$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b67ca93e-81fa-32c6-a26a-72b5241d783d.roa File: b67ca93e-81fa-32c6-a26a-72b5241d783d.roa (raw, json) Hash identifier: 8kav00vBf26Qlrp5+Jy2T5VmCRfORYoU4sbM5EKKOK4= Subject key identifier: ED:C1:CF:14:4F:A2:2D:6E:B2:40:68:02:F7:7B:8C:23:CA:94:D9:78 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858493ED3DBA31945BE0952FFEB40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b67ca93e-81fa-32c6-a26a-72b5241d783d.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.108.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:db:a3:19:45:be:09:52:ff:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=c4da3e13-2a2a-42fd-b1fe-6f1888a12f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:0e:ce:d9:f1:08:01:32:bc:a6:d0:a1:2c: 8c:0a:7b:45:56:5b:91:67:d1:fd:f0:6b:e7:ec:7a: 63:95:51:03:0e:90:27:eb:17:9c:19:65:d1:81:09: a5:25:ef:92:27:17:5b:a8:fd:38:92:6e:64:c9:33: 6a:49:9c:9c:d8:7b:b8:46:25:33:92:3e:24:38:0f: ad:e6:d0:2d:3c:f0:1e:01:96:67:c3:93:d2:ab:bb: d3:36:75:9a:c7:06:58:fc:5b:aa:28:fc:12:62:34: d3:62:86:6b:35:03:ed:88:96:3f:68:40:cc:03:77: 6d:60:50:ca:78:c4:d3:ea:a8:d8:e9:92:c8:b4:06: f9:69:b1:ac:14:ca:84:c2:93:27:e8:cc:ef:8d:a7: b9:18:50:bf:f3:f1:44:04:48:ca:ea:dc:7a:36:72: c9:25:4b:bc:0c:8d:0b:16:c7:2c:f7:0a:c1:bf:f2: 09:7b:38:80:61:bf:47:c3:6b:3c:f0:4b:d5:fb:c8: c1:d9:da:e8:f1:87:3a:08:db:dc:16:67:24:f9:6a: 54:38:2c:68:ab:03:d9:62:a4:73:4f:4c:19:3c:4d: 1e:8c:ae:f6:9a:db:5e:b9:96:fd:7e:f9:23:d5:79: 10:f5:65:2d:d1:0e:1d:fb:0c:f6:a1:73:f1:c8:43: 98:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C1:CF:14:4F:A2:2D:6E:B2:40:68:02:F7:7B:8C:23:CA:94:D9:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b67ca93e-81fa-32c6-a26a-72b5241d783d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:4d:c8:de:1c:ce:8d:cc:44:f7:64:51:2a:fb:9c:f5:82:05: a7:9e:aa:69:ce:19:7f:69:3e:21:af:a1:6a:89:f0:e9:38:e5: 07:e3:fb:6e:bc:16:57:c9:19:9c:56:ce:e1:dd:34:08:95:40: 6a:b4:50:9e:9c:64:03:f5:fe:71:28:b0:d0:c9:82:f0:b6:5a: 7a:fd:e3:48:dc:a0:23:dc:6a:57:4b:9c:e0:e7:c2:e7:65:6b: 6d:03:3f:b3:84:3d:92:e7:18:bd:9f:ef:a4:a1:7a:83:8b:db: b9:09:c4:07:de:e6:73:bb:3b:57:07:d2:ef:7c:55:2e:d0:22: 98:5a:0c:d0:a3:31:9b:75:e1:ae:c6:3a:d9:74:b7:0d:ae:25: 0d:9e:17:5b:70:c9:4a:90:15:f0:db:a8:27:a4:9d:7d:15:3b: 58:70:28:18:e5:f0:40:f8:69:f8:ba:51:92:27:16:d8:8e:59: fa:22:9b:67:bf:b0:22:cd:8b:70:29:be:07:13:4e:b2:a1:92: 44:fb:c4:90:17:3c:56:f7:49:74:9c:a6:ce:bd:6a:32:d3:1a: 5a:70:0f:2a:e2:b2:97:82:0a:24:54:db:25:8b:59:c5:31:34: 57:e0:c6:2f:bd:e5:3b:44:e4:0f:e0:de:ee:a8:6c:e1:9b:b3: 02:53:a8:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09ujGUW+CVL/60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk YzRkYTNlMTMtMmEyYS00MmZkLWIxZmUtNmYxODg4YTEyZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoAOztnxCAEyvKbQoSyMCntFVluRZ9H98Gvn 7HpjlVEDDpAn6xecGWXRgQmlJe+SJxdbqP04km5kyTNqSZyc2Hu4RiUzkj4kOA+t 5tAtPPAeAZZnw5PSq7vTNnWaxwZY/FuqKPwSYjTTYoZrNQPtiJY/aEDMA3dtYFDK eMTT6qjY6ZLItAb5abGsFMqEwpMn6Mzvjae5GFC/8/FEBEjK6tx6NnLJJUu8DI0L Fscs9wrBv/IJeziAYb9Hw2s88EvV+8jB2dro8Yc6CNvcFmck+WpUOCxoqwPZYqRz T0wZPE0ejK72mtteuZb9fvkj1XkQ9WUt0Q4d+wz2oXPxyEOYwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3BzxRPoi1uskBoAvd7jCPKlNl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjY3Y2E5M2UtODFmYS0z MmM2LWEyNmEtNzJiNTI0MWQ3ODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASGxmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdNyN4czo3MRPdkUSr7nPWCBaeeqmnOGX9pPiGvoWqJ8Ok45Qfj+268 FlfJGZxWzuHdNAiVQGq0UJ6cZAP1/nEosNDJgvC2Wnr940jcoCPcaldLnODnwudl a20DP7OEPZLnGL2f76SheoOL27kJxAfe5nO7O1cH0u98VS7QIphaDNCjMZt14a7G Otl0tw2uJQ2eF1twyUqQFfDbqCeknX0VO1hwKBjl8ED4afi6UZInFtiOWfoim2e/ sCLNi3ApvgcTTrKhkkT7xJAXPFb3SXScps69ajLTGlpwDyrispeCCiRU2yWLWcUx NFfgxi+95TtE5A/g3u6obOGbswJTqIc= -----END CERTIFICATE-----Generated at Mon May 5 07:21:30 2025 by rpki-client