$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5091de7b-3167-3a17-8536-139f0d960c2c.roa File: 5091de7b-3167-3a17-8536-139f0d960c2c.roa (raw, json) Hash identifier: cxR7oszKEluoBF+nqxXF2vOvz2VcWQlzzDdk16lNU2s= Subject key identifier: 79:E9:3A:89:19:10:70:D6:E0:12:E9:C2:AB:96:33:AB:D4:B4:70:00 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F22A17A81FD83D4F73E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5091de7b-3167-3a17-8536-139f0d960c2c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 96.233.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f2:2a:17:a8:1f:d8:3d:4f:73:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=827ed119-8780-4766-a6ed-9ea07e52a04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:26:ec:99:c5:73:a2:c8:e6:bd:2e:c6:dc: e8:bb:61:da:fd:a6:76:02:05:1c:34:57:1f:c6:17: 42:9b:75:54:54:bc:3e:f8:50:de:d3:69:21:76:ff: 29:82:89:a5:c0:b2:e3:c0:9b:8d:8e:90:e6:ad:0e: 97:7d:b6:32:01:40:81:2f:cc:eb:74:c3:dc:69:dc: 51:7e:b4:b9:97:b5:94:7c:2b:c5:0f:ed:0d:ab:14: 8e:b3:bd:a2:b0:da:70:e9:09:6c:3c:ab:28:1d:2b: a5:54:0d:f2:3a:ed:f2:44:6f:79:72:7e:6f:90:59: 0f:64:48:70:dd:aa:14:58:86:b1:bc:5b:8c:2d:3a: 7a:79:5d:61:5d:dd:e7:06:21:af:aa:01:ae:c1:64: 11:02:b3:c3:1f:1c:3b:4e:77:bc:77:93:d4:4d:24: a9:2b:89:f7:7a:86:36:bc:4d:14:a3:45:80:58:8f: ae:a8:a0:ac:06:25:a9:b7:ce:a2:b9:ae:b9:5e:a0: b7:7c:03:b5:bb:2b:e4:f2:58:6c:3c:19:2a:60:08: 76:cc:02:6c:13:21:21:66:87:8a:83:60:b3:28:a8: 29:58:0e:1b:65:e6:1e:a0:77:89:d3:46:1b:66:ad: 7a:51:d7:a1:6e:ef:f5:b4:62:7b:91:b9:78:9e:01: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E9:3A:89:19:10:70:D6:E0:12:E9:C2:AB:96:33:AB:D4:B4:70:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5091de7b-3167-3a17-8536-139f0d960c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.233.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:72:bc:4d:21:b1:53:72:6d:db:1d:39:fd:92:66:4f:1d:6c: 76:cf:27:19:f2:ed:15:13:b9:dd:4c:3d:32:a4:2d:ba:e3:3c: de:d3:5b:04:e0:5a:71:a3:c7:3b:5c:96:18:ca:0b:42:38:7b: 23:9c:70:96:d3:2e:f4:01:14:5d:16:ee:ff:93:db:07:3e:62: ce:11:f2:3f:d6:9e:df:d6:30:16:db:48:ba:72:da:f9:ae:2c: 48:20:53:63:19:71:0d:75:85:80:db:97:b3:48:83:39:05:7c: c4:f3:56:9c:74:96:31:b9:53:61:83:2a:5c:a4:5f:90:a5:6f: b7:0d:66:8f:29:a1:d2:01:6e:41:7c:fa:a6:1f:67:e8:bb:3e: 3c:61:90:03:88:d7:d2:62:eb:32:39:50:e3:b1:83:a1:8c:e1: 84:d7:56:a3:6c:db:c6:ac:92:9e:e9:44:bd:2e:a6:37:ee:7b: de:7a:4a:89:5f:a2:d7:9a:94:56:d0:a9:3d:4a:8b:b5:24:e9: 7c:c6:57:cf:58:b4:f9:7d:aa:0a:d6:f2:36:37:79:0d:fa:c6: 78:92:08:6f:5b:53:70:0b:ca:bd:f5:47:db:f6:e6:a5:e8:df: 74:09:f4:e3:96:cb:71:50:ef:8e:df:56:e3:70:c9:c3:4f:6e: b0:d1:17:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvIqF6gf2D1Pc+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ODI3ZWQxMTktODc4MC00NzY2LWE2ZWQtOWVhMDdlNTJhMDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgsm7JnFc6LI5r0uxtzou2Ha/aZ2AgUcNFcf xhdCm3VUVLw++FDe02khdv8pgomlwLLjwJuNjpDmrQ6XfbYyAUCBL8zrdMPcadxR frS5l7WUfCvFD+0NqxSOs72isNpw6QlsPKsoHSulVA3yOu3yRG95cn5vkFkPZEhw 3aoUWIaxvFuMLTp6eV1hXd3nBiGvqgGuwWQRArPDHxw7Tne8d5PUTSSpK4n3eoY2 vE0Uo0WAWI+uqKCsBiWpt86iua65XqC3fAO1uyvk8lhsPBkqYAh2zAJsEyEhZoeK g2CzKKgpWA4bZeYeoHeJ00YbZq16Udehbu/1tGJ7kbl4ngGlEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnpOokZEHDW4BLpwquWM6vUtHAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTA5MWRlN2ItMzE2Ny0z YTE3LTg1MzYtMTM5ZjBkOTYwYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYOnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVyvE0hsVNybdsdOf2SZk8dbHbPJxny7RUTud1MPTKkLbrjPN7TWwTg WnGjxztclhjKC0I4eyOccJbTLvQBFF0W7v+T2wc+Ys4R8j/Wnt/WMBbbSLpy2vmu LEggU2MZcQ11hYDbl7NIgzkFfMTzVpx0ljG5U2GDKlykX5Clb7cNZo8podIBbkF8 +qYfZ+i7PjxhkAOI19Ji6zI5UOOxg6GM4YTXVqNs28askp7pRL0upjfue956Solf otealFbQqT1Ki7Uk6XzGV89YtPl9qgrW8jY3eQ36xniSCG9bU3ALyr31R9v25qXo 33QJ9OOWy3FQ747fVuNwycNPbrDRF5c= -----END CERTIFICATE-----Generated at Sat Apr 5 21:49:40 2025 by rpki-client