$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f6e9bf9-d0c4-362b-8789-92fd2a236fc3.roa File: 2f6e9bf9-d0c4-362b-8789-92fd2a236fc3.roa (raw, json) Hash identifier: aCJ3+tDvDc+gNKadMyoflSc9GKWPbM0N2ji2AZ0JLgo= Subject key identifier: D8:31:BB:B4:2F:85:EA:69:49:EE:2F:2E:83:87:49:D8:D7:59:E4:5E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A5CC520422CC5A88F7680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f6e9bf9-d0c4-362b-8789-92fd2a236fc3.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 0 IP address blocks: 207.78.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:5c:c5:20:42:2c:c5:a8:8f:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=dfa38674-e3b5-40fe-8016-900f5539975d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:09:8b:88:b2:d6:67:12:94:7d:fe:3e:ed: fe:6b:ce:90:fe:58:47:c9:c3:6a:b3:b0:7e:14:2e: bc:32:60:6e:f7:31:d9:ea:bd:eb:81:9d:bb:34:fe: 8e:05:20:40:76:9b:85:69:2f:89:4e:96:b5:c9:65: c3:01:39:a6:52:1e:5e:ee:97:60:4d:ae:8f:44:8c: 55:3f:e5:d7:87:89:86:e7:b7:3e:58:56:10:22:33: 80:ae:5a:c2:fe:df:10:8f:a8:55:d9:8a:3b:5b:26: 7b:8c:5c:cf:c6:07:68:b2:0c:e8:28:70:85:59:8a: 4c:c5:68:46:93:13:67:f7:48:42:fc:7b:2e:2a:36: 9e:00:67:66:29:6e:15:b4:d8:81:f5:81:63:a9:ab: ef:e4:f9:c1:35:65:16:9f:1e:a2:86:22:e9:90:0a: dc:e3:37:7f:70:da:53:02:d0:6c:89:ba:09:22:2d: b6:c1:aa:a5:88:36:b7:a4:b3:a8:51:86:6b:65:6a: 98:78:61:52:a4:1b:89:80:93:f3:4b:31:02:99:7e: f9:1a:f2:9b:16:18:d8:bd:3a:28:ea:57:ac:40:a9: 07:3f:80:07:89:cf:f5:06:79:8d:a0:0f:fa:da:47: df:06:27:7b:37:f7:35:6a:3a:4c:9e:e7:10:2d:21: 62:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:31:BB:B4:2F:85:EA:69:49:EE:2F:2E:83:87:49:D8:D7:59:E4:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f6e9bf9-d0c4-362b-8789-92fd2a236fc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 207.78.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:3c:6d:0a:8f:de:b3:7e:1d:72:70:06:95:c8:23:d2:8a:65: 20:7e:88:21:0c:88:a1:5f:ad:00:3d:4d:98:dd:d9:77:4e:97: b5:71:46:eb:a9:1a:fa:23:58:16:1f:7d:46:e4:29:81:90:65: 3c:19:86:56:a2:11:60:e2:66:2a:ab:1c:3f:c3:7a:2b:24:3b: 27:fa:1d:30:ee:39:bd:8f:bb:5f:11:f6:44:bb:e8:29:3e:d2: 8c:81:ef:36:3a:87:63:fb:17:91:2d:04:12:5e:50:93:49:60: 11:4c:2b:7f:4b:d4:f6:9b:e3:68:ab:d6:1b:0c:bb:2f:3d:bb: 25:14:6d:f9:ab:56:7d:6e:2f:f5:5c:6e:c6:8a:03:bc:ec:2f: 08:3e:61:92:bc:37:69:84:26:d5:3e:5b:30:70:66:86:f3:c9: c8:6a:a7:b6:93:a4:f5:6f:52:38:3f:05:ae:30:0a:76:96:72: 35:26:67:6f:13:07:53:b3:76:57:7c:23:32:52:72:93:51:f8: 8d:79:70:46:ce:8c:a6:72:91:61:ce:c8:1f:7d:a3:8f:b1:60: bc:a1:11:5a:b3:16:26:c2:f8:da:c1:1d:90:8b:4b:93:1c:ab: 95:3d:69:a5:54:2f:c0:a9:85:36:8a:48:c1:ab:3f:37:d5:4e: 6f:ec:10:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlzFIEIsxaiPdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZGZhMzg2NzQtZTNiNS00MGZlLTgwMTYtOTAwZjU1Mzk5NzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf0Ji4iy1mcSlH3+Pu3+a86Q/lhHycNqs7B+ FC68MmBu9zHZ6r3rgZ27NP6OBSBAdpuFaS+JTpa1yWXDATmmUh5e7pdgTa6PRIxV P+XXh4mG57c+WFYQIjOArlrC/t8Qj6hV2Yo7WyZ7jFzPxgdosgzoKHCFWYpMxWhG kxNn90hC/HsuKjaeAGdmKW4VtNiB9YFjqavv5PnBNWUWnx6ihiLpkArc4zd/cNpT AtBsiboJIi22waqliDa3pLOoUYZrZWqYeGFSpBuJgJPzSzECmX75GvKbFhjYvToo 6lesQKkHP4AHic/1BnmNoA/62kffBid7N/c1ajpMnucQLSFi4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgxu7QvheppSe4vLoOHSdjXWeReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmY2ZTliZjktZDBjNC0z NjJiLTg3ODktOTJmZDJhMjM2ZmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz05MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA8bQqP3rN+HXJwBpXII9KKZSB+iCEMiKFfrQA9TZjd2XdOl7VxRuup GvojWBYffUbkKYGQZTwZhlaiEWDiZiqrHD/DeiskOyf6HTDuOb2Pu18R9kS76Ck+ 0oyB7zY6h2P7F5EtBBJeUJNJYBFMK39L1Pab42ir1hsMuy89uyUUbfmrVn1uL/Vc bsaKA7zsLwg+YZK8N2mEJtU+WzBwZobzychqp7aTpPVvUjg/Ba4wCnaWcjUmZ28T B1Ozdld8IzJScpNR+I15cEbOjKZykWHOyB99o4+xYLyhEVqzFibC+NrBHZCLS5Mc q5U9aaVUL8CphTaKSMGrPzfVTm/sENE= -----END CERTIFICATE-----Generated at Sun May 11 01:05:36 2025 by rpki-client