$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/628a58af-0c8e-38fb-8989-731626c867dc.roa File: 628a58af-0c8e-38fb-8989-731626c867dc.roa (raw, json) Hash identifier: FfOGOrEvhrv2VnwrV+DvWwQSmLITWma5qSURyNnoUho= Subject key identifier: 8B:E3:AA:0D:F5:B0:62:F6:9D:3E:7F:78:4A:F7:67:95:C2:28:96:8A Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F43285848D64112CB0DFDDB7CB7BFFB80 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/628a58af-0c8e-38fb-8989-731626c867dc.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 36829 IP address blocks: 141.195.99.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:12:cb:0d:fd:db:7c:b7:bf:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=f47bc9a8-d82b-4028-b950-cc383c3da3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:4e:21:d5:fd:bc:da:a5:57:97:71:31:be: ac:34:b9:3f:da:14:ab:9b:f4:0d:a9:86:48:ad:2a: 49:21:ba:58:47:73:87:1b:f8:74:bc:f6:be:6a:b1: f2:82:6f:f5:d3:b9:cf:52:eb:cd:32:78:12:ef:90: 29:52:cc:22:6b:86:7f:be:ce:85:a1:d5:8d:a6:c5: 1a:06:db:86:72:e6:06:94:46:ed:cc:82:53:01:88: b7:04:f8:17:31:e5:d0:a6:6a:9b:89:f3:56:e9:a8: a9:04:96:f1:2f:3e:46:e1:3d:ba:07:5e:6c:c5:66: 22:5c:55:6b:e0:46:6b:69:a0:31:b1:23:ac:63:bf: 72:ad:d8:a5:bc:f0:19:89:77:5e:1a:75:ca:a5:16: 91:f4:25:00:c4:63:c5:3d:14:6c:b9:70:70:33:b1: d8:bc:e9:0b:fc:4c:0a:ce:4f:64:94:4d:1a:3d:08: 7a:e4:5a:74:33:6c:32:8a:cb:cc:c1:0f:7d:ec:7c: b2:2d:54:51:c0:78:21:fe:53:a2:c2:c9:96:18:c2: e3:bd:98:51:71:95:2e:8f:01:2f:4c:8e:51:55:91: 69:b6:9d:b6:59:df:1d:85:ed:0c:c8:10:5e:d4:bb: cc:b3:46:fe:d2:ff:4d:b6:7d:b1:94:47:d1:d1:ca: 63:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E3:AA:0D:F5:B0:62:F6:9D:3E:7F:78:4A:F7:67:95:C2:28:96:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/628a58af-0c8e-38fb-8989-731626c867dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 141.195.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9e:7c:ea:34:59:b0:39:4b:02:b1:af:52:0c:8b:7f:8c:43: d7:54:d2:5b:7e:1e:ee:1c:3c:c8:90:db:c4:f7:9c:67:3f:ab: 6a:cb:0f:72:f4:fd:17:31:15:64:9c:59:08:0a:aa:5d:44:bc: 4f:8b:25:d5:49:f7:ac:40:0d:f0:06:36:5e:14:01:8e:32:7c: 1d:be:b0:10:64:bb:03:e7:85:03:a5:81:70:7d:e7:cf:28:b8: 67:2c:08:d2:c4:b7:17:d0:ef:e4:aa:a1:76:8d:d9:f6:88:dd: 0c:c7:0a:ab:58:d0:55:a5:c1:ca:8d:e1:57:69:ba:d5:f9:c2: 24:86:fd:db:22:94:dc:6e:7b:82:0c:08:5f:ff:1a:c0:7f:58: c8:47:4e:b7:2a:09:b8:3a:2e:be:ff:56:a8:60:c8:99:c0:4a: 87:27:a3:fd:c2:4f:ad:d9:5d:1e:a0:b5:21:d9:be:86:58:5f: f8:ad:95:10:aa:a5:83:17:a3:ba:04:2e:ad:04:dd:51:e7:61: 70:55:49:a2:23:27:00:a8:2a:76:81:3f:16:d2:0b:17:fa:89: 37:45:47:84:07:4c:a0:5f:ce:2d:f5:36:7d:b7:56:d2:6f:8f: da:d6:3f:d9:f6:fa:23:3e:46:af:ae:93:d1:2b:5f:58:5b:52: 1e:5a:e2:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRLLDf3bfLe/+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjQ3YmM5YTgtZDgyYi00MDI4LWI5NTAtY2MzODNjM2RhM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6FOIdX9vNqlV5dxMb6sNLk/2hSrm/QNqYZI rSpJIbpYR3OHG/h0vPa+arHygm/107nPUuvNMngS75ApUswia4Z/vs6FodWNpsUa BtuGcuYGlEbtzIJTAYi3BPgXMeXQpmqbifNW6aipBJbxLz5G4T26B15sxWYiXFVr 4EZraaAxsSOsY79yrdilvPAZiXdeGnXKpRaR9CUAxGPFPRRsuXBwM7HYvOkL/EwK zk9klE0aPQh65Fp0M2wyisvMwQ997HyyLVRRwHgh/lOiwsmWGMLjvZhRcZUujwEv TI5RVZFptp22Wd8dhe0MyBBe1LvMs0b+0v9Ntn2xlEfR0cpjzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvjqg31sGL2nT5/eEr3Z5XCKJaKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvNjI4YTU4YWYtMGM4ZS0z OGZiLTg5ODktNzMxNjI2Yzg2N2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcNjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmefOo0WbA5SwKxr1IMi3+MQ9dU0lt+Hu4cPMiQ28T3nGc/q2rLD3L0 /RcxFWScWQgKql1EvE+LJdVJ96xADfAGNl4UAY4yfB2+sBBkuwPnhQOlgXB9588o uGcsCNLEtxfQ7+SqoXaN2faI3QzHCqtY0FWlwcqN4VdputX5wiSG/dsilNxue4IM CF//GsB/WMhHTrcqCbg6Lr7/VqhgyJnASocno/3CT63ZXR6gtSHZvoZYX/itlRCq pYMXo7oELq0E3VHnYXBVSaIjJwCoKnaBPxbSCxf6iTdFR4QHTKBfzi31Nn23VtJv j9rWP9n2+iM+Rq+uk9ErX1hbUh5a4uM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:57:20 2025 by rpki-client