$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10f96eb3-c064-387e-a6f5-a7edc3b9e757.roa File: 10f96eb3-c064-387e-a6f5-a7edc3b9e757.roa (raw, json) Hash identifier: xKhqDiQM8g24oIxJXTfTx7aQN1laWOtnVIoDNtPvdhU= Subject key identifier: F6:82:A0:C7:6A:59:9B:AA:28:FE:1B:C1:BC:3E:61:8D:50:BC:31:4E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A00DADE0C38D10816CB3EEA40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10f96eb3-c064-387e-a6f5-a7edc3b9e757.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 6167 IP address blocks: 97.136.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:de:0c:38:d1:08:16:cb:3e:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=01be3f3a-d59f-4f11-85e5-dcd429051e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:5e:f3:32:cd:71:60:32:94:c9:4e:d2:5c: e9:52:b0:54:95:2d:8c:ac:db:86:ed:d5:4a:4a:91: fe:1e:42:7a:bd:a4:72:13:14:41:87:b8:86:4e:dd: 78:5e:5f:78:16:87:cd:76:31:74:29:31:f3:cc:02: 71:a2:c5:aa:98:fe:4a:82:75:14:1c:81:17:17:12: e3:61:e4:e2:8b:f2:3a:e1:10:3f:da:16:70:04:bf: 75:fb:e9:ac:e1:17:d4:73:b9:94:34:f3:dc:a3:ec: bc:c9:c0:ee:ec:7b:89:c5:2a:75:c5:26:d0:02:d8: bf:6d:81:a0:b3:ff:d2:4c:07:04:66:7b:51:20:e5: 7f:77:6e:4f:08:36:7d:94:f3:27:40:63:e9:03:bb: 8c:08:86:86:a4:1d:66:7a:1d:18:c1:8b:d2:96:ff: 5a:c3:f8:a0:e5:d1:88:72:a1:cf:b7:b3:0c:51:b0: 53:17:16:03:4f:0a:53:b1:08:70:85:10:6a:37:e7: 44:8d:45:f3:8e:1e:a8:ed:b8:2d:f0:77:74:f3:5c: 52:18:0f:56:dc:55:0a:7f:e3:6f:04:b7:74:55:79: ea:84:e0:00:43:cb:e1:b3:26:f4:2d:d2:12:c6:c9: 5b:c2:3a:13:ec:ee:8d:9d:3d:24:db:c1:af:4f:c2: 9c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:82:A0:C7:6A:59:9B:AA:28:FE:1B:C1:BC:3E:61:8D:50:BC:31:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10f96eb3-c064-387e-a6f5-a7edc3b9e757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.136.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:38:ba:dd:3a:02:dd:97:1f:31:ec:80:e6:a3:83:89:1e:c4: 5b:1a:45:0e:3d:7b:00:a5:7d:65:8b:4d:e1:73:31:f7:18:19: da:da:12:b7:74:b4:37:95:fa:fe:5b:34:4b:dd:cd:02:3c:c9: 96:cc:3d:01:be:ae:fa:77:be:98:71:b0:2b:78:f4:1e:12:54: d8:b9:71:51:ea:25:0b:fe:a2:ec:3f:12:cb:4e:d4:f3:25:da: 53:cf:61:8a:ec:9d:c4:dc:b0:92:61:a3:87:09:0e:2c:cf:0a: 49:fb:7a:f7:23:45:85:52:ac:fd:c4:7e:22:74:d3:ef:93:f8: 48:1a:b8:5a:90:0e:00:56:13:5d:12:3d:c0:d3:73:f2:d5:b2: 9b:cf:fe:1f:68:51:64:88:bc:97:f3:9a:77:d3:53:97:03:03: c0:c3:7e:dd:2a:0e:39:0f:d8:57:70:b2:09:cb:08:af:ea:55: 11:cd:e3:f1:3d:fb:1d:c4:56:37:7f:fb:0c:f9:66:34:5d:82: f4:40:70:c9:eb:d5:10:54:54:c9:ef:cb:0d:a8:02:41:3b:60: fe:c5:52:85:cd:99:d8:bf:d0:2f:63:1c:9f:f7:05:4f:99:9f: 00:54:f0:09:8b:55:9b:98:ed:ca:b0:a5:ef:d3:91:28:e2:81: 3a:cd:dc:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2t4MONEIFss+6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk MDFiZTNmM2EtZDU5Zi00ZjExLTg1ZTUtZGNkNDI5MDUxZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7Ve8zLNcWAylMlO0lzpUrBUlS2MrNuG7dVK SpH+HkJ6vaRyExRBh7iGTt14Xl94FofNdjF0KTHzzAJxosWqmP5KgnUUHIEXFxLj YeTii/I64RA/2hZwBL91++ms4RfUc7mUNPPco+y8ycDu7HuJxSp1xSbQAti/bYGg s//STAcEZntRIOV/d25PCDZ9lPMnQGPpA7uMCIaGpB1meh0YwYvSlv9aw/ig5dGI cqHPt7MMUbBTFxYDTwpTsQhwhRBqN+dEjUXzjh6o7bgt8Hd081xSGA9W3FUKf+Nv BLd0VXnqhOAAQ8vhsyb0LdISxslbwjoT7O6NnT0k28GvT8KciQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaCoMdqWZuqKP4bwbw+YY1QvDFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTBmOTZlYjMtYzA2NC0z ODdlLWE2ZjUtYTdlZGMzYjllNzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYYiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI4ut06At2XHzHsgOajg4kexFsaRQ49ewClfWWLTeFzMfcYGdraErd0 tDeV+v5bNEvdzQI8yZbMPQG+rvp3vphxsCt49B4SVNi5cVHqJQv+ouw/EstO1PMl 2lPPYYrsncTcsJJho4cJDizPCkn7evcjRYVSrP3EfiJ00++T+EgauFqQDgBWE10S PcDTc/LVspvP/h9oUWSIvJfzmnfTU5cDA8DDft0qDjkP2FdwsgnLCK/qVRHN4/E9 +x3EVjd/+wz5ZjRdgvRAcMnr1RBUVMnvyw2oAkE7YP7FUoXNmdi/0C9jHJ/3BU+Z nwBU8AmLVZuY7cqwpe/TkSjigTrN3AA= -----END CERTIFICATE-----Generated at Sun Jun 1 03:20:08 2025 by rpki-client