$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8efafed5-ce51-3d99-9398-eed4eaee3a1d.roa File: 8efafed5-ce51-3d99-9398-eed4eaee3a1d.roa (raw, json) Hash identifier: d8o1mDk+7thkXfYr3eslwlOP/4j+gWRiwdQU4Tf58Jk= Subject key identifier: F2:23:E4:C8:03:A9:61:F1:EA:E4:22:14:70:3A:4F:B0:95:D8:23:7D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858496260430E51BF2EC0D4988FC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8efafed5-ce51-3d99-9398-eed4eaee3a1d.roa Signing time: Tue 01 Apr 2025 18:37:00 +0000 ROA not before: Tue 01 Apr 2025 18:37:00 +0000 ROA not after: Mon 30 Jun 2025 18:37:00 +0000 asID: 6167 IP address blocks: 97.203.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:62:60:43:0e:51:bf:2e:c0:d4:98:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 1 18:37:00 2025 GMT Not After : Jun 30 18:37:00 2025 GMT Subject: CN=fca83f8b-5679-4a5d-a514-f892072c8c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:03:a2:55:4a:88:4d:7e:38:0d:9f:35:ba:31: 9b:35:71:9a:72:aa:1c:13:c5:f1:de:d5:44:55:66: e5:f0:60:16:a6:14:d0:93:9d:1a:55:cc:00:13:6a: 5c:b6:63:60:c7:d4:cb:39:8f:6a:cc:7e:97:2a:7c: 0b:a8:f6:d3:cf:04:c9:b6:20:bb:34:07:53:37:e4: fe:3d:b5:07:ea:89:0d:10:48:31:9b:25:c1:88:aa: 67:ef:5a:f5:40:cb:be:c5:24:48:d1:78:20:f1:82: 3d:f9:68:76:31:c6:60:33:dc:ae:52:94:a5:a1:07: 2f:74:85:da:7f:c6:36:a1:7e:77:42:de:8f:bf:fa: 7e:e1:52:d9:5b:94:a4:f2:51:b6:c9:81:9d:6b:18: e4:b0:d5:69:75:ae:a6:9d:71:57:b6:37:c8:7b:4a: 47:bb:83:51:87:af:1f:2c:d2:e4:46:bf:c3:dd:9c: b3:b3:49:af:2e:42:c8:19:56:db:ac:f2:6b:c5:89: 3a:e1:9f:81:e0:c7:d7:d3:a4:b5:cc:f6:94:27:72: ba:12:71:8c:1c:5a:5a:18:53:95:03:81:e3:98:a4: f0:e2:88:45:e2:f8:e2:e8:1e:83:df:67:11:5c:e4: 0e:29:be:bc:b9:db:52:a5:32:2b:f5:ec:3f:b1:7a: 88:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:23:E4:C8:03:A9:61:F1:EA:E4:22:14:70:3A:4F:B0:95:D8:23:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8efafed5-ce51-3d99-9398-eed4eaee3a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.203.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:db:8a:72:54:7d:53:65:88:a9:d4:12:42:fb:63:52:08:79: 75:c2:3c:b3:c0:36:11:b7:e9:93:76:a2:f3:89:2a:e6:c4:17: dd:0e:65:75:16:85:90:6b:4a:44:94:d5:81:ae:63:65:68:80: be:14:85:ef:00:7b:1d:a7:4f:72:34:a0:37:c2:f7:10:21:3f: 95:27:fe:17:f6:46:c6:b7:95:af:93:f9:3a:b0:9d:0f:e5:b8: c5:09:0d:23:1a:0b:5a:da:e9:bc:8c:bb:74:bf:41:a9:fd:16: c2:87:29:fc:4c:48:f2:8d:32:36:98:2a:3e:c7:41:08:2a:34: d4:51:2a:b7:f7:91:a5:41:ef:83:89:6b:2f:46:79:05:94:ca: 2f:74:4f:37:cc:e4:0c:1f:10:19:44:fa:7f:12:51:87:cf:54: 63:77:10:ad:a5:76:0b:af:88:4c:0f:19:55:5a:8c:72:48:a9: 95:85:56:cd:40:45:de:e7:b5:91:27:78:54:aa:f0:d5:8f:92: c9:57:ec:65:54:f4:6d:f2:db:10:27:76:08:3b:c7:33:da:7f: e8:ff:75:a1:0c:72:d5:84:86:fe:bb:6e:f8:fb:ff:f2:f1:29: 1f:1d:c6:cc:02:9e:f2:d2:2b:58:91:29:97:21:c7:57:ae:34: c9:6f:f9:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEliYEMOUb8uwNSYj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQwMTE4MzcwMFoXDTI1MDYzMDE4MzcwMFowLzEtMCsGA1UEAxMk ZmNhODNmOGItNTY3OS00YTVkLWE1MTQtZjg5MjA3MmM4YzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gOiVUqITX44DZ81ujGbNXGacqocE8Xx3tVE VWbl8GAWphTQk50aVcwAE2pctmNgx9TLOY9qzH6XKnwLqPbTzwTJtiC7NAdTN+T+ PbUH6okNEEgxmyXBiKpn71r1QMu+xSRI0Xgg8YI9+Wh2McZgM9yuUpSloQcvdIXa f8Y2oX53Qt6Pv/p+4VLZW5Sk8lG2yYGdaxjksNVpda6mnXFXtjfIe0pHu4NRh68f LNLkRr/D3Zyzs0mvLkLIGVbbrPJrxYk64Z+B4MfX06S1zPaUJ3K6EnGMHFpaGFOV A4HjmKTw4ohF4vji6B6D32cRXOQOKb68udtSpTIr9ew/sXqI+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIj5MgDqWHx6uQiFHA6T7CV2CN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGVmYWZlZDUtY2U1MS0z ZDk5LTkzOTgtZWVkNGVhZWUzYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYcsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLbinJUfVNliKnUEkL7Y1IIeXXCPLPANhG36ZN2ovOJKubEF90OZXUW hZBrSkSU1YGuY2VogL4Uhe8Aex2nT3I0oDfC9xAhP5Un/hf2Rsa3la+T+TqwnQ/l uMUJDSMaC1ra6byMu3S/Qan9FsKHKfxMSPKNMjaYKj7HQQgqNNRRKrf3kaVB74OJ ay9GeQWUyi90TzfM5AwfEBlE+n8SUYfPVGN3EK2ldguviEwPGVVajHJIqZWFVs1A Rd7ntZEneFSq8NWPkslX7GVU9G3y2xAndgg7xzPaf+j/daEMctWEhv67bvj7//Lx KR8dxswCnvLSK1iRKZchx1euNMlv+WU= -----END CERTIFICATE-----Generated at Sun Apr 6 17:55:29 2025 by rpki-client