$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c081c35-d4bd-38eb-8650-ae525c61ad25.roa File: 6c081c35-d4bd-38eb-8650-ae525c61ad25.roa (raw, json) Hash identifier: DXPloyFw1MbwMNxR2yIOS2GDfXDtiBrLREk+GcOSvYQ= Subject key identifier: A8:19:D0:C0:45:92:87:9C:31:0A:32:FA:15:62:D3:96:CC:4B:09:A7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244E168906D19647138F18 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c081c35-d4bd-38eb-8650-ae525c61ad25.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 141.153.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4e:16:89:06:d1:96:47:13:8f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=60ffbd59-2cb8-4cbc-8cab-d3362654ea36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:e5:8c:5d:5e:e7:b8:51:df:e0:de:b0:bc: 22:e7:2a:d0:69:12:94:d8:06:b4:a8:0c:4a:b4:58: c6:06:7f:73:61:1f:6d:2b:3d:20:8f:6d:36:c6:15: 82:a2:c9:95:f6:5f:a6:49:02:6f:49:8f:41:52:2e: ff:a4:64:c8:29:b4:4d:d1:6b:b7:65:36:18:a7:65: 7b:1e:f3:00:c6:14:70:83:50:03:68:c3:58:51:fb: 56:98:b1:6f:6d:12:da:33:0c:d2:b9:7f:27:f9:c5: fa:2f:8a:c0:57:97:8c:56:e4:0e:be:74:20:56:8b: 0b:e8:a2:da:a6:4f:8a:bc:40:ac:b0:01:91:35:15: 57:37:d8:98:08:56:5f:a6:6b:4f:0a:a2:bc:d8:1e: 4f:c8:e7:8d:b9:c5:b5:df:3e:b6:77:29:7c:8c:33: f0:c8:2c:80:bb:62:11:ab:21:a8:8f:23:29:26:11: 88:ee:80:ca:d5:8d:83:6d:72:1b:c9:13:12:d1:d8: 9b:ea:cd:ab:04:e4:80:43:09:f9:1b:1b:80:aa:5d: e8:dc:92:61:17:a2:cb:6f:f7:df:78:55:33:b4:42: 81:ba:2d:f7:f7:9a:e0:e4:fb:01:6e:6c:45:97:da: 62:73:a4:b0:bf:34:11:b4:c2:4f:7a:77:c1:15:6b: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:19:D0:C0:45:92:87:9C:31:0A:32:FA:15:62:D3:96:CC:4B:09:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c081c35-d4bd-38eb-8650-ae525c61ad25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.153.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:af:fb:ce:be:e1:97:87:91:7b:f1:fb:1b:3b:e9:54:65:b8: 60:1b:06:85:4f:79:d9:72:63:7f:96:88:e0:aa:b0:82:cd:7a: 9f:ee:d8:8c:24:69:b6:b6:60:52:77:2b:ed:0a:69:f8:65:9d: 67:5a:5c:4f:1b:6c:a4:bf:75:42:2d:16:c1:01:93:68:3c:26: 74:e5:51:fe:7a:a0:bb:62:e0:25:1c:1b:af:39:b5:66:2c:6e: 6d:00:49:8c:54:ca:63:7f:a1:c4:e3:c0:51:bd:7f:ee:b7:8c: 0a:22:80:80:86:7f:4b:c0:0f:e6:f4:60:67:c5:93:b1:88:be: c1:cb:79:5b:5f:f3:a1:08:21:eb:d1:46:0f:d1:fe:52:8c:3c: e5:32:bd:d4:da:55:cc:42:b5:a0:4f:7d:72:36:62:32:bb:c4: 95:2d:19:1c:77:bd:c0:f9:6c:e0:2a:18:37:af:50:09:ee:0b: 12:18:f6:15:62:e1:5a:b2:ba:df:6e:09:cd:59:cd:b4:34:45: c7:ed:a1:ac:6c:c5:0e:a3:90:e1:82:b4:ec:06:08:d6:75:02: bb:45:01:e0:e0:53:c1:af:02:24:b3:13:b0:3b:16:7a:3a:36: b3:ec:ad:49:81:15:10:d9:4d:5a:62:5f:e5:af:9c:db:33:7b: 5e:22:4b:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJE4WiQbRlkcTjxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NjBmZmJkNTktMmNiOC00Y2JjLThjYWItZDMzNjI2NTRlYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+fljF1e57hR3+DesLwi5yrQaRKU2Aa0qAxK tFjGBn9zYR9tKz0gj202xhWCosmV9l+mSQJvSY9BUi7/pGTIKbRN0Wu3ZTYYp2V7 HvMAxhRwg1ADaMNYUftWmLFvbRLaMwzSuX8n+cX6L4rAV5eMVuQOvnQgVosL6KLa pk+KvECssAGRNRVXN9iYCFZfpmtPCqK82B5PyOeNucW13z62dyl8jDPwyCyAu2IR qyGojyMpJhGI7oDK1Y2DbXIbyRMS0dib6s2rBOSAQwn5GxuAql3o3JJhF6LLb/ff eFUztEKBui3395rg5PsBbmxFl9pic6SwvzQRtMJPenfBFWvYEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgZ0MBFkoecMQoy+hVi05bMSwmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmMwODFjMzUtZDRiZC0z OGViLTg2NTAtYWU1MjVjNjFhZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZnaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiv+86+4ZeHkXvx+xs76VRluGAbBoVPedlyY3+WiOCqsILNep/u2Iwk aba2YFJ3K+0KafhlnWdaXE8bbKS/dUItFsEBk2g8JnTlUf56oLti4CUcG685tWYs bm0ASYxUymN/ocTjwFG9f+63jAoigICGf0vAD+b0YGfFk7GIvsHLeVtf86EIIevR Rg/R/lKMPOUyvdTaVcxCtaBPfXI2YjK7xJUtGRx3vcD5bOAqGDevUAnuCxIY9hVi 4Vqyut9uCc1ZzbQ0RcftoaxsxQ6jkOGCtOwGCNZ1ArtFAeDgU8GvAiSzE7A7Fno6 NrPsrUmBFRDZTVpiX+WvnNsze14iS2A= -----END CERTIFICATE-----Generated at Sun Apr 6 06:23:30 2025 by rpki-client