$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eaf27d41-cc4a-34ea-a5ad-7a79143097ca.roa File: eaf27d41-cc4a-34ea-a5ad-7a79143097ca.roa (raw, json) Hash identifier: 7DGFiypZoGfboPxGrHBDa8FpaWDsvCILsl03s+26Sv0= Subject key identifier: 6A:AD:80:EA:37:42:22:55:64:E2:41:93:A3:57:D3:19:9D:56:45:73 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C29FD809073B58B1B72C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eaf27d41-cc4a-34ea-a5ad-7a79143097ca.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 71.254.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:29:fd:80:90:73:b5:8b:1b:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=06d5c7de-2402-4d65-84a4-d913ee7195c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3f:95:ed:50:68:4f:13:f7:94:e9:2c:c3:58: 07:18:b3:f2:b6:4e:77:40:2e:70:3e:38:08:b2:a9: 36:ad:5e:8e:33:14:c3:ac:13:69:2c:67:f2:56:ee: 01:0e:14:b6:38:2f:03:ff:4f:c9:52:43:ec:60:c1: 95:15:e8:7b:b0:d3:eb:63:2d:0f:d6:a8:f7:8b:98: 22:52:45:56:d6:ba:d9:ab:a3:06:be:c2:e6:5f:84: cb:12:6f:16:72:49:1c:7c:88:94:31:a7:91:14:01: 69:87:24:22:9f:6f:cf:2f:46:7e:33:21:3e:24:ca: f3:c6:1f:26:ab:20:92:96:dd:9b:13:cd:78:3b:6a: 8e:65:18:e6:8c:22:0b:c2:9e:6e:78:a3:02:b4:31: e8:84:52:38:23:2e:a2:d4:84:4b:90:a1:dd:35:ef: ed:66:da:56:7e:d7:2b:80:a5:cf:2f:d9:f5:3e:11: 5a:fb:33:ae:25:36:58:f3:8d:f8:9b:7b:d9:3b:bd: 33:50:7c:72:7d:60:d8:d0:e4:5b:b5:7b:81:f5:bd: b9:2b:11:1e:18:7d:f9:f6:f0:d9:03:5b:af:ac:3f: 14:1d:45:18:a5:04:ae:00:21:a8:fb:76:75:f2:d0: 6b:56:9a:85:4f:d4:c7:d3:80:12:e0:7d:de:62:c4: 25:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AD:80:EA:37:42:22:55:64:E2:41:93:A3:57:D3:19:9D:56:45:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eaf27d41-cc4a-34ea-a5ad-7a79143097ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.254.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f2:34:41:cb:2f:39:72:83:3a:42:8a:f5:b0:ad:b2:af:79: a4:32:cd:01:cf:65:6f:b0:78:a2:54:55:e9:6c:9c:57:a6:d0: 45:7d:d9:b7:c1:6f:79:16:3c:93:49:5a:97:1a:6f:4f:bb:1e: 5c:a2:21:c4:93:11:e3:7d:ac:72:b8:31:66:79:b1:8e:7c:ec: ce:b8:30:a5:a1:ee:84:b9:73:23:ae:35:54:c6:73:78:75:db: 61:6c:4f:98:cf:c5:82:c8:f3:50:7b:80:82:b1:48:97:01:e7: 1e:03:b6:6e:6a:86:65:61:06:2e:ff:67:fa:c1:f9:cc:fc:aa: 22:33:8f:54:60:2d:2b:69:df:23:f3:53:a2:ad:e6:da:90:e3: 0a:1c:99:96:b3:99:d9:e5:d9:cf:74:c9:cf:3f:08:d2:c2:da: 53:cd:57:f7:85:63:e3:38:ff:32:66:5c:f4:2c:bc:a0:c5:f2: e2:75:81:2f:9a:41:12:32:59:5d:1b:3c:5d:24:bc:08:17:80: cc:f7:f9:d8:ae:f9:28:f4:4c:56:02:81:23:bd:ea:13:cd:1d: 07:77:b3:92:25:24:3e:cd:3e:40:5f:62:ae:26:40:3a:05:fb: 1f:fc:9b:db:35:35:0e:bf:96:7f:1e:4c:07:e5:80:ab:7d:cd: 73:ee:f9:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCn9gJBztYsbcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MDZkNWM3ZGUtMjQwMi00ZDY1LTg0YTQtZDkxM2VlNzE5NWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj+V7VBoTxP3lOksw1gHGLPytk53QC5wPjgI sqk2rV6OMxTDrBNpLGfyVu4BDhS2OC8D/0/JUkPsYMGVFeh7sNPrYy0P1qj3i5gi UkVW1rrZq6MGvsLmX4TLEm8WckkcfIiUMaeRFAFphyQin2/PL0Z+MyE+JMrzxh8m qyCSlt2bE814O2qOZRjmjCILwp5ueKMCtDHohFI4Iy6i1IRLkKHdNe/tZtpWftcr gKXPL9n1PhFa+zOuJTZY8434m3vZO70zUHxyfWDY0ORbtXuB9b25KxEeGH359vDZ A1uvrD8UHUUYpQSuACGo+3Z18tBrVpqFT9TH04AS4H3eYsQlrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqtgOo3QiJVZOJBk6NX0xmdVkVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWFmMjdkNDEtY2M0YS0z NGVhLWE1YWQtN2E3OTE0MzA5N2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7yNEHLLzlygzpCivWwrbKveaQyzQHPZW+weKJUVelsnFem0EV92bfB b3kWPJNJWpcab0+7HlyiIcSTEeN9rHK4MWZ5sY587M64MKWh7oS5cyOuNVTGc3h1 22FsT5jPxYLI81B7gIKxSJcB5x4Dtm5qhmVhBi7/Z/rB+cz8qiIzj1RgLStp3yPz U6Kt5tqQ4wocmZazmdnl2c90yc8/CNLC2lPNV/eFY+M4/zJmXPQsvKDF8uJ1gS+a QRIyWV0bPF0kvAgXgMz3+diu+Sj0TFYCgSO96hPNHQd3s5IlJD7NPkBfYq4mQDoF +x/8m9s1NQ6/ln8eTAflgKt9zXPu+VU= -----END CERTIFICATE-----Generated at Sun Apr 6 06:04:51 2025 by rpki-client