E1:22:7E:AB:9A:FA:CD:F8:39:84:0F:CE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC0BFC2CCDF5007434A680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e795e18e-49df-3fdb-9efa-11e55d60ff58.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.96.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:0b:fc:2c:cd:f5:00:74:34:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=c6073323-ccce-46f7-b654-6d665fe937ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1a:e4:65:05:b6:0d:13:27:f8:35:23:3e:07: 92:88:b8:3a:60:83:2d:8c:db:59:d5:71:be:90:03: 18:dd:7d:60:f3:8c:17:f8:5f:60:6e:42:ef:ee:06: 25:98:5a:60:54:d2:74:22:75:29:fc:d4:d3:7b:da: da:2d:04:d7:8f:14:87:d3:7e:56:c5:fa:49:71:43: e6:55:7b:c1:a9:f6:94:d0:b8:55:13:6b:a9:10:85: eb:34:7d:b8:09:fd:f8:94:39:ab:71:ef:c0:3e:f8: 5c:c5:39:8f:c2:90:05:f9:68:08:2f:f1:90:98:0f: 02:63:b2:8f:00:6c:1f:40:28:63:bc:3f:24:75:2f: f7:51:b1:47:f9:4a:e0:3e:21:c5:7c:4d:e1:a0:ca: 75:23:1d:f4:cb:27:f3:72:c3:52:fb:08:c4:05:2e: 79:d0:2b:e0:5c:43:fc:a4:ee:3a:97:03:36:7c:d4: db:0d:44:4f:42:e1:cf:c8:9a:9c:bf:81:a5:2c:12: 92:67:87:9b:70:ed:cf:66:9b:3e:d0:f3:16:f6:21: f5:b9:b9:e1:b8:b6:07:9e:37:a0:8f:cb:e0:11:6d: 2c:15:9b:d2:8d:4d:66:1e:8f:06:d8:44:74:af:55: 02:12:e0:20:23:7b:b1:75:63:c2:8d:89:47:cc:73: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FD:00:F4:EC:B8:42:42:E1:22:7E:AB:9A:FA:CD:F8:39:84:0F:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e795e18e-49df-3fdb-9efa-11e55d60ff58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:0b:22:9a:46:84:8a:0b:bc:43:09:49:6b:a6:e4:de:ef:f3: f9:59:7c:20:0b:20:83:7f:c4:e1:ef:cc:bc:74:d8:74:c9:d1: aa:1a:2a:32:13:b9:87:cb:4c:e3:13:cc:39:ae:a1:c9:cd:41: 10:28:f0:d0:90:a4:53:96:61:6f:92:a7:7d:90:55:34:f1:ec: 79:77:6a:7e:11:5b:11:86:dc:09:1c:2e:9f:81:4c:04:81:4b: 35:84:b8:59:58:92:6c:26:77:47:c9:57:b4:63:a5:9a:08:77: b4:60:50:a3:2d:df:55:80:83:34:0c:92:9f:bb:67:a7:7d:a6: 3b:21:0e:1d:36:8b:25:e5:42:8d:97:58:9f:89:66:c0:0b:f7: 85:0c:67:dd:ac:b7:99:e4:5c:5e:97:d8:d1:55:ca:bf:c7:1f: a9:b9:c5:f5:54:02:38:3e:c1:f9:3e:f1:56:d2:b5:91:96:00: 1b:20:bb:85:0d:ac:ef:6e:b2:13:be:8c:d1:5a:bc:47:ef:d5: 9e:70:d5:56:5f:82:54:3d:35:27:37:d9:fa:90:da:82:f2:a9: 5f:9f:a7:cf:ff:04:41:a5:72:11:56:52:63:e4:90:73:d6:ba: 58:7e:f7:a0:5d:57:4a:5d:2a:7b:e5:53:d0:c7:62:35:6a:22: c4:f7:91:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Av8LM31AHQ0poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk YzYwNzMzMjMtY2NjZS00NmY3LWI2NTQtNmQ2NjVmZTkzN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBrkZQW2DRMn+DUjPgeSiLg6YIMtjNtZ1XG+ kAMY3X1g84wX+F9gbkLv7gYlmFpgVNJ0InUp/NTTe9raLQTXjxSH035WxfpJcUPm VXvBqfaU0LhVE2upEIXrNH24Cf34lDmrce/APvhcxTmPwpAF+WgIL/GQmA8CY7KP AGwfQChjvD8kdS/3UbFH+UrgPiHFfE3hoMp1Ix30yyfzcsNS+wjEBS550CvgXEP8 pO46lwM2fNTbDURPQuHPyJqcv4GlLBKSZ4ebcO3PZps+0PMW9iH1ubnhuLYHnjeg j8vgEW0sFZvSjU1mHo8G2ER0r1UCEuAgI3uxdWPCjYlHzHOsEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL79APTsuEJC4SJ+q5r6zfg5hA/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTc5NWUxOGUtNDlkZi0z ZmRiLTllZmEtMTFlNTVkNjBmZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwLIppGhIoLvEMJSWum5N7v8/lZfCALIIN/xOHvzLx02HTJ0aoaKjIT uYfLTOMTzDmuocnNQRAo8NCQpFOWYW+Sp32QVTTx7Hl3an4RWxGG3AkcLp+BTASB SzWEuFlYkmwmd0fJV7RjpZoId7RgUKMt31WAgzQMkp+7Z6d9pjshDh02iyXlQo2X WJ+JZsAL94UMZ92st5nkXF6X2NFVyr/HH6m5xfVUAjg+wfk+8VbStZGWABsgu4UN rO9ushO+jNFavEfv1Z5w1VZfglQ9NSc32fqQ2oLyqV+fp8//BEGlchFWUmPkkHPW ulh+96BdV0pdKnvlU9DHYjVqIsT3ka0= -----END CERTIFICATE-----Generated at Sat Apr 5 18:04:22 2025 by rpki-client