$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e1022aa-da3e-31d3-8e7a-783b47f02b53.roa File: 8e1022aa-da3e-31d3-8e7a-783b47f02b53.roa (raw, json) Hash identifier: S36vFaJ1tIFRz9P1g5bECpMvhsyhvNIPD3ww1/nnurU= Subject key identifier: A9:97:9C:39:6C:0E:02:E3:A4:2E:46:50:87:F3:24:22:67:7F:C3:37 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244DE5C9D19A08915ED300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e1022aa-da3e-31d3-8e7a-783b47f02b53.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 141.152.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4d:e5:c9:d1:9a:08:91:5e:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=7763684a-ea3c-4726-bff5-414bfaf6282f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f2:0d:de:a5:58:73:47:bd:98:af:3a:55:b4: d2:6b:db:98:38:64:d3:dd:1e:94:90:df:d1:55:a6: 7c:13:57:75:80:5e:90:43:43:80:6e:f3:ae:3a:24: a4:9b:6d:6d:40:f7:73:3c:7a:f3:43:d9:76:5b:eb: e0:e4:a4:8c:05:99:dc:cd:a1:72:86:16:c8:85:85: 2c:11:b1:9f:71:bd:05:7b:e0:bf:a4:3f:8f:0a:de: a7:0f:14:5a:33:ea:f6:a3:a9:c0:0b:d0:1d:00:b3: b2:cf:81:16:36:b9:bf:08:1d:97:a4:eb:a5:6f:52: 91:43:71:00:c6:25:df:ab:6e:bf:34:06:96:87:ac: e8:2e:6e:7b:03:ee:3b:54:18:de:54:48:ec:7c:84: 94:ae:ec:5c:31:67:74:9d:6d:a5:98:a4:92:c2:92: 2c:f9:71:26:71:66:66:3e:67:38:75:ee:06:49:b4: 57:61:ef:f2:f5:ba:77:e0:22:51:84:11:b3:07:17: cc:e1:88:ef:ee:c7:d3:11:d4:33:04:16:e3:b2:40: 88:cd:e6:d6:3a:25:e8:51:a5:b5:9d:5d:23:b0:29: 25:2c:6d:99:c2:dd:1c:08:77:e6:d1:6a:a9:20:28: 79:80:1a:d8:2c:64:65:3d:85:2c:d3:c4:4a:14:83: d5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:97:9C:39:6C:0E:02:E3:A4:2E:46:50:87:F3:24:22:67:7F:C3:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e1022aa-da3e-31d3-8e7a-783b47f02b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.152.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ba:67:75:22:2c:d4:d0:0b:4e:88:2c:b2:4b:20:76:56:1b: 5f:f3:32:06:46:ec:dd:9a:0c:59:01:46:de:c7:9a:47:5c:19: 87:c1:14:2b:d2:21:7b:e3:95:0c:0b:c8:bd:19:d8:b3:2e:5d: 9a:04:a4:d1:42:48:2d:da:df:f5:14:b0:77:92:3e:91:c4:f9: 08:7a:31:e4:b1:ee:51:b9:14:31:b4:11:7f:12:bd:11:06:d9: 07:2a:f8:d7:2b:0e:6e:fb:e1:00:18:74:25:29:f6:70:01:9e: 3d:b5:7c:af:df:fb:ac:3c:20:2c:76:55:a7:41:0c:d1:5f:78: 1b:c6:f8:f4:d3:d3:64:3d:0d:b0:b5:13:4e:8d:33:17:3e:b9: 41:b7:0c:54:55:49:6d:5f:94:f0:a4:41:32:6d:e5:3c:e0:9a: 7a:9b:0c:80:c1:63:21:41:ad:03:29:4f:84:18:e5:b9:4b:f3: 5c:71:3a:58:5a:2b:d8:32:6f:63:e2:9b:5c:6c:4c:8b:7b:59: 83:9f:de:6a:1f:4f:12:50:09:c5:08:d0:f3:cf:64:b9:bd:c9: e7:87:c8:5a:ca:dd:52:60:39:62:d0:ae:0d:18:c3:73:0c:25: 1a:cd:be:77:e3:b5:92:9e:76:1f:59:67:49:75:0b:24:82:28: c2:60:6e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJE3lydGaCJFe0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk Nzc2MzY4NGEtZWEzYy00NzI2LWJmZjUtNDE0YmZhZjYyODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/IN3qVYc0e9mK86VbTSa9uYOGTT3R6UkN/R VaZ8E1d1gF6QQ0OAbvOuOiSkm21tQPdzPHrzQ9l2W+vg5KSMBZnczaFyhhbIhYUs EbGfcb0Fe+C/pD+PCt6nDxRaM+r2o6nAC9AdALOyz4EWNrm/CB2XpOulb1KRQ3EA xiXfq26/NAaWh6zoLm57A+47VBjeVEjsfISUruxcMWd0nW2lmKSSwpIs+XEmcWZm Pmc4de4GSbRXYe/y9bp34CJRhBGzBxfM4Yjv7sfTEdQzBBbjskCIzebWOiXoUaW1 nV0jsCklLG2Zwt0cCHfm0WqpICh5gBrYLGRlPYUs08RKFIPVTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmXnDlsDgLjpC5GUIfzJCJnf8M3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGUxMDIyYWEtZGEzZS0z MWQzLThlN2EtNzgzYjQ3ZjAyYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZgSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW6Z3UiLNTQC06ILLJLIHZWG1/zMgZG7N2aDFkBRt7HmkdcGYfBFCvS IXvjlQwLyL0Z2LMuXZoEpNFCSC3a3/UUsHeSPpHE+Qh6MeSx7lG5FDG0EX8SvREG 2Qcq+NcrDm774QAYdCUp9nABnj21fK/f+6w8ICx2VadBDNFfeBvG+PTT02Q9DbC1 E06NMxc+uUG3DFRVSW1flPCkQTJt5TzgmnqbDIDBYyFBrQMpT4QY5blL81xxOlha K9gyb2Pim1xsTIt7WYOf3mofTxJQCcUI0PPPZLm9yeeHyFrK3VJgOWLQrg0Yw3MM JRrNvnfjtZKedh9ZZ0l1CySCKMJgbjk= -----END CERTIFICATE-----Generated at Sun Apr 6 05:23:13 2025 by rpki-client