$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff976497-83f8-3a22-b4cb-ed1503be34e8.roa File: ff976497-83f8-3a22-b4cb-ed1503be34e8.roa (raw, json) Hash identifier: yS8I7MQU0XyfyDeK3zWrfZPNnLh7ZfyWUOkZXq1x+BI= Subject key identifier: 1F:F5:38:0B:9A:7B:F0:CD:11:64:C0:97:7C:86:24:7E:F7:3D:4A:42 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC0DDAD2205A35364F8B00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff976497-83f8-3a22-b4cb-ed1503be34e8.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.104.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:0d:da:d2:20:5a:35:36:4f:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=6c0e4b7a-c588-499d-81ac-28d152d7339f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ee:17:11:8f:46:29:b1:ca:4c:08:52:5c:60: eb:db:19:6d:7d:0b:00:53:27:5b:1b:c3:20:9f:79: a0:ab:ca:6b:57:cb:6d:46:96:78:a5:5d:08:c5:a7: 54:a2:ed:ae:48:8e:94:35:ba:a9:f3:1e:98:20:d8: 77:48:00:28:72:4f:61:41:99:8f:3b:e7:93:5b:5d: 12:87:4c:4b:ed:1b:bc:ab:e4:3f:98:1e:85:ce:74: be:ed:46:ad:f7:6a:76:8a:80:5c:fa:61:ad:b0:e1: de:2f:3b:90:a1:eb:f2:1b:01:cf:f6:52:4c:d1:0e: cd:be:57:1f:ac:ec:35:d4:08:9c:af:0d:fe:80:bc: a1:a6:b1:3b:d8:a8:b0:b3:a8:de:7d:59:0c:9d:a8: 89:4b:54:85:ab:52:fb:96:12:9b:86:03:03:f8:31: 05:7b:11:34:61:88:c1:bf:43:91:9d:c6:d6:5e:14: fa:58:9e:52:8a:f6:ae:6a:d6:b8:7b:a7:82:ff:a3: bf:05:55:2e:f0:42:ce:fb:17:47:17:35:52:6c:5c: 54:30:75:a0:68:5e:f3:9d:ef:89:82:ea:da:31:5c: c2:6e:98:c9:45:00:4b:58:7c:be:ea:56:a4:68:f4: c5:59:09:d0:a2:da:e0:5f:6b:fa:5c:15:20:45:34: 4b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F5:38:0B:9A:7B:F0:CD:11:64:C0:97:7C:86:24:7E:F7:3D:4A:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff976497-83f8-3a22-b4cb-ed1503be34e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.104.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e7:5d:9b:13:1a:37:5a:76:87:df:00:0a:75:d0:bd:13:55: 94:89:a9:b6:8f:51:21:3b:b8:51:67:ea:e4:73:11:42:02:a3: 63:95:4c:4f:7d:e2:8b:c2:56:ef:b5:d5:6c:d5:17:b3:fa:a7: 32:57:8e:9e:2e:10:a1:4c:f1:4d:ee:27:34:bf:b8:7d:c1:ae: 3c:f5:41:09:f1:8a:d4:14:f0:13:ec:65:f1:0a:a0:2f:9c:9c: 17:6b:c0:07:15:f2:67:8e:7a:33:8c:81:99:03:95:f3:c3:db: 9f:96:93:64:fb:fa:66:5c:c3:f5:f3:f0:4d:32:54:c6:90:20: 20:3d:4e:39:cc:df:b5:1f:24:db:2e:74:e0:ee:ae:93:41:a0: cb:24:a1:9f:a3:41:14:e2:4b:9a:e4:44:ad:e7:1f:06:b3:97: 55:f8:3b:3f:85:72:cf:0f:eb:e0:af:92:25:38:51:9d:da:66: 64:c9:d0:90:4d:cc:34:ea:51:11:c0:35:78:4e:9b:6c:4a:a5: 40:eb:1f:04:b9:9a:ba:e7:b2:0b:a0:b1:78:0f:27:3b:70:7d: 95:85:f0:74:81:7c:08:81:44:ce:db:df:63:29:ae:8a:9f:d9: 5b:18:f1:f5:79:0c:a3:70:a5:01:00:81:bc:e5:6c:71:4b:a1: b6:eb:9a:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3A3a0iBaNTZPiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NmMwZTRiN2EtYzU4OC00OTlkLTgxYWMtMjhkMTUyZDczMzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku4XEY9GKbHKTAhSXGDr2xltfQsAUydbG8Mg n3mgq8prV8ttRpZ4pV0IxadUou2uSI6UNbqp8x6YINh3SAAock9hQZmPO+eTW10S h0xL7Ru8q+Q/mB6FznS+7Uat92p2ioBc+mGtsOHeLzuQoevyGwHP9lJM0Q7Nvlcf rOw11Aicrw3+gLyhprE72Kiws6jefVkMnaiJS1SFq1L7lhKbhgMD+DEFexE0YYjB v0ORncbWXhT6WJ5Sivauata4e6eC/6O/BVUu8ELO+xdHFzVSbFxUMHWgaF7zne+J guraMVzCbpjJRQBLWHy+6lakaPTFWQnQotrgX2v6XBUgRTRLtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/1OAuae/DNEWTAl3yGJH73PUpCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmY5NzY0OTctODNmOC0z YTIyLWI0Y2ItZWQxNTAzYmUzNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbnXZsTGjdadoffAAp10L0TVZSJqbaPUSE7uFFn6uRzEUICo2OVTE99 4ovCVu+11WzVF7P6pzJXjp4uEKFM8U3uJzS/uH3Brjz1QQnxitQU8BPsZfEKoC+c nBdrwAcV8meOejOMgZkDlfPD25+Wk2T7+mZcw/Xz8E0yVMaQICA9TjnM37UfJNsu dODurpNBoMskoZ+jQRTiS5rkRK3nHwazl1X4Oz+Fcs8P6+CvkiU4UZ3aZmTJ0JBN zDTqURHANXhOm2xKpUDrHwS5mrrnsgugsXgPJztwfZWF8HSBfAiBRM7b32Mproqf 2VsY8fV5DKNwpQEAgbzlbHFLobbrmsI= -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:09 2025 by rpki-client