$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/197040d8-e401-3d3c-9da3-a2eb403ab0ff.roa File: 197040d8-e401-3d3c-9da3-a2eb403ab0ff.roa (raw, json) Hash identifier: D1H0mHtA+2X/BktUyWEg2DYjzHyFq/eE+sZ4h4CVBNA= Subject key identifier: 70:09:61:DB:37:6E:7C:9D:89:60:6A:A0:F7:87:4F:F7:C3:76:AC:D7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C3349580F1D4A414A7E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/197040d8-e401-3d3c-9da3-a2eb403ab0ff.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 71.120.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:33:49:58:0f:1d:4a:41:4a:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=ed404c70-46e2-4755-9a97-f6db2ae3e520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:35:e1:b9:82:b2:9c:09:5e:5c:d1:7c:16: ca:89:e6:69:5d:84:8d:65:d3:5d:db:70:8e:b2:05: 10:90:33:a9:fd:9d:44:6b:94:65:2b:13:4c:f5:72: c6:26:d9:c5:4f:ea:78:98:c7:15:1a:f2:11:b4:7c: 13:31:cf:f9:87:c7:68:d1:cd:c5:94:11:9f:fc:e5: c3:c4:8c:42:b8:df:9c:3b:39:f4:23:2b:bb:aa:3b: 38:f4:ac:9f:dc:1a:49:08:96:33:96:5f:05:60:87: 09:11:5b:6d:bb:ad:d8:a6:cc:93:1c:e6:e8:b9:0a: ab:9e:8d:c0:f9:86:f4:f1:37:24:30:36:90:60:81: b3:0b:05:69:5d:7f:64:6f:10:6d:64:51:1f:0a:da: c7:9d:25:c7:da:3f:80:f1:4b:bf:5f:fb:a1:91:b4: 5a:ab:a6:06:10:8e:4c:a6:85:e9:9c:5f:0e:5a:32: d4:46:46:bc:2b:25:9a:ef:da:47:69:63:d2:f6:ea: 7b:d4:64:d7:43:35:97:2a:3b:36:17:59:b6:ed:cd: 61:4a:d7:b1:c5:63:e8:9e:e5:32:84:1f:83:97:5d: ec:2c:e3:f0:0d:1b:cd:ae:0b:72:77:aa:ca:a9:6c: 97:3a:bb:81:37:76:59:6f:cc:3e:7a:bd:c4:6c:ba: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:09:61:DB:37:6E:7C:9D:89:60:6A:A0:F7:87:4F:F7:C3:76:AC:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/197040d8-e401-3d3c-9da3-a2eb403ab0ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.120.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:db:1a:15:60:6d:2b:ee:0e:a3:ec:f8:ba:32:5a:0c:68:1e: 6e:eb:d8:08:78:70:9b:0e:b5:0c:73:b9:fc:fc:58:b9:c7:4c: 11:b2:47:e6:3e:ca:04:ec:60:7e:77:f6:ce:d7:d4:8b:89:57: 16:d6:52:6d:39:29:14:79:22:eb:63:4f:f4:40:6a:37:51:25: 3a:20:41:47:33:e6:8b:c3:ea:5b:2f:b6:00:c6:3e:0d:32:ec: 4f:f3:20:67:1a:71:9b:65:81:8b:33:f9:c2:9d:03:b1:67:46: 17:35:07:35:2d:50:91:ee:4c:41:11:6b:25:be:0e:51:78:35: cc:ce:6b:c5:8a:cc:43:bd:c4:09:6f:d4:26:d0:f8:40:e8:ac: b5:79:e7:7e:f8:b1:d5:3a:1b:32:8b:8f:07:e9:3d:8a:9a:f0: 1e:34:dd:42:1f:f2:e8:30:39:ca:e4:b6:4c:5c:66:e8:c9:68: b1:78:82:b9:54:46:66:47:3a:cd:98:31:ca:43:5b:c8:61:08: 4c:34:00:da:11:88:94:32:73:e6:66:a1:db:67:84:a6:e0:bf: a9:bf:35:58:4a:9a:d5:ff:ab:c8:f4:ea:7a:ae:69:84:07:53: 22:c3:03:5c:97:aa:a5:ad:7b:ed:1f:73:82:e5:15:37:eb:19: ac:79:87:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDNJWA8dSkFKfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZWQ0MDRjNzAtNDZlMi00NzU1LTlhOTctZjZkYjJhZTNlNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusQ14bmCspwJXlzRfBbKieZpXYSNZdNd23CO sgUQkDOp/Z1Ea5RlKxNM9XLGJtnFT+p4mMcVGvIRtHwTMc/5h8do0c3FlBGf/OXD xIxCuN+cOzn0Iyu7qjs49Kyf3BpJCJYzll8FYIcJEVttu63YpsyTHObouQqrno3A +Yb08TckMDaQYIGzCwVpXX9kbxBtZFEfCtrHnSXH2j+A8Uu/X/uhkbRaq6YGEI5M poXpnF8OWjLURka8KyWa79pHaWPS9up71GTXQzWXKjs2F1m27c1hStexxWPonuUy hB+Dl13sLOPwDRvNrgtyd6rKqWyXOruBN3ZZb8w+er3EbLpWxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAJYds3bnydiWBqoPeHT/fDdqzXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTk3MDQwZDgtZTQwMS0z ZDNjLTlkYTMtYTJlYjQwM2FiMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR3gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnbGhVgbSvuDqPs+LoyWgxoHm7r2Ah4cJsOtQxzufz8WLnHTBGyR+Y+ ygTsYH539s7X1IuJVxbWUm05KRR5IutjT/RAajdRJTogQUcz5ovD6lsvtgDGPg0y 7E/zIGcacZtlgYsz+cKdA7FnRhc1BzUtUJHuTEERayW+DlF4NczOa8WKzEO9xAlv 1CbQ+EDorLV55374sdU6GzKLjwfpPYqa8B403UIf8ugwOcrktkxcZujJaLF4grlU RmZHOs2YMcpDW8hhCEw0ANoRiJQyc+ZmodtnhKbgv6m/NVhKmtX/q8j06nquaYQH UyLDA1yXqqWte+0fc4LlFTfrGax5h54= -----END CERTIFICATE-----Generated at Mon May 5 12:54:06 2025 by rpki-client