$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a3837cb-87f3-327e-a7c2-6685a1a8613e.roa File: 8a3837cb-87f3-327e-a7c2-6685a1a8613e.roa (raw, json) Hash identifier: 4ne+AwMm4uoXmNhXRV6AMDfIxar9PsK3xZkr9a+lQZY= Subject key identifier: 40:B9:BF:5F:B5:FE:64:B4:70:32:8D:B2:53:F0:29:6A:A1:95:D8:CE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F13148980B7AD4289680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a3837cb-87f3-327e-a7c2-6685a1a8613e.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 70.110.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f1:31:48:98:0b:7a:d4:28:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1f21bda4-d6fa-4c0e-a618-7cab29d1241a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c9:af:56:c0:85:af:14:49:18:48:b9:a9:26: 46:59:0a:bf:c6:ba:1a:da:95:be:dc:af:4f:be:e5: 20:72:e1:42:32:15:fb:5a:b8:47:3f:2a:e3:42:62: bd:f3:40:43:4b:98:0d:96:28:53:5b:6f:b8:dd:47: 5c:bc:68:58:70:ae:8a:71:b6:e7:70:6b:b5:ab:c8: 50:e0:2b:01:1b:30:c8:11:e8:37:e5:94:ce:6a:bf: 0f:4d:63:9f:89:18:d7:a2:3b:7d:43:65:56:88:30: 90:d5:96:38:b7:ef:1c:90:03:97:42:69:d3:b7:10: 4a:93:fd:88:54:9b:c6:dc:2f:80:37:af:a5:3a:db: 4e:7d:83:7b:0d:d8:84:43:84:cc:f9:c1:11:1c:db: ef:bc:5b:26:66:70:6e:d9:32:95:c3:25:5b:bc:50: da:0e:8f:d3:01:29:8c:0c:b9:3f:f5:d4:e5:b2:72: e6:d7:ef:4d:55:e0:51:c2:33:f5:b0:54:ad:c5:17: b9:53:df:ac:c6:58:e4:e8:13:e8:7e:dd:f4:3d:b6: 97:44:a5:e9:39:38:8f:12:8a:67:fa:96:4b:01:0e: 53:3b:db:a3:e8:fa:eb:c9:f7:a2:79:93:aa:8a:b1: d8:05:05:a5:b0:28:19:51:f9:de:34:6a:cb:36:3f: 84:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B9:BF:5F:B5:FE:64:B4:70:32:8D:B2:53:F0:29:6A:A1:95:D8:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a3837cb-87f3-327e-a7c2-6685a1a8613e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.110.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0d:26:8c:23:50:ab:42:64:25:67:39:49:3e:35:52:f8:37: ab:c8:75:bf:9d:98:f7:73:6a:7b:40:6e:64:9e:a6:e4:ae:d9: 34:a8:8e:69:ae:bd:f0:6c:18:54:85:07:78:67:10:42:84:33: 0a:88:ae:a4:ba:24:66:e0:0d:8f:43:59:15:e4:ac:61:2c:7d: a5:34:e8:9d:fc:af:2e:3f:65:38:b6:33:a6:9b:fc:3b:bc:34: 17:a6:07:67:ca:56:14:ec:89:4e:a6:20:61:f8:27:91:c9:98: 90:59:4e:51:58:f2:0e:81:f7:7b:59:b9:08:a5:19:a5:12:09: 4d:a2:1a:54:3d:f1:82:ef:ad:f3:4c:8a:f3:7d:6f:1b:ab:de: 4e:14:a3:9d:e6:95:1a:51:ff:dc:3b:ff:58:3b:b4:3f:c5:bd: d1:38:9c:3c:15:b1:3d:3b:92:51:4a:70:bc:b0:db:e3:0b:fd: c2:72:f0:4c:aa:7a:0f:1b:90:7b:87:cc:be:08:99:fa:97:50: 1a:25:a1:36:e4:0d:3c:e5:5b:c8:75:4d:94:cc:7c:ba:ef:af: 33:86:28:60:39:12:c6:b3:b6:33:01:88:84:e5:50:4e:c5:c6: 87:b0:e9:94:08:f2:2e:69:0f:ff:e5:3e:86:a4:f6:48:ad:46: 38:7d:35:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvExSJgLetQoloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MWYyMWJkYTQtZDZmYS00YzBlLWE2MTgtN2NhYjI5ZDEyNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcmvVsCFrxRJGEi5qSZGWQq/xroa2pW+3K9P vuUgcuFCMhX7WrhHPyrjQmK980BDS5gNlihTW2+43UdcvGhYcK6KcbbncGu1q8hQ 4CsBGzDIEeg35ZTOar8PTWOfiRjXojt9Q2VWiDCQ1ZY4t+8ckAOXQmnTtxBKk/2I VJvG3C+AN6+lOttOfYN7DdiEQ4TM+cERHNvvvFsmZnBu2TKVwyVbvFDaDo/TASmM DLk/9dTlsnLm1+9NVeBRwjP1sFStxRe5U9+sxljk6BPoft30PbaXRKXpOTiPEopn +pZLAQ5TO9uj6PrryfeieZOqirHYBQWlsCgZUfneNGrLNj+E4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC5v1+1/mS0cDKNslPwKWqhldjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGEzODM3Y2ItODdmMy0z MjdlLWE3YzItNjY4NWExYTg2MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRm58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoNJowjUKtCZCVnOUk+NVL4N6vIdb+dmPdzantAbmSepuSu2TSojmmu vfBsGFSFB3hnEEKEMwqIrqS6JGbgDY9DWRXkrGEsfaU06J38ry4/ZTi2M6ab/Du8 NBemB2fKVhTsiU6mIGH4J5HJmJBZTlFY8g6B93tZuQilGaUSCU2iGlQ98YLvrfNM ivN9bxur3k4Uo53mlRpR/9w7/1g7tD/FvdE4nDwVsT07klFKcLyw2+ML/cJy8Eyq eg8bkHuHzL4ImfqXUBoloTbkDTzlW8h1TZTMfLrvrzOGKGA5EsaztjMBiITlUE7F xoew6ZQI8i5pD//lPoak9kitRjh9NY4= -----END CERTIFICATE-----Generated at Sun May 11 09:07:27 2025 by rpki-client