$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53e06b8b-0092-345f-8501-3c76546a1211.roa File: 53e06b8b-0092-345f-8501-3c76546a1211.roa (raw, json) Hash identifier: sXVBhM+DpcNcdE3NoH6wm72mAC/b+mydLZTrcVWlMDI= Subject key identifier: 70:3A:6D:C9:C5:EF:A7:F6:FE:39:CA:7D:4D:7F:48:12:BD:91:79:F5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858492184343506BB7DD9D9679F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53e06b8b-0092-345f-8501-3c76546a1211.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 6167 IP address blocks: 97.190.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:34:35:06:bb:7d:d9:d9:67:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=4a3316ab-9fb7-4b01-bd40-8c1d8f4ce99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:c4:e5:09:ed:21:92:6f:e3:70:fb:3a:62: 61:bb:cc:b0:d6:3f:ec:e3:b5:99:a0:ba:ec:d8:8e: 79:23:d8:42:85:17:8f:50:37:bd:86:2b:c4:eb:44: cd:d9:5b:28:49:f2:1a:45:10:de:90:cb:de:52:0b: f1:30:09:43:a6:dd:88:85:4d:6d:6b:89:eb:71:5b: 88:ba:bf:9e:30:00:61:5f:cb:56:11:4d:e7:b7:6e: 4f:1a:6d:80:9f:be:d3:73:0e:c8:bb:a3:6d:ed:97: c7:f2:c1:e9:17:cd:42:37:c8:a3:39:06:3a:92:d6: 85:5f:52:11:72:0e:fc:45:ec:07:db:ab:f4:ab:44: d7:02:25:47:3b:b1:73:8d:78:35:d5:89:40:e5:78: 4b:1c:82:f4:0b:9d:88:13:27:ba:73:d0:78:51:40: ed:fa:00:d1:0a:c8:4e:94:f0:64:6c:08:60:46:5c: 4b:8e:4c:cf:e1:db:30:f7:15:54:1b:12:fb:1c:15: 0e:4b:9a:ae:ad:4b:a4:01:e2:4b:ce:d0:60:05:90: c3:4d:59:1b:64:35:35:4d:ed:8e:d4:1a:22:85:75: 5b:67:33:d4:4f:69:0e:89:92:41:1e:0e:5b:5c:a7: 1c:98:ed:dc:dd:37:f7:33:4a:d6:be:74:e1:52:1c: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3A:6D:C9:C5:EF:A7:F6:FE:39:CA:7D:4D:7F:48:12:BD:91:79:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53e06b8b-0092-345f-8501-3c76546a1211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.190.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:73:ad:f2:01:d9:b3:04:6c:3c:a3:77:e3:d8:80:ee:e8:6b: 6e:85:92:87:b3:1b:6f:a2:46:7f:67:97:53:64:91:ba:ad:ca: f6:a6:f2:08:69:01:c4:b8:3b:f0:63:44:03:ad:cd:9e:9f:50: 40:f0:f1:05:34:4b:2b:58:93:4c:27:a7:d3:01:77:51:e5:37: f4:02:48:46:71:c5:69:6e:17:67:86:96:bd:71:72:f5:fa:82: b5:c5:cf:4d:9e:b4:75:ed:e3:2e:e0:eb:ae:84:1e:18:6f:d4: f5:f3:26:d3:32:86:c5:77:e2:e3:4b:91:b9:2d:51:8b:2a:ce: dc:dc:a0:c3:4b:fc:fc:cd:f4:db:f1:52:cd:4d:60:e9:ae:1e: b8:52:74:0e:c8:66:9f:48:b3:62:14:db:48:57:c8:96:27:5e: 03:b5:6d:37:36:a1:1e:b1:54:84:be:02:bd:84:6c:6a:f5:53: 44:e5:e5:08:b7:6a:89:1a:7b:1b:78:20:a0:0b:96:51:df:84: 47:1f:90:97:2f:50:68:f8:09:fa:69:de:cf:96:29:b2:55:8b: 9e:f4:8f:ce:d2:11:3a:bd:cd:68:c0:22:f6:a1:09:77:fe:7b: e4:62:ab:13:0a:6b:8f:04:fb:83:22:99:d1:ed:aa:fa:03:16: fb:ac:fa:d2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkhhDQ1Brt92dlnnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NGEzMzE2YWItOWZiNy00YjAxLWJkNDAtOGMxZDhmNGNlOTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLXE5QntIZJv43D7OmJhu8yw1j/s47WZoLrs 2I55I9hChRePUDe9hivE60TN2VsoSfIaRRDekMveUgvxMAlDpt2IhU1ta4nrcVuI ur+eMABhX8tWEU3nt25PGm2An77Tcw7Iu6Nt7ZfH8sHpF81CN8ijOQY6ktaFX1IR cg78RewH26v0q0TXAiVHO7FzjXg11YlA5XhLHIL0C52IEye6c9B4UUDt+gDRCshO lPBkbAhgRlxLjkzP4dsw9xVUGxL7HBUOS5qurUukAeJLztBgBZDDTVkbZDU1Te2O 1BoihXVbZzPUT2kOiZJBHg5bXKccmO3c3Tf3M0rWvnThUhxSPQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHA6bcnF76f2/jnKfU1/SBK9kXn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTNlMDZiOGItMDA5Mi0z NDVmLTg1MDEtM2M3NjU0NmExMjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYb4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlXOt8gHZswRsPKN349iA7uhrboWSh7Mbb6JGf2eXU2SRuq3K9qbyCGkB xLg78GNEA63Nnp9QQPDxBTRLK1iTTCen0wF3UeU39AJIRnHFaW4XZ4aWvXFy9fqC tcXPTZ60de3jLuDrroQeGG/U9fMm0zKGxXfi40uRuS1RiyrO3Nygw0v8/M302/FS zU1g6a4euFJ0Dshmn0izYhTbSFfIlideA7VtNzahHrFUhL4CvYRsavVTROXlCLdq iRp7G3ggoAuWUd+ERx+Qly9QaPgJ+mnez5YpslWLnvSPztIROr3NaMAi9qEJd/57 5GKrEwprjwT7gyKZ0e2q+gMW+6z60g== -----END CERTIFICATE-----Generated at Sun Apr 6 08:50:49 2025 by rpki-client