$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa File: 89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa (raw, json) Hash identifier: D4Smvt7PRY5Cx+nmR2krVQtJbrJADGSQnxnhmruBjzE= Subject key identifier: 5B:ED:63:DA:C1:C2:23:47:3C:90:59:B0:D1:FB:4C:19:8D:0F:56:2E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246CE6FCB0450741C876680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 96.249.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ce:6f:cb:04:50:74:1c:87:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=56d53ab2-391e-427a-bfe4-8627afcff9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:3a:ae:81:b5:b4:f1:35:da:dd:7d:bd:29: 3e:3e:82:d6:7d:31:ab:85:90:e0:9c:e6:55:d0:3e: 96:a7:ec:14:73:5c:26:26:c9:9a:d0:6b:aa:82:f8: 7b:39:65:c5:c3:7e:45:15:d7:3a:49:3a:1e:e9:04: 9a:7a:d7:99:a6:c6:d3:79:62:ce:9d:96:2f:93:0d: 79:e8:98:7a:b7:7a:89:5e:cf:85:fb:94:a8:a0:df: 76:0b:f5:61:c5:7a:9d:6e:43:c9:78:a9:3f:85:91: 25:43:ad:a1:da:c1:c8:47:8e:f6:f9:62:ba:d9:3c: b8:b7:7b:90:ee:fa:4e:df:98:f4:cd:2d:af:1e:e5: 75:14:c9:7c:b5:30:59:4f:63:ec:0f:6a:40:83:a5: b6:78:fa:f2:4b:c2:52:0c:12:26:78:69:19:73:b8: 82:cb:14:06:ac:8e:14:f8:6e:f5:4d:26:bc:e8:36: c8:14:5f:87:eb:e3:53:bb:7b:37:e4:bc:0b:fb:6e: 19:7e:54:b6:02:d3:c9:b4:79:00:5a:23:ab:d6:47: 99:57:5d:d6:a9:7c:39:a0:30:79:5c:c9:27:d0:55: 93:ad:b9:46:ca:5a:e5:fc:ed:7d:c5:b4:dc:b8:ed: 74:a1:7f:c2:98:8d:94:9a:d7:17:1d:e3:ea:f0:0c: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:ED:63:DA:C1:C2:23:47:3C:90:59:B0:D1:FB:4C:19:8D:0F:56:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.249.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:78:39:ae:48:0b:98:7a:5d:7c:59:88:84:ba:8a:cd:1e:bd: 17:7a:e3:7e:6c:70:2b:4c:1b:37:c0:43:f7:ff:9f:48:70:26: 85:c7:de:d1:f5:08:d9:c1:94:e0:a6:a4:34:ad:3b:87:a0:c0: 0e:da:38:a4:89:7c:77:f6:aa:d1:ef:71:8a:3e:f7:b8:ae:a3: 6b:3e:c9:92:b1:85:c5:31:dd:94:93:6e:08:fd:3f:a5:60:5b: c2:d1:3a:ba:5f:8a:fd:48:ec:91:b7:57:60:f4:0b:af:52:e6: ad:11:e7:f7:ad:16:71:53:f8:80:61:9a:62:03:98:d7:23:7b: c8:c9:00:f8:e1:e8:bf:d4:dc:3c:fa:23:93:9a:a6:50:3a:e8: 84:bb:d5:0f:2e:2d:5d:2c:1f:60:08:21:96:12:10:2e:bb:bb: 33:55:a6:6f:b6:60:e8:a5:39:45:3e:0d:14:f0:a2:d6:ab:cb: 8c:8f:e6:d6:a1:65:73:af:59:03:f3:02:6b:d0:0f:e7:9f:1e: 91:9d:3f:0d:0b:45:6f:65:62:0f:f5:b4:66:20:29:a6:58:08: 97:1d:f1:83:3d:38:59:c1:05:89:0d:e1:34:75:98:29:ed:0d: f3:33:bd:07:6e:b8:ce:61:04:64:69:ca:e8:b2:15:c8:b9:4f: 68:7b:3b:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRs5vywRQdByHZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NTZkNTNhYjItMzkxZS00MjdhLWJmZTQtODYyN2FmY2ZmOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUQ6roG1tPE12t19vSk+PoLWfTGrhZDgnOZV 0D6Wp+wUc1wmJsma0Guqgvh7OWXFw35FFdc6SToe6QSaeteZpsbTeWLOnZYvkw15 6Jh6t3qJXs+F+5SooN92C/VhxXqdbkPJeKk/hZElQ62h2sHIR472+WK62Ty4t3uQ 7vpO35j0zS2vHuV1FMl8tTBZT2PsD2pAg6W2ePryS8JSDBImeGkZc7iCyxQGrI4U +G71TSa86DbIFF+H6+NTu3s35LwL+24ZflS2AtPJtHkAWiOr1keZV13WqXw5oDB5 XMkn0FWTrblGylrl/O19xbTcuO10oX/CmI2UmtcXHePq8Awz4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvtY9rBwiNHPJBZsNH7TBmND1YuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODk0NTNkNmQtMjJjOC0z ZjRmLWFjMDYtOWQyOWM1NmEyY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYPmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKN4Oa5IC5h6XXxZiIS6is0evRd6435scCtMGzfAQ/f/n0hwJoXH3tH1 CNnBlOCmpDStO4egwA7aOKSJfHf2qtHvcYo+97iuo2s+yZKxhcUx3ZSTbgj9P6Vg W8LROrpfiv1I7JG3V2D0C69S5q0R5/etFnFT+IBhmmIDmNcje8jJAPjh6L/U3Dz6 I5OaplA66IS71Q8uLV0sH2AIIZYSEC67uzNVpm+2YOilOUU+DRTwotary4yP5tah ZXOvWQPzAmvQD+efHpGdPw0LRW9lYg/1tGYgKaZYCJcd8YM9OFnBBYkN4TR1mCnt DfMzvQduuM5hBGRpyuiyFci5T2h7O3s= -----END CERTIFICATE-----Generated at Sat Apr 5 18:23:43 2025 by rpki-client