$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/838d9e95-b40c-3b39-9531-932bc4130a4c.roa File: 838d9e95-b40c-3b39-9531-932bc4130a4c.roa (raw, json) Hash identifier: DNjqxB5/tzvCemWRs2BcA0UklAt6abz+WF+hjDoecWI= Subject key identifier: 91:EC:FF:BD:7A:B7:F8:5F:BE:B7:D2:9F:6A:4D:79:67:92:85:24:4A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858492184255E905029613BF14180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/838d9e95-b40c-3b39-9531-932bc4130a4c.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 6167 IP address blocks: 97.178.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:25:5e:90:50:29:61:3b:f1:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=da298e05-d863-442f-b11a-485a76bd9808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:02:ed:3c:14:d5:87:09:2c:c3:8e:d8:46:d0: b4:7a:0e:82:1e:78:28:8e:79:6c:33:4f:c7:e3:66: dc:e9:33:78:c6:30:1e:59:99:9c:49:f1:e1:bd:77: 36:b8:e1:9f:c9:c6:b4:22:9b:f2:9f:0b:23:ed:8b: e9:d1:ea:43:8b:3a:83:8d:9a:2a:06:e7:bd:4d:68: 8d:7e:8c:c2:65:61:2e:0b:99:9c:bd:65:cb:35:c7: 13:21:fd:44:27:0c:10:92:8e:1e:ec:a2:cd:b8:89: 83:3a:6d:33:a8:8c:20:75:0d:8a:98:81:86:84:17: 48:a0:ba:59:e8:73:a0:5d:df:06:78:ef:dd:54:34: 56:10:57:9a:06:d2:4d:6b:31:45:44:5a:16:a9:d3: 1a:f7:28:e6:e9:20:b6:9a:e6:f3:e4:54:d6:fc:17: d3:88:3c:e3:53:6b:79:3d:c0:d3:b1:60:14:9c:56: 0c:e6:ed:62:86:8c:a5:4e:e9:e5:90:eb:05:c5:e2: d9:52:cd:1a:bc:b0:97:1c:cf:9e:0e:94:d6:2f:9d: 68:c9:23:85:6f:55:74:62:19:35:d5:62:96:9b:73: ec:10:da:84:f0:ee:ec:1a:9b:92:61:3a:5e:1b:d2: 73:60:0e:a5:33:53:3e:5b:17:cf:59:8d:7b:1a:08: 9a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EC:FF:BD:7A:B7:F8:5F:BE:B7:D2:9F:6A:4D:79:67:92:85:24:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/838d9e95-b40c-3b39-9531-932bc4130a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.178.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ae:5a:b8:c8:08:ba:e4:d7:14:e3:68:95:d6:69:4a:2a:45: 77:42:01:ae:3a:01:28:8f:02:a7:75:12:e0:c0:c8:b3:a4:05: a7:92:31:1e:a0:2a:03:aa:e6:5c:74:39:ea:3e:1d:82:d2:c9: f0:11:2d:44:ea:c4:55:49:f6:40:8a:c1:62:a6:f6:83:13:4a: 88:bd:ba:8c:48:bb:f3:13:90:f6:57:90:6b:0b:0b:95:9b:78: 7d:72:90:89:dd:48:06:48:0e:a0:4c:45:07:77:67:d5:8a:5f: fb:ec:b2:c1:c5:39:fa:fd:d7:86:ec:34:fb:ed:b4:53:ac:b9: 13:35:06:c7:40:9b:91:38:e1:c9:cc:ec:5b:13:4c:53:60:ae: e7:4d:a1:01:c1:15:ad:37:ae:65:ad:95:65:0b:f8:db:7c:2d: 96:a3:4f:8b:e6:5c:82:41:ce:5e:d0:4f:f2:1f:ca:26:21:ac: 2b:fb:ed:d4:2a:cb:06:90:00:1b:b5:e7:33:29:f8:e7:6f:9a: 8b:bd:40:b0:fa:86:41:1f:27:7e:ef:18:f9:2c:c6:90:2a:fd: aa:72:06:3e:a0:3b:68:ef:34:cc:a4:55:45:06:c3:48:17:07: e1:da:e0:14:1b:7f:66:11:94:3b:87:c1:ca:e1:cf:51:d8:64: 93:01:03:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhCVekFApYTvxQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZGEyOThlMDUtZDg2My00NDJmLWIxMWEtNDg1YTc2YmQ5ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwLtPBTVhwksw47YRtC0eg6CHngojnlsM0/H 42bc6TN4xjAeWZmcSfHhvXc2uOGfyca0Ipvynwsj7Yvp0epDizqDjZoqBue9TWiN fozCZWEuC5mcvWXLNccTIf1EJwwQko4e7KLNuImDOm0zqIwgdQ2KmIGGhBdIoLpZ 6HOgXd8GeO/dVDRWEFeaBtJNazFFRFoWqdMa9yjm6SC2mubz5FTW/BfTiDzjU2t5 PcDTsWAUnFYM5u1ihoylTunlkOsFxeLZUs0avLCXHM+eDpTWL51oySOFb1V0Yhk1 1WKWm3PsENqE8O7sGpuSYTpeG9JzYA6lM1M+WxfPWY17GgiacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHs/716t/hfvrfSn2pNeWeShSRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODM4ZDllOTUtYjQwYy0z YjM5LTk1MzEtOTMyYmM0MTMwYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYbIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2uWrjICLrk1xTjaJXWaUoqRXdCAa46ASiPAqd1EuDAyLOkBaeSMR6g KgOq5lx0Oeo+HYLSyfARLUTqxFVJ9kCKwWKm9oMTSoi9uoxIu/MTkPZXkGsLC5Wb eH1ykIndSAZIDqBMRQd3Z9WKX/vsssHFOfr914bsNPvttFOsuRM1BsdAm5E44cnM 7FsTTFNgrudNoQHBFa03rmWtlWUL+Nt8LZajT4vmXIJBzl7QT/IfyiYhrCv77dQq ywaQABu15zMp+Odvmou9QLD6hkEfJ37vGPksxpAq/apyBj6gO2jvNMykVUUGw0gX B+Ha4BQbf2YRlDuHwcrhz1HYZJMBAzw= -----END CERTIFICATE-----Generated at Sat Apr 5 18:28:30 2025 by rpki-client