$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa File: eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa (raw, json) Hash identifier: A8lzuUl6X3QZmpLcwUXOWEk3GezF5oUpisbr+hf8Wz8= Subject key identifier: 9F:58:42:1D:20:82:9A:9E:B3:2B:A4:06:55:A2:45:18:F3:E1:70:1F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246CF950D5B5C7244E27340 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 96.249.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:cf:95:0d:5b:5c:72:44:e2:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=f22f4591-605d-4eb3-b1ff-9cb7199bf51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:9e:11:ad:82:94:11:da:7f:cf:81:3d:85: 52:59:97:cc:7e:a9:01:75:6a:77:05:0c:4a:80:49: c2:74:5e:b3:04:06:98:0b:82:66:81:47:ed:53:f5: ec:20:ca:2e:ab:5e:7d:f8:3f:6e:e0:8b:e2:bc:8a: 4f:6f:e5:2d:b0:dd:b9:2c:d4:6c:ff:3b:aa:28:be: 86:2e:84:d1:73:48:19:cf:93:63:59:c6:93:70:a2: bf:a9:a3:42:d4:f7:e0:f0:8b:e1:95:77:9c:e3:41: 0a:35:9a:16:39:43:d4:83:86:81:a2:62:85:77:4e: 92:58:0a:9a:02:bb:ed:1e:3b:03:fa:c0:07:57:56: 07:99:59:3a:37:61:a4:6e:a7:60:18:e4:3d:01:99: b8:47:3b:a9:1b:6e:d0:fd:a0:ce:b1:b8:64:0f:ca: 1d:12:11:2b:d6:32:38:1e:de:ee:44:15:eb:72:58: d8:46:d2:f8:6c:85:5f:95:d6:a2:f1:3a:a1:01:01: 57:fb:b3:c7:84:c3:c0:ef:d3:05:40:d7:7c:df:c0: c2:13:d0:71:99:b6:fd:a8:4a:eb:d1:70:1b:1a:e3: a7:2c:08:cd:20:51:13:a1:e5:ad:45:60:ea:26:ee: 60:42:c2:3e:1e:76:c8:64:a3:e3:11:ae:92:f9:6d: 96:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:58:42:1D:20:82:9A:9E:B3:2B:A4:06:55:A2:45:18:F3:E1:70:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.249.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:95:75:55:cb:50:1e:95:23:35:20:6c:fa:60:18:ab:db:d3: 2f:3e:03:fb:65:f9:ba:80:e9:99:8b:8d:20:db:30:30:1e:0c: a5:bf:a4:b8:34:62:1b:e7:46:cc:47:64:da:bd:22:c1:b3:8a: 4b:06:aa:21:d6:20:8c:ec:f0:36:b3:9a:7f:88:3f:a9:5b:39: b6:a0:2d:73:40:1e:e3:de:a1:67:d0:2e:42:e3:25:56:8f:5b: 62:b8:cd:9f:68:fe:8b:7a:b3:7a:a7:5f:4a:1a:f2:d3:b1:cc: 3f:47:02:c2:89:08:2d:68:8d:a6:a6:21:be:c3:51:17:23:f2: 06:77:aa:80:0a:f6:39:aa:c2:39:db:01:d5:3d:6c:e3:10:74: 4f:58:e5:85:d3:fa:3e:67:27:04:68:c8:78:ab:a7:bb:70:3a: c9:09:26:26:28:d9:3b:85:c3:3f:16:bd:65:d9:47:9d:4c:be: 74:25:07:ca:29:6f:a9:2e:87:fa:69:db:31:29:a5:34:d5:d7: 8c:d9:d5:eb:8a:47:14:68:22:42:b2:8d:dc:cd:07:b8:b8:0d: 67:07:cc:48:0a:38:f6:1d:57:5a:14:22:28:b8:ca:d7:f2:ae: 7e:60:c2:46:96:84:de:54:15:43:a4:40:86:13:fa:dc:d9:e4: dc:9a:88:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRs+VDVtcckTic0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZjIyZjQ1OTEtNjA1ZC00ZWIzLWIxZmYtOWNiNzE5OWJmNTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsCeEa2ClBHaf8+BPYVSWZfMfqkBdWp3BQxK gEnCdF6zBAaYC4JmgUftU/XsIMouq159+D9u4IvivIpPb+UtsN25LNRs/zuqKL6G LoTRc0gZz5NjWcaTcKK/qaNC1Pfg8IvhlXec40EKNZoWOUPUg4aBomKFd06SWAqa ArvtHjsD+sAHV1YHmVk6N2GkbqdgGOQ9AZm4RzupG27Q/aDOsbhkD8odEhEr1jI4 Ht7uRBXrcljYRtL4bIVfldai8TqhAQFX+7PHhMPA79MFQNd838DCE9Bxmbb9qErr 0XAbGuOnLAjNIFEToeWtRWDqJu5gQsI+HnbIZKPjEa6S+W2WowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9YQh0ggpqesyukBlWiRRjz4XAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWI3YWM5ZDYtY2FhOS0z ZmNhLWIwZDItZDNjM2E2ZDNlNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYPkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGVdVXLUB6VIzUgbPpgGKvb0y8+A/tl+bqA6ZmLjSDbMDAeDKW/pLg0 YhvnRsxHZNq9IsGziksGqiHWIIzs8Dazmn+IP6lbObagLXNAHuPeoWfQLkLjJVaP W2K4zZ9o/ot6s3qnX0oa8tOxzD9HAsKJCC1ojaamIb7DURcj8gZ3qoAK9jmqwjnb AdU9bOMQdE9Y5YXT+j5nJwRoyHirp7twOskJJiYo2TuFwz8WvWXZR51MvnQlB8op b6kuh/pp2zEppTTV14zZ1euKRxRoIkKyjdzNB7i4DWcHzEgKOPYdV1oUIii4ytfy rn5gwkaWhN5UFUOkQIYT+tzZ5NyaiFk= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:08 2025 by rpki-client