$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/848b0985-4fbf-3593-a63b-2a26e8c4a948.roa File: 848b0985-4fbf-3593-a63b-2a26e8c4a948.roa (raw, json) Hash identifier: D2uvfpaywFU+w2U9FBniJBO13PWalKAqiUcC2NFlxWA= Subject key identifier: BD:E2:70:97:56:D3:F1:2E:66:C2:D3:99:F3:DF:C9:92:5D:75:43:6F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858496484675F62A28D3BA7E1CCC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/848b0985-4fbf-3593-a63b-2a26e8c4a948.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 6167 IP address blocks: 75.239.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:67:5f:62:a2:8d:3b:a7:e1:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=2da70ffa-8cd2-4b80-890a-0f123614a713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:53:fc:38:5a:d8:11:48:da:88:0f:3c:6e: 50:30:25:d4:bb:11:64:c4:ec:36:84:b2:59:d4:0d: 45:1b:50:e8:ac:b6:64:f3:7d:bf:51:a7:fa:aa:4f: 45:0a:45:b0:e3:09:c3:37:28:ff:fe:9f:8e:ee:0e: fc:1e:30:2b:b0:b2:aa:83:8a:c5:47:16:75:b5:7f: 91:ad:67:eb:af:b3:e5:5d:cc:f5:e2:92:f9:95:cc: 40:e1:a8:ff:d3:17:e5:23:18:d7:96:62:8d:05:e0: d1:3d:29:67:67:7c:9d:90:ce:9e:06:13:bf:4e:82: 56:a5:f3:66:16:43:f4:f2:02:f0:0b:8a:11:3e:f0: 7d:b3:e2:ed:1a:80:55:45:8e:e2:22:01:35:10:d3: 7b:cf:28:4d:e3:a3:fa:f8:7e:b3:bf:02:b7:9b:6d: d0:4e:66:fd:1e:d1:4e:97:5c:64:49:bf:73:16:11: 2c:4a:22:ce:96:ac:c4:89:e5:f5:07:c6:a4:39:63: 81:d0:27:fe:b6:cd:93:1b:1b:ed:fd:29:9f:e7:8a: d7:7c:b0:30:24:f5:00:8d:90:e8:94:5e:d1:a9:57: a5:ba:5d:b8:f7:7f:3d:20:d8:47:9e:ac:12:19:bc: 3d:0d:3f:f9:06:5c:ea:bd:fe:d3:c8:27:98:ae:76: 9d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E2:70:97:56:D3:F1:2E:66:C2:D3:99:F3:DF:C9:92:5D:75:43:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/848b0985-4fbf-3593-a63b-2a26e8c4a948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 75.239.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:88:19:92:81:75:81:35:d3:8b:4c:8a:9c:02:36:70:d7:91: 14:d6:fa:eb:87:44:67:f4:5a:bf:20:1a:0c:7b:0c:9e:b8:49: cb:32:34:d5:71:46:1b:31:5d:93:35:61:a3:2d:fb:95:0d:ec: 0d:c9:9a:59:53:a3:d8:68:88:8e:33:e4:cf:f1:91:3b:08:eb: 8c:d4:48:15:77:d5:51:64:c3:ea:b7:e3:1d:88:70:3c:78:ce: 23:a0:7f:ae:76:cd:1b:d5:03:8e:35:77:46:51:0b:c7:7d:a8: 1b:ed:ff:d3:dc:c7:9d:58:77:82:ab:e3:e9:5e:9f:7b:cb:c1: 34:16:54:4a:f9:05:6a:b0:2f:f5:ad:b9:fb:43:88:cb:9f:00: 42:ef:68:40:01:b2:7e:5c:ee:fd:7e:00:81:c7:e7:50:1f:9f: 29:47:bb:35:5d:b6:34:f3:cf:c7:7f:b0:3e:26:76:ad:5a:15: 79:01:69:83:d1:0d:9d:fd:d6:a5:44:e2:8e:aa:a8:99:fc:60: f6:ce:90:a7:ca:cc:7c:4c:51:96:e2:8b:e5:89:14:2a:75:89: a4:39:a2:2f:17:1b:78:f5:bc:7f:c0:d1:82:e6:59:79:51:47: 07:e7:7c:14:f5:ef:e9:42:dd:6a:9c:96:01:07:3f:ac:96:76: 23:9d:51:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhGdfYqKNO6fhzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk MmRhNzBmZmEtOGNkMi00YjgwLTg5MGEtMGYxMjM2MTRhNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA5T/Dha2BFI2ogPPG5QMCXUuxFkxOw2hLJZ 1A1FG1DorLZk832/Uaf6qk9FCkWw4wnDNyj//p+O7g78HjArsLKqg4rFRxZ1tX+R rWfrr7PlXcz14pL5lcxA4aj/0xflIxjXlmKNBeDRPSlnZ3ydkM6eBhO/ToJWpfNm FkP08gLwC4oRPvB9s+LtGoBVRY7iIgE1ENN7zyhN46P6+H6zvwK3m23QTmb9HtFO l1xkSb9zFhEsSiLOlqzEieX1B8akOWOB0Cf+ts2TGxvt/Smf54rXfLAwJPUAjZDo lF7RqVelul249389INhHnqwSGbw9DT/5Blzqvf7TyCeYrnadaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3icJdW0/EuZsLTmfPfyZJddUNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODQ4YjA5ODUtNGZiZi0z NTkzLWE2M2ItMmEyNmU4YzRhOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS++AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCIGZKBdYE104tMipwCNnDXkRTW+uuHRGf0Wr8gGgx7DJ64ScsyNNVx RhsxXZM1YaMt+5UN7A3JmllTo9hoiI4z5M/xkTsI64zUSBV31VFkw+q34x2IcDx4 ziOgf652zRvVA441d0ZRC8d9qBvt/9Pcx51Yd4Kr4+len3vLwTQWVEr5BWqwL/Wt uftDiMufAELvaEABsn5c7v1+AIHH51AfnylHuzVdtjTzz8d/sD4mdq1aFXkBaYPR DZ391qVE4o6qqJn8YPbOkKfKzHxMUZbii+WJFCp1iaQ5oi8XG3j1vH/A0YLmWXlR RwfnfBT17+lC3WqclgEHP6yWdiOdUc8= -----END CERTIFICATE-----Generated at Sun Apr 6 11:10:51 2025 by rpki-client