$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a652f60-cec7-329a-b702-fd9ae911cdae.roa File: 3a652f60-cec7-329a-b702-fd9ae911cdae.roa (raw, json) Hash identifier: 3x4Nalhf3nUTq2b+PKDJdh1bk6wl9AKbNj6WhgmXR28= Subject key identifier: 37:10:85:D6:21:1C:1B:00:23:13:2E:C3:88:52:C7:7D:44:56:88:70 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858492184264EB0A5642E6AEFF140 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a652f60-cec7-329a-b702-fd9ae911cdae.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 141.207.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:26:4e:b0:a5:64:2e:6a:ef:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=4a0d70d3-8cf0-43fb-a945-a15edc63e8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f8:5f:81:04:75:88:3b:f4:8f:2a:f3:be:af: e6:52:bd:7c:72:2b:84:59:99:04:4d:6a:ba:1d:8a: 0e:14:1a:f9:e7:e8:40:7b:04:14:ee:a8:c1:67:40: ee:4b:05:2b:4a:c8:4e:15:d3:3d:a9:ee:d6:22:d1: 60:95:76:0b:ee:cc:c4:d4:b7:36:06:a0:e2:82:e9: b5:a0:4c:0b:15:84:23:c3:c7:f3:f5:07:6c:21:56: 82:ff:5d:4e:18:21:30:8e:8a:68:06:0e:93:70:18: 72:cc:ae:87:32:0c:48:d1:6b:65:40:a6:64:5c:e3: e2:77:ab:1d:88:6b:46:a4:37:28:97:e8:df:c9:77: aa:69:1c:b4:26:da:98:b2:4f:93:a2:c3:6c:32:55: 36:fe:1b:07:f9:08:d0:f1:b5:a8:7f:68:22:b0:94: 6e:6a:fb:1c:7c:17:a0:db:ff:dc:10:e0:61:dd:e8: 3e:d0:57:11:a3:7e:22:7c:f2:10:5c:d7:05:14:c4: e2:3d:3f:aa:67:d6:e4:7d:df:1a:dd:32:4a:5e:de: 06:47:6f:92:34:eb:47:42:25:3a:29:e9:84:77:7c: d7:0d:b4:6b:41:b1:f9:6e:e7:bd:cd:52:0f:ee:b5: e9:a9:a0:bd:ae:4e:d2:b4:8a:21:85:c6:45:04:41: 1c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:10:85:D6:21:1C:1B:00:23:13:2E:C3:88:52:C7:7D:44:56:88:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a652f60-cec7-329a-b702-fd9ae911cdae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.207.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:06:be:63:de:5d:2c:95:77:83:7a:95:98:03:40:61:23:40: aa:1f:7c:19:7c:a0:88:51:c1:68:53:a3:c2:59:7e:99:f7:eb: bd:76:28:6a:ec:2f:23:d5:ee:b4:1b:a0:cb:9d:6b:1c:e6:d4: 07:41:80:ad:d2:62:14:e4:01:8a:ba:a5:e3:f6:dc:3c:b4:e1: 75:dc:46:0d:07:ba:27:ac:0e:50:29:85:27:bf:01:e4:7e:dc: ac:f5:7d:a8:d4:15:c9:24:c4:f3:58:3b:c7:da:62:41:e2:68: 58:b0:a7:74:dd:53:a9:1f:cd:c0:fd:58:f8:c8:b9:d6:61:26: 59:05:9c:16:52:dc:ff:62:5c:44:47:a3:5e:74:19:d0:6c:31: dd:31:87:0b:c4:6f:ba:0c:6d:6d:b7:c7:6d:6b:09:f6:d9:9b: 1f:2d:af:76:e6:72:23:96:f1:84:df:b8:45:cf:8d:ef:6d:a7: 01:96:de:66:f7:b5:7c:e8:d4:45:96:50:d9:8d:8a:45:c7:00: 22:30:1e:f4:53:60:60:57:3a:15:0a:b6:71:a2:9d:3d:55:eb: bd:c8:eb:2c:57:b5:10:7d:0d:e4:f4:54:c4:33:ef:c9:ec:bf: 08:42:ec:b3:1d:e2:c4:11:26:0d:b4:52:ec:d5:c5:da:76:dc: 47:cc:a2:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhCZOsKVkLmrv8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NGEwZDcwZDMtOGNmMC00M2ZiLWE5NDUtYTE1ZWRjNjNlOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPhfgQR1iDv0jyrzvq/mUr18ciuEWZkETWq6 HYoOFBr55+hAewQU7qjBZ0DuSwUrSshOFdM9qe7WItFglXYL7szE1Lc2BqDigum1 oEwLFYQjw8fz9QdsIVaC/11OGCEwjopoBg6TcBhyzK6HMgxI0WtlQKZkXOPid6sd iGtGpDcol+jfyXeqaRy0JtqYsk+TosNsMlU2/hsH+QjQ8bWof2gisJRuavscfBeg 2//cEOBh3eg+0FcRo34ifPIQXNcFFMTiPT+qZ9bkfd8a3TJKXt4GR2+SNOtHQiU6 KemEd3zXDbRrQbH5bue9zVIP7rXpqaC9rk7StIohhcZFBEEcgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcQhdYhHBsAIxMuw4hSx31EVohwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2E2NTJmNjAtY2VjNy0z MjlhLWI3MDItZmQ5YWU5MTFjZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjc/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIGvmPeXSyVd4N6lZgDQGEjQKoffBl8oIhRwWhTo8JZfpn36712KGrs LyPV7rQboMudaxzm1AdBgK3SYhTkAYq6peP23Dy04XXcRg0HuiesDlAphSe/AeR+ 3Kz1fajUFckkxPNYO8faYkHiaFiwp3TdU6kfzcD9WPjIudZhJlkFnBZS3P9iXERH o150GdBsMd0xhwvEb7oMbW23x21rCfbZmx8tr3bmciOW8YTfuEXPje9tpwGW3mb3 tXzo1EWWUNmNikXHACIwHvRTYGBXOhUKtnGinT1V673I6yxXtRB9DeT0VMQz78ns vwhC7LMd4sQRJg20UuzVxdp23EfMols= -----END CERTIFICATE-----Generated at Sun Apr 6 01:07:27 2025 by rpki-client