$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d66e26c-47a8-389a-b617-d620dd4291b4.roa File: 6d66e26c-47a8-389a-b617-d620dd4291b4.roa (raw, json) Hash identifier: oYsqiv7LJyz2nv2U3FqWKL2G4RlxVFT2xkcUlZKzX3I= Subject key identifier: C1:5D:90:35:74:9E:65:9E:78:52:6F:0D:BF:D7:B9:9A:09:30:94:A4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C247791CBB0389B082A6800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d66e26c-47a8-389a-b617-d620dd4291b4.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 141.150.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:77:91:cb:b0:38:9b:08:2a:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=3f928b2f-9be1-460b-9246-e257591f6832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:18:c7:2f:9e:53:bd:d6:ba:a8:e1:71:26: a1:20:52:6e:21:a7:5b:4d:c5:03:d4:ec:83:bd:1b: c9:3d:60:86:45:4d:19:87:22:17:99:45:4b:d1:ef: e1:62:72:ba:30:05:68:e6:ef:64:60:82:89:54:1b: 20:99:d2:10:b2:3f:75:32:60:8e:63:a8:41:93:83: fa:8b:44:30:0e:4b:85:0b:45:cd:cd:a5:08:ac:73: 3b:80:d7:35:7e:14:d1:f9:29:82:a8:18:52:fd:f0: ae:5a:00:1d:8a:11:79:6e:18:9f:fb:d0:97:ac:58: 77:07:18:c1:1c:32:2e:4b:9d:50:37:32:96:b9:10: 75:0f:a4:dc:42:dc:d0:40:e4:a4:49:0e:ad:0b:51: e2:dc:17:43:2d:88:75:e3:91:be:89:88:0f:58:b6: 17:c1:f8:b4:9c:7d:3a:34:62:5b:91:b2:5f:9d:9c: ce:99:9b:a3:33:aa:c7:be:0b:fa:48:44:c3:b8:ea: 7f:db:9e:2c:9d:ab:e5:1c:c2:8b:b5:6e:d2:20:e5: e7:67:b8:38:c5:f1:cc:87:29:09:48:a5:f7:f1:05: c2:81:89:15:7a:b0:0e:43:6e:3c:fd:a9:8a:53:5c: c8:1f:b8:89:17:80:a5:ab:69:80:73:c6:b8:75:b8: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5D:90:35:74:9E:65:9E:78:52:6F:0D:BF:D7:B9:9A:09:30:94:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d66e26c-47a8-389a-b617-d620dd4291b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.150.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b4:87:f1:06:7a:f1:c1:fd:d1:ec:95:80:2d:49:a5:5f:22: 01:6a:32:97:dd:fa:38:21:0c:37:c2:d1:47:40:e5:5b:7a:e3: 06:f2:ae:e8:0a:09:7a:b8:aa:19:73:c9:c6:74:3b:d5:d9:ba: 22:0d:8b:43:9b:3a:62:34:fe:3e:50:5c:a3:05:05:dd:c6:d5: be:6b:98:f9:b9:52:17:1d:27:87:2f:5f:cf:f2:20:6b:91:14: 1b:94:50:82:e5:75:96:b5:00:f3:5a:62:ee:c0:6b:0e:e7:85: d1:cf:aa:a8:01:14:c1:54:57:8f:72:99:0a:a6:46:98:0e:00: 6d:8d:10:5c:f6:ce:ce:73:76:40:f2:43:87:ac:bf:db:4d:4d: 88:c7:3c:d6:68:5a:e7:8e:59:4f:7e:47:dc:63:27:dd:be:3b: 2e:12:bf:d3:f6:ac:3b:56:69:64:a2:47:7c:26:73:5e:52:2c: 31:40:f6:69:0e:1b:6a:c8:64:69:16:67:3b:7c:70:b3:08:7c: 80:ed:90:5a:c3:db:08:11:0a:ac:84:54:8e:8e:5f:86:dc:8a: 77:cb:da:c2:a3:57:8b:07:da:66:55:c0:17:43:e2:d6:8d:99: 73:3d:eb:ab:a6:ef:c2:43:b2:e8:91:e9:fb:36:30:ab:7c:54: 46:50:74:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJHeRy7A4mwgqaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk M2Y5MjhiMmYtOWJlMS00NjBiLTkyNDYtZTI1NzU5MWY2ODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE4Yxy+eU73WuqjhcSahIFJuIadbTcUD1OyD vRvJPWCGRU0ZhyIXmUVL0e/hYnK6MAVo5u9kYIKJVBsgmdIQsj91MmCOY6hBk4P6 i0QwDkuFC0XNzaUIrHM7gNc1fhTR+SmCqBhS/fCuWgAdihF5bhif+9CXrFh3BxjB HDIuS51QNzKWuRB1D6TcQtzQQOSkSQ6tC1Hi3BdDLYh145G+iYgPWLYXwfi0nH06 NGJbkbJfnZzOmZujM6rHvgv6SETDuOp/254snavlHMKLtW7SIOXnZ7g4xfHMhykJ SKX38QXCgYkVerAOQ248/amKU1zIH7iJF4Clq2mAc8a4dbj62wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFdkDV0nmWeeFJvDb/XuZoJMJSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmQ2NmUyNmMtNDdhOC0z ODlhLWI2MTctZDYyMGRkNDI5MWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKS0h/EGevHB/dHslYAtSaVfIgFqMpfd+jghDDfC0UdA5Vt64wbyrugK CXq4qhlzycZ0O9XZuiINi0ObOmI0/j5QXKMFBd3G1b5rmPm5UhcdJ4cvX8/yIGuR FBuUUILldZa1APNaYu7Aaw7nhdHPqqgBFMFUV49ymQqmRpgOAG2NEFz2zs5zdkDy Q4esv9tNTYjHPNZoWueOWU9+R9xjJ92+Oy4Sv9P2rDtWaWSiR3wmc15SLDFA9mkO G2rIZGkWZzt8cLMIfIDtkFrD2wgRCqyEVI6OX4bcinfL2sKjV4sH2mZVwBdD4taN mXM966um78JDsuiR6fs2MKt8VEZQdLM= -----END CERTIFICATE-----Generated at Sun Apr 6 03:52:36 2025 by rpki-client