$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0f859fc-81c6-36b9-85f1-08f8d6885f76.roa File: b0f859fc-81c6-36b9-85f1-08f8d6885f76.roa (raw, json) Hash identifier: BIUQEYaMXFSkAzfRuc6BMPIUPBrWKsMtBRGiBbqqES8= Subject key identifier: AA:FD:AF:05:88:80:56:7A:51:21:9B:6A:86:BF:69:5A:83:A6:D6:18 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C2BDFF81F7BFE029697C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0f859fc-81c6-36b9-85f1-08f8d6885f76.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 71.126.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:2b:df:f8:1f:7b:fe:02:96:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=c1c1658a-d907-442b-b460-54f397d794f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:32:04:c9:b0:57:34:5c:d4:f3:0a:94:46:ba: fa:1b:4d:a4:89:66:7d:b6:02:7e:4a:93:d0:71:c4: af:46:1c:3c:dc:6f:2a:b2:5d:c2:ac:cc:e5:84:ef: 82:01:d0:5b:1a:64:15:58:a0:97:8d:7b:d1:48:50: 04:74:9e:16:13:10:cb:d9:cc:3c:00:4a:51:8b:e4: 25:28:34:56:31:1c:15:50:48:d1:bb:54:2f:d1:2b: b1:ba:d4:c6:1e:b9:06:00:04:95:2e:35:0e:62:15: 35:2c:59:c2:52:b4:86:ac:94:c0:03:27:56:0a:eb: 76:eb:0d:fa:bd:a0:20:39:60:15:2b:a7:38:69:32: 96:02:a3:6d:41:8e:6a:f9:d6:fc:54:ac:a2:51:fa: cf:36:d1:c0:a0:81:1f:e6:3e:3e:ae:1e:cc:d3:05: 62:43:8b:f3:91:0a:c2:77:5b:20:d0:96:55:b2:62: df:10:c0:60:2d:5d:06:a7:5c:3e:27:56:91:31:c4: ac:22:a1:16:c9:fc:c4:68:70:12:9c:be:01:c9:a4: a1:15:d4:23:9a:10:d2:1c:29:e1:eb:06:af:a9:1f: c4:8e:b3:15:b4:b4:9e:66:15:73:25:78:45:8c:4c: 17:e2:d0:3c:de:eb:ba:49:4a:73:5b:2a:76:15:e3: 7a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FD:AF:05:88:80:56:7A:51:21:9B:6A:86:BF:69:5A:83:A6:D6:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0f859fc-81c6-36b9-85f1-08f8d6885f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.126.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a5:f6:f5:50:88:64:09:e0:bd:ec:f6:30:9d:37:5e:32:1c: 55:84:d7:1a:f5:5c:07:65:7a:dc:48:0c:16:84:7d:a5:e9:eb: ab:70:96:31:1c:06:20:76:ec:ee:5e:7f:11:e8:4b:92:4d:0e: 15:f7:ab:19:71:b9:2c:c1:f8:c3:4b:ca:63:06:25:42:75:08: d4:fe:c5:ff:a0:67:7c:a2:ce:e9:a8:35:bd:24:02:56:33:e5: ba:08:6c:c4:d0:d1:e1:d4:f5:a0:6e:3f:f6:be:08:6c:f5:78: ec:18:c1:07:c3:73:3a:ab:51:f3:95:92:50:59:f9:70:33:eb: f0:d6:d7:61:f5:c0:a3:70:ea:ef:62:1d:1e:b1:ca:70:c9:5b: 78:16:3c:d2:80:9a:58:11:41:3b:7e:48:dc:9e:49:0c:ab:bd: b4:c2:33:7f:a6:4f:2a:5f:9e:3b:82:3e:86:a2:72:2a:1a:45: 0e:6e:c6:76:9c:3b:ce:27:01:d8:96:bb:4b:aa:0e:35:91:57: 6f:15:eb:dd:4b:87:81:5a:72:2c:5a:16:c6:9e:7c:06:d3:33: e3:3d:24:30:23:92:59:ea:ed:70:9a:b9:f5:e5:38:23:dc:f0: d0:a8:26:ab:ff:63:40:95:31:4f:2a:a3:4f:78:bb:e0:ab:a9: fd:4e:c3:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCvf+B97/gKWl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YzFjMTY1OGEtZDkwNy00NDJiLWI0NjAtNTRmMzk3ZDc5NGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzIEybBXNFzU8wqURrr6G02kiWZ9tgJ+SpPQ ccSvRhw83G8qsl3CrMzlhO+CAdBbGmQVWKCXjXvRSFAEdJ4WExDL2cw8AEpRi+Ql KDRWMRwVUEjRu1Qv0SuxutTGHrkGAASVLjUOYhU1LFnCUrSGrJTAAydWCut26w36 vaAgOWAVK6c4aTKWAqNtQY5q+db8VKyiUfrPNtHAoIEf5j4+rh7M0wViQ4vzkQrC d1sg0JZVsmLfEMBgLV0Gp1w+J1aRMcSsIqEWyfzEaHASnL4ByaShFdQjmhDSHCnh 6wavqR/EjrMVtLSeZhVzJXhFjEwX4tA83uu6SUpzWyp2FeN68wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKr9rwWIgFZ6USGbaoa/aVqDptYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjBmODU5ZmMtODFjNi0z NmI5LTg1ZjEtMDhmOGQ2ODg1Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR35AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2l9vVQiGQJ4L3s9jCdN14yHFWE1xr1XAdletxIDBaEfaXp66twljEc BiB27O5efxHoS5JNDhX3qxlxuSzB+MNLymMGJUJ1CNT+xf+gZ3yizumoNb0kAlYz 5boIbMTQ0eHU9aBuP/a+CGz1eOwYwQfDczqrUfOVklBZ+XAz6/DW12H1wKNw6u9i HR6xynDJW3gWPNKAmlgRQTt+SNyeSQyrvbTCM3+mTypfnjuCPoaicioaRQ5uxnac O84nAdiWu0uqDjWRV28V691Lh4FacixaFsaefAbTM+M9JDAjklnq7XCaufXlOCPc 8NCoJqv/Y0CVMU8qo094u+Crqf1Ow+I= -----END CERTIFICATE-----Generated at Mon May 5 12:22:06 2025 by rpki-client