$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa File: 8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa (raw, json) Hash identifier: yzvYZemiMlMywGsHwGC3iz6VhMqIFm40hhdzuMWNWSU= Subject key identifier: 9E:55:15:FE:E7:47:0D:E9:95:83:80:E8:00:86:90:0B:14:B4:16:CC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D5A5AA0803010966C780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 100.15.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d5:a5:aa:08:03:01:09:66:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=ec6aa8b2-fb5d-4414-9b61-758f21cec649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:54:9d:79:41:3a:c2:39:e6:bc:05:84:c5:c1: 52:df:4b:6f:0a:2f:53:ef:78:31:ad:ad:aa:bb:20: f0:a7:41:39:ad:49:02:e8:ac:94:f4:2b:44:93:98: c8:53:e4:7e:3d:7c:65:09:e4:b5:51:45:2b:5b:1d: 14:d6:43:67:62:31:b1:9c:1b:c9:97:1b:c6:ef:90: 89:dd:db:0a:4c:df:eb:de:7e:ec:17:a2:1b:c7:0f: cd:8f:38:21:6a:42:ef:30:14:50:70:2e:60:54:11: 81:60:0d:89:45:e4:43:b5:16:6e:19:a6:7f:91:58: 2b:0e:eb:f3:9a:9d:26:60:e5:f8:aa:42:41:c4:18: a6:b8:4a:b7:a7:11:32:3a:ad:fd:33:86:95:9e:b6: f3:12:b9:23:cd:bf:ac:2b:cb:99:9c:17:7f:1c:10: 32:c9:78:a7:60:ee:9f:4a:c3:2d:12:c8:17:c4:bb: 3f:0b:c9:5e:aa:98:d4:ee:3d:29:bd:49:3b:22:4a: 02:ab:96:84:a5:31:11:be:8d:34:44:9b:51:76:64: 8d:7c:39:99:75:cc:3c:31:03:63:b3:d0:9c:da:7b: 5c:53:ac:cf:37:e0:d3:ad:be:6c:d8:36:33:09:28: 90:a8:3f:e4:73:f3:0a:e5:62:21:e0:42:f7:3e:f8: 88:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:55:15:FE:E7:47:0D:E9:95:83:80:E8:00:86:90:0B:14:B4:16:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.15.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b1:ed:70:88:92:79:23:cd:fc:d2:29:2f:6c:37:50:3b:d9: b3:63:d8:43:49:53:87:3b:c5:54:69:78:27:0d:21:21:70:93: ad:53:09:0c:99:52:69:a0:09:96:40:e9:4f:e0:23:1f:be:c6: 1e:db:85:d3:35:22:39:c4:0e:db:e1:99:09:2f:f8:f8:45:57: 59:ee:77:85:a6:28:c7:16:0b:60:1d:5f:2f:92:fd:36:77:9d: c9:e1:9a:c8:83:54:2a:e1:53:1f:96:e8:ce:3d:88:16:0c:dc: c0:02:b1:97:27:df:a2:c6:15:68:c7:03:99:ab:f2:84:14:f5: 4c:12:1d:ef:15:fb:b4:7d:db:e0:97:38:cc:fa:82:c0:55:b2: b5:2c:03:d9:3c:f1:b3:87:39:68:ed:f4:e6:32:65:07:82:ba: e5:73:c2:45:be:b9:22:c5:8e:09:48:24:91:66:83:c4:22:64: a2:11:52:63:07:c0:a9:86:f2:a2:50:82:71:a6:16:8e:49:be: ec:ed:82:41:80:6a:eb:9d:93:24:23:ae:d7:64:7e:6c:65:c3: 22:63:5b:b4:aa:e0:f4:0e:f6:78:e0:df:ec:80:86:14:48:15: 6d:6f:ad:b4:52:6b:2c:ef:1a:d8:54:fb:f9:67:f3:e5:71:de: 4f:f1:6e:1f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRtWlqggDAQlmx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZWM2YWE4YjItZmI1ZC00NDE0LTliNjEtNzU4ZjIxY2VjNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVSdeUE6wjnmvAWExcFS30tvCi9T73gxra2q uyDwp0E5rUkC6KyU9CtEk5jIU+R+PXxlCeS1UUUrWx0U1kNnYjGxnBvJlxvG75CJ 3dsKTN/r3n7sF6Ibxw/NjzghakLvMBRQcC5gVBGBYA2JReRDtRZuGaZ/kVgrDuvz mp0mYOX4qkJBxBimuEq3pxEyOq39M4aVnrbzErkjzb+sK8uZnBd/HBAyyXinYO6f SsMtEsgXxLs/C8leqpjU7j0pvUk7IkoCq5aEpTERvo00RJtRdmSNfDmZdcw8MQNj s9Cc2ntcU6zPN+DTrb5s2DYzCSiQqD/kc/MK5WIh4EL3PviIDQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ5VFf7nRw3plYOA6ACGkAsUtBbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGM0NTRmMzYtMDRmNy0z MmZiLWI3NmUtZWIzN2Y3NDBiMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZA8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQLHtcIiSeSPN/NIpL2w3UDvZs2PYQ0lThzvFVGl4Jw0hIXCTrVMJDJlS aaAJlkDpT+AjH77GHtuF0zUiOcQO2+GZCS/4+EVXWe53haYoxxYLYB1fL5L9Nned yeGayINUKuFTH5bozj2IFgzcwAKxlyffosYVaMcDmavyhBT1TBId7xX7tH3b4Jc4 zPqCwFWytSwD2Tzxs4c5aO305jJlB4K65XPCRb65IsWOCUgkkWaDxCJkohFSYwfA qYbyolCCcaYWjkm+7O2CQYBq652TJCOu12R+bGXDImNbtKrg9A72eODf7ICGFEgV bW+ttFJrLO8a2FT7+Wfz5XHeT/FuHw== -----END CERTIFICATE-----Generated at Sun Apr 6 03:28:03 2025 by rpki-client