$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa File: da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa (raw, json) Hash identifier: vaGP80duCzjcw2i+YHQGsFU36VnWwKAfzownQvJfhV4= Subject key identifier: C8:F7:F8:5D:6D:14:7F:FA:F2:92:AF:45:DF:D4:43:81:45:DE:48:B5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C3316E9C0B82C64456980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 71.255.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:33:16:e9:c0:b8:2c:64:45:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=29091abf-a05f-4f94-9ffc-d6cedaab73c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:98:ee:59:ec:ee:1e:b5:b4:12:1f:82:3a: 03:aa:1e:0c:ac:d8:b1:bc:23:73:e9:83:f1:e1:1c: 9e:1e:63:87:f0:3b:fb:8d:22:06:6a:f7:11:2f:81: 5d:f9:d8:e7:8d:0e:f3:2f:0d:ab:89:da:73:6c:80: df:35:e0:6b:cc:25:95:f3:0d:a9:66:51:e3:4d:44: 69:de:58:bf:98:d1:07:32:81:63:eb:b7:d9:6f:5a: c2:a9:0a:85:9e:5d:88:89:14:9a:2f:7d:a6:ab:1c: 73:8e:55:e1:7f:80:25:58:a5:f7:dd:a8:ba:99:9f: ac:db:6f:fb:31:31:19:11:42:5b:d1:ec:5e:85:81: 85:03:ff:3f:75:e3:a3:c7:a2:40:0f:9b:6a:4d:ea: 5f:61:b0:cf:73:5f:ef:09:fc:c0:b9:9c:68:e4:7e: a1:dd:f2:a5:61:ea:0d:e7:e0:74:d3:24:7e:53:b6: 0f:d6:ab:89:04:fc:b1:a9:7f:8c:6f:c1:8f:ad:0e: 9f:16:d8:13:a4:69:3b:07:a4:1c:b0:67:4c:8b:6d: 63:1f:ea:b5:cc:fb:18:43:5a:b3:04:fa:86:49:e3: e0:d6:e1:2d:00:14:2a:32:be:81:03:59:f1:21:85: d3:4e:8a:f3:7b:79:4a:29:f1:5c:aa:14:07:82:b2: b6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F7:F8:5D:6D:14:7F:FA:F2:92:AF:45:DF:D4:43:81:45:DE:48:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.255.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:75:7f:14:10:3d:40:d7:7a:3b:b0:78:ea:92:99:ea:59:6e: 44:e9:f4:af:a4:5d:4a:a4:f1:bc:20:dd:2e:ed:02:6f:74:35: 2c:95:ed:fe:7b:fa:0a:83:fd:7a:de:3e:f1:54:cf:95:98:c6: df:1c:72:75:c7:6b:a8:db:61:43:dc:41:77:ef:ad:3f:bb:84: 9a:66:ef:88:a4:af:e7:bf:b3:ff:37:db:49:e5:aa:50:f6:ae: 65:1b:58:5e:d5:8a:2d:7f:09:bc:66:4a:22:63:6c:45:bc:fd: 23:88:23:0e:06:89:d9:b4:cc:c1:c0:0c:e6:91:1b:d8:87:ea: 56:47:26:08:cd:55:16:f0:89:47:33:fb:a1:6d:d8:fa:68:27: 75:60:89:60:74:0a:be:c8:b9:05:90:39:e1:b7:7a:ca:2c:89: e6:9d:6b:f1:a6:3b:46:b2:9e:35:22:91:53:f7:88:3d:51:f4: cf:65:7e:70:3f:40:4d:df:a9:5a:ab:27:17:b7:e7:c8:03:98: 7b:68:f6:6d:5b:80:7e:fa:c6:b5:97:19:78:04:c6:6a:1f:a1: 5d:9b:ab:dc:80:aa:90:b0:c5:cd:d4:04:7b:b7:7e:0b:35:a5: ff:ae:3f:05:c3:a9:f7:df:35:71:7e:7e:e0:3f:40:74:b0:ab: 75:a1:53:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDMW6cC4LGRFaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MjkwOTFhYmYtYTA1Zi00Zjk0LTlmZmMtZDZjZWRhYWI3M2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqaY7lns7h61tBIfgjoDqh4MrNixvCNz6YPx 4RyeHmOH8Dv7jSIGavcRL4Fd+djnjQ7zLw2ridpzbIDfNeBrzCWV8w2pZlHjTURp 3li/mNEHMoFj67fZb1rCqQqFnl2IiRSaL32mqxxzjlXhf4AlWKX33ai6mZ+s22/7 MTEZEUJb0exehYGFA/8/deOjx6JAD5tqTepfYbDPc1/vCfzAuZxo5H6h3fKlYeoN 5+B00yR+U7YP1quJBPyxqX+Mb8GPrQ6fFtgTpGk7B6QcsGdMi21jH+q1zPsYQ1qz BPqGSePg1uEtABQqMr6BA1nxIYXTTorze3lKKfFcqhQHgrK2EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj3+F1tFH/68pKvRd/UQ4FF3ki1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGE4ZGM2YzctMTMzMC0z YTJkLWE5YzMtMGUwNDk3MjljN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF1fxQQPUDXejuweOqSmepZbkTp9K+kXUqk8bwg3S7tAm90NSyV7f57 +gqD/XrePvFUz5WYxt8ccnXHa6jbYUPcQXfvrT+7hJpm74ikr+e/s/8320nlqlD2 rmUbWF7Vii1/CbxmSiJjbEW8/SOIIw4Gidm0zMHADOaRG9iH6lZHJgjNVRbwiUcz +6Ft2PpoJ3VgiWB0Cr7IuQWQOeG3esosieada/GmO0aynjUikVP3iD1R9M9lfnA/ QE3fqVqrJxe358gDmHto9m1bgH76xrWXGXgExmofoV2bq9yAqpCwxc3UBHu3fgs1 pf+uPwXDqfffNXF+fuA/QHSwq3WhU1E= -----END CERTIFICATE-----Generated at Thu May 8 16:57:19 2025 by rpki-client