$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f21ee4d8-32aa-3b40-bb80-b0b0448a875c.roa File: f21ee4d8-32aa-3b40-bb80-b0b0448a875c.roa (raw, json) Hash identifier: U8KQxv6TF9+xT0FBuw336+PsT3MUFz7iBY5BA9Vky4c= Subject key identifier: AD:97:82:B7:73:B5:9D:89:5D:37:36:44:A2:EC:27:85:62:D5:8B:CB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3E1A029E0B65E76115780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f21ee4d8-32aa-3b40-bb80-b0b0448a875c.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.109.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:e1:a0:29:e0:b6:5e:76:11:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=063b4e87-8801-4cda-b050-20bfd45b542a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6c:11:25:ea:68:cf:42:51:78:10:40:7d:65: 72:47:77:6d:68:9c:b0:33:33:d8:87:80:08:4f:45: 0b:6e:e0:fe:83:55:9c:5c:d9:76:2f:aa:94:15:25: 07:5f:09:cd:ae:80:ea:f9:3a:8e:71:14:48:80:06: 34:6d:6b:6f:fd:58:37:8b:0a:07:f1:2a:7d:7e:8f: bc:8c:ca:5a:a6:44:c4:58:91:2c:30:06:41:f9:a7: 5f:a7:c1:22:78:3b:62:d8:8d:29:dc:27:dd:23:c1: ce:93:a1:fc:79:4c:e8:39:4e:6d:92:5f:98:d9:56: 99:a9:d4:46:df:ea:2e:b5:0b:c1:c9:eb:09:8c:1a: b6:0c:7c:09:11:33:29:e2:5d:ea:f4:27:fe:35:64: ab:b0:fb:31:66:00:04:8c:d6:61:84:e9:65:12:1d: 4b:fc:56:b0:f1:cd:5b:92:62:14:9b:e7:a2:53:be: d4:79:4e:99:9e:66:d6:7e:47:bc:9c:1a:61:36:96: 4f:83:fd:3f:7d:50:00:34:77:a1:cd:4a:87:c5:6f: fb:9a:9a:97:1d:1e:be:f4:39:9c:9e:f4:06:e6:62: 17:06:f4:bc:db:c9:84:14:1c:ed:ee:51:d7:8f:12: 4c:8b:33:5a:62:8a:fa:df:c4:df:b4:da:c0:7c:13: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:97:82:B7:73:B5:9D:89:5D:37:36:44:A2:EC:27:85:62:D5:8B:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f21ee4d8-32aa-3b40-bb80-b0b0448a875c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.109.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:55:9f:cc:5e:ca:e6:c4:5f:8f:5f:bf:b1:bf:36:39:cd:41: d6:b0:41:a4:e9:ba:5b:8d:54:74:42:c4:3c:f4:46:d7:e2:c0: 44:23:13:a4:51:29:a2:0a:e4:36:48:f0:6f:58:19:24:51:8c: fc:40:4f:d8:0d:b2:54:24:46:62:5e:64:c9:c5:0a:bc:1a:b1: f4:bb:5a:7e:6b:db:85:61:03:e3:ef:54:50:0e:d1:c4:cc:3c: 75:20:ac:d8:d7:1a:53:d8:14:6e:68:f5:2a:6e:44:e9:96:45: be:f9:ae:ff:e1:56:a3:87:77:7c:3c:a0:ee:82:96:f3:4f:47: ed:bf:f3:80:ba:ae:88:e6:b8:6d:ad:d7:d9:83:31:a1:80:a4: 20:fd:cd:6e:39:af:5c:18:dc:1c:ef:8c:93:1e:2d:4a:8a:35: 8e:89:b1:6c:c3:22:71:52:52:c1:2c:22:41:b3:98:36:5e:39: 9d:7d:38:24:4d:eb:a0:26:2a:d4:c6:40:41:ff:2f:ff:df:fd: 30:7a:f8:44:73:a1:5c:ae:e8:4b:37:a0:0b:ed:b0:5f:d5:04: 73:48:ab:fa:9b:0d:1b:36:2b:1a:47:52:3d:e9:a9:c9:03:a1: 82:07:e0:ea:f1:57:ed:4a:dc:60:f7:3e:fc:80:75:ac:90:67: 5f:30:09:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+GgKeC2XnYRV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MDYzYjRlODctODgwMS00Y2RhLWIwNTAtMjBiZmQ0NWI1NDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWwRJepoz0JReBBAfWVyR3dtaJywMzPYh4AI T0ULbuD+g1WcXNl2L6qUFSUHXwnNroDq+TqOcRRIgAY0bWtv/Vg3iwoH8Sp9fo+8 jMpapkTEWJEsMAZB+adfp8EieDti2I0p3CfdI8HOk6H8eUzoOU5tkl+Y2VaZqdRG 3+outQvByesJjBq2DHwJETMp4l3q9Cf+NWSrsPsxZgAEjNZhhOllEh1L/Faw8c1b kmIUm+eiU77UeU6ZnmbWfke8nBphNpZPg/0/fVAANHehzUqHxW/7mpqXHR6+9Dmc nvQG5mIXBvS828mEFBzt7lHXjxJMizNaYor638TftNrAfBPbIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2XgrdztZ2JXTc2RKLsJ4Vi1YvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjIxZWU0ZDgtMzJhYS0z YjQwLWJiODAtYjBiMDQ0OGE4NzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESG2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJVn8xeyubEX49fv7G/NjnNQdawQaTpuluNVHRCxDz0RtfiwEQjE6RR KaIK5DZI8G9YGSRRjPxAT9gNslQkRmJeZMnFCrwasfS7Wn5r24VhA+PvVFAO0cTM PHUgrNjXGlPYFG5o9SpuROmWRb75rv/hVqOHd3w8oO6ClvNPR+2/84C6rojmuG2t 19mDMaGApCD9zW45r1wY3BzvjJMeLUqKNY6JsWzDInFSUsEsIkGzmDZeOZ19OCRN 66AmKtTGQEH/L//f/TB6+ERzoVyu6Es3oAvtsF/VBHNIq/qbDRs2KxpHUj3pqckD oYIH4OrxV+1K3GD3PvyAdayQZ18wCRA= -----END CERTIFICATE-----Generated at Sun Apr 6 03:41:55 2025 by rpki-client