$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98417e41-fc5c-3417-9add-ed6493dc5046.roa File: 98417e41-fc5c-3417-9add-ed6493dc5046.roa (raw, json) Hash identifier: bxcLyrCmQEZuvdBPmBHs+Tx5tXgnnds2Vex5ZEmkw60= Subject key identifier: 5B:B3:79:07:4D:22:40:14:3D:2D:34:B9:2D:DF:6E:E3:48:9A:12:73 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C245084DE7400C96C4CDC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98417e41-fc5c-3417-9add-ed6493dc5046.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 138.89.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:50:84:de:74:00:c9:6c:4c:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=98e584ca-47b6-4cc1-9ff6-98212522985f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:38:f0:fa:85:ec:48:86:98:fa:c4:c5:ba:96: 27:b8:65:a5:c7:66:33:0a:5b:6a:69:db:71:af:9e: c2:e1:5e:22:8e:fc:4f:1e:09:0e:3f:81:e4:26:bb: 12:a1:7b:a6:26:94:f7:76:6e:d7:4e:ee:39:79:7e: c9:0b:40:82:20:4b:0e:2c:5a:52:00:78:e4:d7:c4: 62:5a:52:a4:42:a3:30:40:fe:5b:35:67:05:d7:06: d5:6a:04:38:88:57:6a:8a:e4:99:7b:30:90:14:35: 97:0c:0e:82:22:8a:51:12:e8:2b:25:88:02:b3:cc: db:8d:f9:00:13:a2:fb:48:86:97:e1:32:9b:28:26: 81:f9:fe:07:f5:39:78:e9:bc:8d:c4:2c:19:6c:06: c1:74:22:99:c7:b6:9c:a5:c7:f7:1d:de:87:28:7f: c4:30:54:68:44:ea:24:85:ae:bf:07:76:9a:f3:23: bb:c3:43:16:0b:0e:a0:88:72:fd:29:57:f3:05:2d: 90:19:87:bd:49:88:17:58:33:a5:47:9a:24:96:c8: 8f:ad:b7:97:72:3d:b1:72:b0:fd:c7:41:c6:a6:89: d4:0a:c2:5e:07:e5:15:14:01:4f:ea:c7:ca:2b:85: 42:97:45:c2:1b:dc:b5:2e:6a:68:53:59:69:d5:0b: 50:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B3:79:07:4D:22:40:14:3D:2D:34:B9:2D:DF:6E:E3:48:9A:12:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98417e41-fc5c-3417-9add-ed6493dc5046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 138.89.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a6:6b:ac:fb:0e:76:e6:8f:47:83:1b:e3:6f:8d:2f:c5:8b: cb:52:f0:b5:25:3f:f6:01:1f:50:a0:37:c1:48:6f:26:1f:e8: ef:fd:39:dd:62:b4:88:47:c1:1f:8d:70:05:da:a2:48:89:2e: b3:16:6e:e8:3f:cd:29:da:00:07:22:4d:37:cb:c9:7d:97:a3: 74:9c:9e:9b:83:c6:19:6d:74:73:a5:ff:ad:4c:0f:dc:7a:b8: e6:10:0f:47:07:e0:0f:28:f5:77:a2:62:59:f4:ee:27:51:a7: 5d:ed:ec:f5:e0:dc:5c:c0:e0:3a:dd:c8:50:1a:ac:b7:04:dd: 5f:c7:92:78:2f:ce:b4:d6:99:12:e6:48:5b:7b:ed:67:8e:74: ee:87:94:f3:9c:a2:b0:b3:e4:d2:c0:c6:ab:db:82:85:d7:3a: 26:5f:6c:c9:a7:d9:af:5d:9b:64:5f:96:48:11:ff:80:2f:5f: 17:e1:7c:06:91:3b:99:7b:ff:bf:d3:3e:d0:3e:37:7f:6c:46: 3e:56:c9:c1:f4:de:5a:6b:68:ee:a4:47:f1:72:82:84:cf:d6: db:87:7d:31:e5:9d:a7:ae:f3:ee:e7:3e:c9:f5:c5:dd:72:44: eb:15:5e:6d:15:66:7f:ca:49:0c:81:f5:4f:68:16:2f:69:4c: 89:64:f5:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJFCE3nQAyWxM3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk OThlNTg0Y2EtNDdiNi00Y2MxLTlmZjYtOTgyMTI1MjI5ODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijjw+oXsSIaY+sTFupYnuGWlx2YzCltqadtx r57C4V4ijvxPHgkOP4HkJrsSoXumJpT3dm7XTu45eX7JC0CCIEsOLFpSAHjk18Ri WlKkQqMwQP5bNWcF1wbVagQ4iFdqiuSZezCQFDWXDA6CIopREugrJYgCs8zbjfkA E6L7SIaX4TKbKCaB+f4H9Tl46byNxCwZbAbBdCKZx7acpcf3Hd6HKH/EMFRoROok ha6/B3aa8yO7w0MWCw6giHL9KVfzBS2QGYe9SYgXWDOlR5oklsiPrbeXcj2xcrD9 x0HGponUCsJeB+UVFAFP6sfKK4VCl0XCG9y1LmpoU1lp1QtQZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuzeQdNIkAUPS00uS3fbuNImhJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTg0MTdlNDEtZmM1Yy0z NDE3LTlhZGQtZWQ2NDkzZGM1MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGilmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGama6z7Dnbmj0eDG+NvjS/Fi8tS8LUlP/YBH1CgN8FIbyYf6O/9Od1i tIhHwR+NcAXaokiJLrMWbug/zSnaAAciTTfLyX2Xo3ScnpuDxhltdHOl/61MD9x6 uOYQD0cH4A8o9XeiYln07idRp13t7PXg3FzA4DrdyFAarLcE3V/HkngvzrTWmRLm SFt77WeOdO6HlPOcorCz5NLAxqvbgoXXOiZfbMmn2a9dm2RflkgR/4AvXxfhfAaR O5l7/7/TPtA+N39sRj5WycH03lpraO6kR/FygoTP1tuHfTHlnaeu8+7nPsn1xd1y ROsVXm0VZn/KSQyB9U9oFi9pTIlk9Ss= -----END CERTIFICATE-----Generated at Sat Apr 5 18:39:55 2025 by rpki-client