$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efbab09d-fb3d-3770-acbe-e66c34412d53.roa File: efbab09d-fb3d-3770-acbe-e66c34412d53.roa (raw, json) Hash identifier: 2li5PFZkbYE1fm1QxIQOKA3MQxU/kPEe9NbMERbKZzU= Subject key identifier: E7:27:47:3F:C2:AE:5A:49:C7:09:18:0D:5C:40:2B:68:1F:40:7A:51 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3DC967A9CB7F0EFC80BE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efbab09d-fb3d-3770-acbe-e66c34412d53.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.108.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:dc:96:7a:9c:b7:f0:ef:c8:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=eeecc78d-b46b-450c-89ee-cd53da2fc0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:67:3b:e1:d0:8a:cb:4f:43:9f:a9:fa:56: 98:fc:01:ce:a1:24:62:af:1f:dd:18:15:c2:03:d2: d1:2f:ee:97:65:df:58:03:48:74:94:12:da:e5:66: b8:c4:51:71:99:0a:f5:96:6e:57:59:9c:05:81:5f: 0f:01:2e:3c:7a:c2:ee:46:d5:cd:7d:94:70:e0:f1: 83:d8:12:db:2d:4b:0f:9a:c7:cb:0e:a7:53:67:fe: 63:7c:26:d2:d2:15:79:87:82:e0:62:b3:c1:06:55: d7:67:bb:58:01:2f:08:42:ac:ab:2d:90:cb:a9:b1: b1:92:5d:60:d1:3b:71:66:9b:fb:92:20:22:6e:3b: 06:36:77:3e:41:82:3e:79:f2:5a:41:56:f6:3e:37: 78:d7:96:64:cf:0b:54:bb:6c:ff:43:00:53:a8:0c: 04:7d:52:69:d8:46:80:16:e8:d9:8d:de:42:58:8a: 30:ca:9f:a3:11:4b:37:54:5b:d2:0d:c2:96:c5:17: 8e:e1:9d:65:19:5c:45:b6:f1:a9:d8:39:97:19:b8: cd:74:1f:56:8f:92:eb:a2:d2:99:1f:0e:d9:ac:de: 84:c8:96:65:87:6e:ce:af:b3:a9:9f:2e:70:e5:cd: f1:16:15:a1:53:24:b9:4a:84:8d:4c:af:24:1f:01: 95:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:27:47:3F:C2:AE:5A:49:C7:09:18:0D:5C:40:2B:68:1F:40:7A:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efbab09d-fb3d-3770-acbe-e66c34412d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:af:c2:07:f2:6e:ed:95:5a:04:5e:d5:78:67:d7:59:01:36: cc:22:5a:44:43:0e:8a:bb:fc:ef:51:fe:2b:91:9f:0e:24:f0: 2c:16:5b:4e:34:11:8c:c7:39:28:36:1b:26:24:b0:23:24:99: be:f7:3d:bd:77:bf:5e:9f:25:0c:cc:1a:82:e8:67:3b:63:a1: f8:66:97:8e:03:a2:79:c7:80:d4:8e:ed:58:1f:1f:04:53:b8: ad:17:65:0d:87:87:9f:33:5b:f6:87:0e:76:08:a7:ef:60:f8: cc:b2:75:fb:64:8e:c5:b1:1c:fc:27:ba:68:6c:62:d1:4a:8c: 0a:fe:24:32:04:e6:f1:0c:ad:fc:b7:43:86:8d:58:2e:43:79: 98:51:cf:7e:5b:0b:cc:29:ab:be:d9:31:22:f7:79:7a:c8:da: fc:3c:3f:ff:b4:a0:08:6c:8c:fe:d0:7e:f9:4d:15:bc:47:56: 86:4d:17:a5:ae:73:c7:3f:f8:a0:a4:75:d6:80:8d:5c:76:31: 4c:b9:81:4a:0c:80:65:07:62:2f:9a:dd:4e:ff:2e:3a:45:8c: 44:e2:cf:ba:75:91:d8:d3:19:ff:66:45:62:10:52:ae:ab:57: ac:49:ab:ef:57:c9:fe:ad:75:02:5b:c8:9e:8d:ab:f4:5f:f0: 92:f3:4f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09yWepy38O/IC+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk ZWVlY2M3OGQtYjQ2Yi00NTBjLTg5ZWUtY2Q1M2RhMmZjMGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVNnO+HQistPQ5+p+laY/AHOoSRirx/dGBXC A9LRL+6XZd9YA0h0lBLa5Wa4xFFxmQr1lm5XWZwFgV8PAS48esLuRtXNfZRw4PGD 2BLbLUsPmsfLDqdTZ/5jfCbS0hV5h4LgYrPBBlXXZ7tYAS8IQqyrLZDLqbGxkl1g 0TtxZpv7kiAibjsGNnc+QYI+efJaQVb2Pjd415ZkzwtUu2z/QwBTqAwEfVJp2EaA FujZjd5CWIowyp+jEUs3VFvSDcKWxReO4Z1lGVxFtvGp2DmXGbjNdB9Wj5LrotKZ Hw7ZrN6EyJZlh27Or7Opny5w5c3xFhWhUyS5SoSNTK8kHwGVBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcnRz/CrlpJxwkYDVxAK2gfQHpRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWZiYWIwOWQtZmIzZC0z NzcwLWFjYmUtZTY2YzM0NDEyZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSGyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqvwgfybu2VWgRe1Xhn11kBNswiWkRDDoq7/O9R/iuRnw4k8CwWW040 EYzHOSg2GyYksCMkmb73Pb13v16fJQzMGoLoZztjofhml44DonnHgNSO7VgfHwRT uK0XZQ2Hh58zW/aHDnYIp+9g+MyydftkjsWxHPwnumhsYtFKjAr+JDIE5vEMrfy3 Q4aNWC5DeZhRz35bC8wpq77ZMSL3eXrI2vw8P/+0oAhsjP7QfvlNFbxHVoZNF6Wu c8c/+KCkddaAjVx2MUy5gUoMgGUHYi+a3U7/LjpFjETiz7p1kdjTGf9mRWIQUq6r V6xJq+9Xyf6tdQJbyJ6Nq/Rf8JLzT0Q= -----END CERTIFICATE-----Generated at Sat Apr 5 18:45:02 2025 by rpki-client