$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7658f728-53a6-3ade-8b66-df9e2646d46e.roa File: 7658f728-53a6-3ade-8b66-df9e2646d46e.roa (raw, json) Hash identifier: jTpLGeaaQlPZjuDfq7k7SbiRuOtbbKFqir7+7tuj9/Q= Subject key identifier: ED:1F:09:8E:57:E4:4C:FD:42:90:C9:0A:14:DF:93:E2:3D:70:F4:B4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D5FABB30C28481A7F160 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7658f728-53a6-3ade-8b66-df9e2646d46e.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 100.34.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d5:fa:bb:30:c2:84:81:a7:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=d33045ac-ec0a-439a-ae9d-f1b12f03019d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4f:5a:2c:e7:fa:b0:09:9b:13:26:a0:78:cd: f8:3b:1a:0e:3b:6a:63:0f:56:fe:81:0d:53:37:1c: c7:a4:eb:d7:f6:24:b5:34:84:f7:24:44:4b:27:e3: b3:d2:fd:8e:e3:15:50:6a:ac:23:ce:26:2d:21:47: 32:ed:73:29:99:7c:f0:e8:49:e3:88:21:0c:ec:c7: 51:6a:d0:63:41:b2:ca:d2:d1:8d:9b:82:c2:f3:76: 9b:8b:39:d0:16:97:ea:79:59:27:e9:ab:dc:f9:0b: cc:e0:14:bf:f4:03:e5:94:9c:c5:51:5f:34:cd:4d: 7b:1b:24:22:26:72:2c:78:c9:3f:5f:b7:83:bd:bf: 35:78:9b:f8:31:4d:5f:78:d1:d9:3c:da:4f:d5:b7: bd:31:a8:aa:71:e7:2c:30:38:91:09:7e:d2:81:d1: cc:80:b0:d8:16:cd:75:f8:72:f4:5e:c2:48:d4:1d: 07:52:5c:38:4a:88:95:e0:5a:c3:e7:62:39:f2:73: 80:19:6c:dd:9c:11:ae:38:8d:c0:8c:7f:2c:fd:09: 60:27:03:ae:b9:43:d6:ba:57:bf:e7:a4:0d:dd:33: 61:62:7f:2e:fe:84:ad:be:d8:2b:c9:a7:ff:b6:37: 92:df:f0:e6:13:f5:3a:4f:08:0d:a0:5d:ce:a4:ba: 07:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1F:09:8E:57:E4:4C:FD:42:90:C9:0A:14:DF:93:E2:3D:70:F4:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7658f728-53a6-3ade-8b66-df9e2646d46e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.34.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3d:77:29:01:0e:2d:ab:78:34:49:7f:fe:ed:82:c3:cd:39: 35:8a:fa:14:de:28:62:f0:3d:a5:36:88:d1:bc:1b:5e:68:62: 60:70:47:ab:6f:d2:46:f0:90:b1:a3:40:2a:0e:c9:f5:7f:d6: 14:45:7c:40:98:4b:62:8d:4a:e9:48:ea:23:05:4b:5a:eb:7a: ac:10:90:e6:40:8f:78:24:de:03:54:42:21:e8:17:94:ec:c3: a7:79:d8:0e:fb:8a:f7:b0:bd:cb:73:ea:b2:5c:31:a5:d2:11: a8:1c:f5:78:24:ff:c8:d7:fc:78:48:e1:bb:2d:60:be:59:89: a1:49:01:43:17:df:63:01:9b:64:02:84:d7:42:89:13:4c:c0: 93:41:d5:1f:e0:fc:49:97:30:ee:65:16:1c:1d:63:09:0a:8b: 30:e6:e1:e7:88:50:e8:05:e1:3a:6a:c1:97:9e:e5:c8:9c:86: 96:f6:be:89:fb:09:9c:06:f5:79:39:e2:36:3a:4d:70:c1:2c: 17:99:2e:44:6b:31:9b:75:82:b7:c5:99:3d:41:fa:6f:67:4b: f9:55:85:c2:d6:55:aa:81:86:45:12:64:43:c6:03:e1:47:18: 0b:af:cd:9f:6d:34:fc:65:56:16:6f:63:f3:f2:57:1f:16:f4: e4:4a:15:15 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRtX6uzDChIGn8WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZDMzMDQ1YWMtZWMwYS00MzlhLWFlOWQtZjFiMTJmMDMwMTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk9aLOf6sAmbEyageM34OxoOO2pjD1b+gQ1T NxzHpOvX9iS1NIT3JERLJ+Oz0v2O4xVQaqwjziYtIUcy7XMpmXzw6EnjiCEM7MdR atBjQbLK0tGNm4LC83abiznQFpfqeVkn6avc+QvM4BS/9APllJzFUV80zU17GyQi JnIseMk/X7eDvb81eJv4MU1feNHZPNpP1be9MaiqcecsMDiRCX7SgdHMgLDYFs11 +HL0XsJI1B0HUlw4SoiV4FrD52I58nOAGWzdnBGuOI3AjH8s/QlgJwOuuUPWule/ 56QN3TNhYn8u/oStvtgryaf/tjeS3/DmE/U6TwgNoF3OpLoHuwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFO0fCY5X5Ez9QpDJChTfk+I9cPS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzY1OGY3MjgtNTNhNi0z YWRlLThiNjYtZGY5ZTI2NDZkNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZCIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAND13KQEOLat4NEl//u2Cw805NYr6FN4oYvA9pTaI0bwbXmhiYHBHq2/S RvCQsaNAKg7J9X/WFEV8QJhLYo1K6UjqIwVLWut6rBCQ5kCPeCTeA1RCIegXlOzD p3nYDvuK97C9y3PqslwxpdIRqBz1eCT/yNf8eEjhuy1gvlmJoUkBQxffYwGbZAKE 10KJE0zAk0HVH+D8SZcw7mUWHB1jCQqLMObh54hQ6AXhOmrBl57lyJyGlva+ifsJ nAb1eTniNjpNcMEsF5kuRGsxm3WCt8WZPUH6b2dL+VWFwtZVqoGGRRJkQ8YD4UcY C6/Nn200/GVWFm9j8/JXHxb05EoVFQ== -----END CERTIFICATE-----Generated at Sun Apr 6 11:08:30 2025 by rpki-client