$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/113b908c-48a6-3148-8305-9a4a872712d4.roa File: 113b908c-48a6-3148-8305-9a4a872712d4.roa (raw, json) Hash identifier: HIl9dZjsfnfXA/lbYMLHKnSXYxNM50+We0aLock9HlM= Subject key identifier: D3:F8:3C:22:13:88:0F:D1:61:90:28:0B:16:DB:CE:0D:3C:23:F0:8C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C3257920EE950BB953100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/113b908c-48a6-3148-8305-9a4a872712d4.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 70.20.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:32:57:92:0e:e9:50:bb:95:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=437f2d73-b0df-42b5-88b6-f2605a1628e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e8:12:73:70:de:54:17:0b:19:c9:9d:53:bb: ee:8a:fd:b5:44:57:34:2c:db:ff:29:f4:3d:bc:24: 6a:6f:1c:9f:7c:38:db:3c:00:f5:d3:69:0e:da:17: d4:ab:27:7c:5f:65:6c:a9:1c:5f:93:da:aa:2f:fe: e1:08:8a:0d:f2:ca:d1:70:1a:1e:bf:f9:7e:67:3e: 24:99:4e:ac:56:d0:4c:ac:8c:f9:57:81:1b:2c:1f: 6c:d6:77:18:2d:4b:4e:d6:d4:ab:5c:86:d8:ee:a1: 96:c3:4f:b0:32:fa:69:dc:ae:6a:00:76:ac:5e:3d: 89:01:39:ca:be:a5:72:53:d9:a2:d9:c7:a3:e7:a9: 6d:e2:5a:da:a1:33:af:dc:82:12:e0:56:33:e2:87: e5:26:68:0d:e3:e5:1a:74:ae:69:dd:78:40:9e:6a: de:cc:07:35:50:87:b8:44:73:06:4f:12:3d:13:b3: 76:91:59:0d:88:bf:94:f9:7c:d6:1d:35:7f:0b:0e: ca:69:59:eb:61:a9:62:3d:87:76:41:1c:ec:58:0c: 79:b4:8d:1c:00:15:c2:f2:dd:22:75:39:76:8b:e8: dd:7e:d4:42:6f:e9:bd:3a:dd:53:54:10:31:16:68: 9e:df:d6:a7:12:ad:f0:d8:06:a4:05:4d:fa:4c:4d: c0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F8:3C:22:13:88:0F:D1:61:90:28:0B:16:DB:CE:0D:3C:23:F0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/113b908c-48a6-3148-8305-9a4a872712d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.20.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:11:40:95:70:05:b3:50:32:72:1e:0a:14:96:19:13:bf:7c: 25:e1:e7:f3:0f:92:0b:1a:11:8c:00:41:01:93:18:97:9c:44: d0:6b:be:8d:f3:ca:50:6b:43:f4:a9:af:8a:d1:42:1e:0e:2e: 99:f7:43:87:9b:de:37:d5:87:04:14:42:4d:90:65:28:3e:98: d5:ea:2f:ab:7b:63:6b:e2:8f:d2:fc:8c:70:db:58:72:20:97: 18:c6:7d:93:37:b5:e5:01:ae:f3:a5:da:94:11:ca:6f:25:d0: 2a:43:27:05:67:07:67:45:1f:55:0e:58:be:19:83:e4:5e:7b: 9b:19:59:60:df:68:27:cf:a5:5c:aa:ab:94:03:67:bd:ea:00: fd:55:f5:21:4d:2a:71:be:95:fe:67:68:ed:5a:b3:ad:56:16: 5c:a6:e8:4f:8a:da:d2:9e:bb:4b:70:87:26:8b:1f:5a:9b:82: 3a:d7:95:07:d6:05:53:27:e1:cb:fe:59:e0:32:73:c4:85:ae: 57:27:79:42:bf:e6:ac:3a:5a:15:47:21:66:54:4d:99:16:1e: 6b:fd:7a:82:62:0f:c5:d5:3a:65:0a:32:89:e8:c0:57:f2:69: a8:a4:a0:fd:bf:5c:94:59:c4:93:77:c0:bb:00:9c:20:08:a2: b6:2e:3a:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDJXkg7pULuVMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NDM3ZjJkNzMtYjBkZi00MmI1LTg4YjYtZjI2MDVhMTYyOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9egSc3DeVBcLGcmdU7vuiv21RFc0LNv/KfQ9 vCRqbxyffDjbPAD102kO2hfUqyd8X2VsqRxfk9qqL/7hCIoN8srRcBoev/l+Zz4k mU6sVtBMrIz5V4EbLB9s1ncYLUtO1tSrXIbY7qGWw0+wMvpp3K5qAHasXj2JATnK vqVyU9mi2cej56lt4lraoTOv3IIS4FYz4oflJmgN4+UadK5p3XhAnmrezAc1UIe4 RHMGTxI9E7N2kVkNiL+U+XzWHTV/Cw7KaVnrYaliPYd2QRzsWAx5tI0cABXC8t0i dTl2i+jdftRCb+m9Ot1TVBAxFmie39anEq3w2AakBU36TE3AHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNP4PCITiA/RYZAoCxbbzg08I/CMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTEzYjkwOGMtNDhhNi0z MTQ4LTgzMDUtOWE0YTg3MjcxMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERhQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADERQJVwBbNQMnIeChSWGRO/fCXh5/MPkgsaEYwAQQGTGJecRNBrvo3z ylBrQ/Spr4rRQh4OLpn3Q4eb3jfVhwQUQk2QZSg+mNXqL6t7Y2vij9L8jHDbWHIg lxjGfZM3teUBrvOl2pQRym8l0CpDJwVnB2dFH1UOWL4Zg+Ree5sZWWDfaCfPpVyq q5QDZ73qAP1V9SFNKnG+lf5naO1as61WFlym6E+K2tKeu0twhyaLH1qbgjrXlQfW BVMn4cv+WeAyc8SFrlcneUK/5qw6WhVHIWZUTZkWHmv9eoJiD8XVOmUKMonowFfy aaikoP2/XJRZxJN3wLsAnCAIorYuOp4= -----END CERTIFICATE-----Generated at Sun May 11 09:41:36 2025 by rpki-client