$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17caa430-e7e3-3393-95f8-0d4adc4711f2.roa File: 17caa430-e7e3-3393-95f8-0d4adc4711f2.roa (raw, json) Hash identifier: IpVTpxtuHvSth4xqPYJ0H9R3nlxccQ3Wfunr3RXBPGo= Subject key identifier: D0:6E:38:7E:C2:A1:9C:7F:BE:2D:38:7C:AF:25:7D:5F:32:65:07:FC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858492184233E4B7514D216F06D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17caa430-e7e3-3393-95f8-0d4adc4711f2.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 6167 IP address blocks: 97.137.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:23:3e:4b:75:14:d2:16:f0:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=df2e0609-2089-4c9c-b3d6-0327a7554a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:2c:24:aa:a2:ac:5d:64:ef:9d:5f:0f:86: 40:6c:76:36:af:c0:89:bd:83:59:44:e7:c0:04:6e: 74:d2:d7:0f:57:4f:1f:cf:c7:b1:97:7f:d8:5a:b0: 02:36:73:2b:cd:b2:f9:9c:d5:8d:19:0c:d8:a7:6a: b3:10:d1:b0:16:8d:2b:70:f0:f3:78:63:71:95:ad: d7:e6:82:46:23:c9:80:06:14:14:aa:47:99:66:60: 6e:b7:7f:85:6d:ce:06:0c:5d:63:d7:f2:77:61:54: fc:29:fa:bc:5f:5c:78:01:5a:b3:3e:e0:91:f1:28: f7:e0:83:4c:a7:8c:ca:d2:f7:4a:a4:50:36:0f:9f: b4:66:91:70:30:27:12:ec:22:fa:98:9a:b0:40:e7: f4:49:90:f9:83:fc:d2:2f:ec:94:c2:f2:e6:cf:ac: ba:8f:63:2f:c4:95:af:66:20:d9:30:4c:08:2a:3d: d2:53:15:f6:09:0a:18:9f:f3:a0:34:d5:bc:93:fa: 92:07:33:c6:10:37:cf:b3:a5:2c:db:8f:eb:74:8c: 85:94:56:fd:7b:15:53:9b:72:99:9a:24:c4:5d:a7: d0:99:3e:5a:fb:65:94:5f:40:48:2e:43:43:ab:8d: ce:6e:e0:80:de:21:5f:ad:22:dd:ea:84:87:01:54: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6E:38:7E:C2:A1:9C:7F:BE:2D:38:7C:AF:25:7D:5F:32:65:07:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17caa430-e7e3-3393-95f8-0d4adc4711f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.137.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:f5:8e:80:3c:73:c3:f1:c9:6e:d8:7b:e8:69:43:af:8b:07: 4d:01:24:c0:0f:f2:5b:fe:cf:b6:6d:b1:fc:78:7a:fa:e5:b4: c2:a9:f6:83:04:d6:71:c6:01:a8:2e:43:1a:a2:13:0d:76:b2: ad:80:02:5e:6f:7e:d8:f1:f1:ad:ef:ff:ac:74:01:24:65:fd: fa:ad:8d:45:a5:ac:1a:ad:8a:4b:9a:dd:5c:38:1f:a3:54:26: 19:0e:5a:92:02:3b:94:df:16:5d:65:37:ed:77:2e:ba:b2:d2: 30:b6:58:f2:ff:77:e9:6f:b4:fc:c9:30:6a:c7:50:0b:36:cf: f4:79:57:38:2e:13:b6:4d:83:a1:6a:b7:7d:20:f8:71:aa:5e: f5:70:9b:b2:72:97:c1:c9:3c:c7:35:37:af:f8:12:a8:a0:68: 82:0e:c8:cd:bf:b3:c2:3f:ac:6b:02:6c:f1:ea:b7:77:af:43: 06:00:9e:e4:cf:40:a3:d4:0d:eb:f9:b8:7a:34:b8:4f:58:b4: ae:d2:a7:41:bb:b6:d6:4e:38:3b:92:0c:27:51:0e:d2:f4:32: e7:0b:35:b1:6a:6b:c8:22:de:8a:36:8b:0b:45:f8:5c:41:36: 66:e1:7c:89:6b:50:cf:96:e8:cd:45:81:f0:14:46:ca:72:68: 44:e0:16:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhCM+S3UU0hbwbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZGYyZTA2MDktMjA4OS00YzljLWIzZDYtMDMyN2E3NTU0YTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzUsJKqirF1k751fD4ZAbHY2r8CJvYNZROfA BG500tcPV08fz8exl3/YWrACNnMrzbL5nNWNGQzYp2qzENGwFo0rcPDzeGNxla3X 5oJGI8mABhQUqkeZZmBut3+Fbc4GDF1j1/J3YVT8Kfq8X1x4AVqzPuCR8Sj34INM p4zK0vdKpFA2D5+0ZpFwMCcS7CL6mJqwQOf0SZD5g/zSL+yUwvLmz6y6j2MvxJWv ZiDZMEwIKj3SUxX2CQoYn/OgNNW8k/qSBzPGEDfPs6Us24/rdIyFlFb9exVTm3KZ miTEXafQmT5a+2WUX0BILkNDq43ObuCA3iFfrSLd6oSHAVQZqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBuOH7CoZx/vi04fK8lfV8yZQf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTdjYWE0MzAtZTdlMy0z MzkzLTk1ZjgtMGQ0YWRjNDcxMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYYmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALH1joA8c8PxyW7Ye+hpQ6+LB00BJMAP8lv+z7Ztsfx4evrltMKp9oME 1nHGAaguQxqiEw12sq2AAl5vftjx8a3v/6x0ASRl/fqtjUWlrBqtikua3Vw4H6NU JhkOWpICO5TfFl1lN+13Lrqy0jC2WPL/d+lvtPzJMGrHUAs2z/R5VzguE7ZNg6Fq t30g+HGqXvVwm7Jyl8HJPMc1N6/4EqigaIIOyM2/s8I/rGsCbPHqt3evQwYAnuTP QKPUDev5uHo0uE9YtK7Sp0G7ttZOODuSDCdRDtL0MucLNbFqa8gi3oo2iwtF+FxB NmbhfIlrUM+W6M1FgfAURspyaETgFto= -----END CERTIFICATE-----Generated at Sun Apr 6 01:01:55 2025 by rpki-client