$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15870fe2-c176-39f0-a312-5a3dfdacb3a3.roa File: 15870fe2-c176-39f0-a312-5a3dfdacb3a3.roa (raw, json) Hash identifier: fmtDhFeHMkKeSNjiitKzCBn7frf7JGTVs5RIgTDgSPY= Subject key identifier: 3E:CC:92:5B:D7:9B:9D:00:41:37:85:6A:60:52:84:C2:92:F4:5A:99 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C2450538E9E266B315634C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15870fe2-c176-39f0-a312-5a3dfdacb3a3.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 209.159.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:50:53:8e:9e:26:6b:31:56:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=4f87203d-07b5-4c5b-acb8-a6f1d57fb1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5b:3b:6a:c1:e0:07:79:b1:30:e8:5f:bf:d8: 1b:0b:24:f5:12:8d:74:ea:d9:ad:fe:bd:16:74:d8: f6:62:26:46:59:6d:31:eb:53:70:94:d5:85:a0:35: 0a:7f:0d:5b:e1:97:1f:70:e1:dc:dd:c5:1c:ea:3f: d5:ce:6b:14:74:41:95:76:1c:02:20:3a:92:b4:7e: 8e:0e:49:dd:f6:4e:45:82:40:68:42:50:3d:be:6a: 50:da:9b:57:8e:89:50:f4:b0:0e:41:3d:11:4f:8a: b3:cd:ae:9a:06:d7:50:8c:ce:89:0c:e4:9e:a9:01: 4f:97:3a:8e:07:a3:df:a9:6f:20:86:9f:c4:3f:e0: d9:21:bb:d2:89:7e:48:d3:b2:44:25:08:ce:ed:13: 65:bc:00:76:6b:53:3c:40:f8:ca:93:dc:d5:c5:18: 76:0a:30:0b:84:a7:b5:01:a9:30:e5:7d:8f:14:ac: b4:af:bd:01:fb:69:4d:e8:65:e9:e6:17:a7:36:70: 9d:b1:7c:d8:63:f0:15:64:e4:2c:58:9f:08:af:a9: 83:23:bc:43:49:1e:97:bf:ba:13:56:35:99:99:ab: 25:1c:43:0a:67:4d:a2:f5:04:f2:35:45:69:a2:c5: 65:94:bb:38:93:ae:89:4d:33:f6:15:e0:d4:82:26: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CC:92:5B:D7:9B:9D:00:41:37:85:6A:60:52:84:C2:92:F4:5A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15870fe2-c176-39f0-a312-5a3dfdacb3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.159.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:70:e8:aa:25:74:52:67:b2:93:b4:b8:95:3c:78:4e:5f:96: 6b:9b:b1:9c:1d:d5:26:59:68:f2:35:1d:c3:7e:b8:b3:c6:9c: aa:ec:22:9d:79:c9:85:db:cd:22:66:c1:2e:34:f8:bc:ed:76: 9e:6c:9d:29:84:6d:f1:52:e4:06:d7:75:9f:5b:1f:ab:bc:37: 79:e2:62:8a:81:14:7f:4e:fc:e9:60:1a:4e:a3:90:7b:23:49: bd:40:c3:53:8c:53:40:db:5c:f8:77:8f:0e:b1:70:8e:82:ef: 16:f5:06:20:4c:7d:a4:1f:0a:1c:d6:11:0e:d2:94:09:4d:73: 52:ca:2f:14:b3:fa:9c:12:0e:72:2c:8c:40:bf:bf:e5:64:2c: 68:51:ec:a2:a6:68:0a:76:cb:71:d0:a0:f6:cb:1f:22:7e:b3: 44:00:d2:70:59:d7:dc:92:41:ef:87:af:08:44:40:09:51:68: 61:66:9e:5a:1f:f8:ef:f2:30:24:53:32:58:4c:57:19:b7:91: e1:a3:b6:7d:fd:37:83:9b:26:68:2b:c7:88:fb:9d:51:20:98: c7:7a:06:23:5c:92:71:1e:01:eb:27:fa:d3:d1:b9:1c:c6:a7: 0f:81:2e:c3:d1:ca:85:f5:f6:21:b5:66:48:1a:a9:fe:f5:d9: e7:d3:cf:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJFBTjp4mazFWNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NGY4NzIwM2QtMDdiNS00YzViLWFjYjgtYTZmMWQ1N2ZiMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFs7asHgB3mxMOhfv9gbCyT1Eo106tmt/r0W dNj2YiZGWW0x61NwlNWFoDUKfw1b4ZcfcOHc3cUc6j/VzmsUdEGVdhwCIDqStH6O Dknd9k5FgkBoQlA9vmpQ2ptXjolQ9LAOQT0RT4qzza6aBtdQjM6JDOSeqQFPlzqO B6PfqW8ghp/EP+DZIbvSiX5I07JEJQjO7RNlvAB2a1M8QPjKk9zVxRh2CjALhKe1 Aakw5X2PFKy0r70B+2lN6GXp5henNnCdsXzYY/AVZOQsWJ8Ir6mDI7xDSR6Xv7oT VjWZmaslHEMKZ02i9QTyNUVposVllLs4k66JTTP2FeDUgib7CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7MklvXm50AQTeFamBShMKS9FqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTU4NzBmZTItYzE3Ni0z OWYwLWEzMTItNWEzZGZkYWNiM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Z8KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtw6KoldFJnspO0uJU8eE5flmubsZwd1SZZaPI1HcN+uLPGnKrsIp15 yYXbzSJmwS40+Lztdp5snSmEbfFS5AbXdZ9bH6u8N3niYoqBFH9O/OlgGk6jkHsj Sb1Aw1OMU0DbXPh3jw6xcI6C7xb1BiBMfaQfChzWEQ7SlAlNc1LKLxSz+pwSDnIs jEC/v+VkLGhR7KKmaAp2y3HQoPbLHyJ+s0QA0nBZ19ySQe+HrwhEQAlRaGFmnlof +O/yMCRTMlhMVxm3keGjtn39N4ObJmgrx4j7nVEgmMd6BiNcknEeAesn+tPRuRzG pw+BLsPRyoX19iG1Zkgaqf712efTzwY= -----END CERTIFICATE-----Generated at Sat Apr 12 22:00:28 2025 by rpki-client