$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9dcab617-7807-367e-9401-361064e28966.roa File: 9dcab617-7807-367e-9401-361064e28966.roa (raw, json) Hash identifier: gECzGX3TIGYUR+jftZ28whzqaGKJBbkMYD7z4M1ADRM= Subject key identifier: 7E:FF:EB:00:6B:B2:ED:B6:6F:06:67:2D:10:AE:83:5A:E8:23:2B:07 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D5E2E1592160646BB3F0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9dcab617-7807-367e-9401-361064e28966.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 100.33.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d5:e2:e1:59:21:60:64:6b:b3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=dde1e9fe-50a5-4189-9827-081cbcd144bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:dc:10:cf:42:14:b4:c1:08:83:27:be:ae: bc:9e:46:b4:56:14:12:bc:42:20:93:92:43:10:d0: 65:71:95:df:a7:c8:17:5f:fb:49:b1:dc:b7:41:2b: ee:cc:57:a3:88:78:f4:59:b5:5c:c2:db:91:9e:c8: e1:75:4d:06:c3:95:c4:82:05:27:2b:11:b9:5b:05: ed:09:65:a5:15:a1:70:4f:c3:7b:84:13:e9:3b:f5: 51:2f:32:5f:84:83:58:b4:e2:ef:d4:f5:87:1e:49: 72:bb:f2:8b:a1:0c:73:f0:7b:8d:d0:f9:ed:27:3f: d1:ce:30:11:10:3c:03:48:2d:8b:01:ad:ad:23:8a: b2:3d:c9:4b:d6:f9:14:b9:41:d5:7a:c5:f4:a8:90: 01:8b:a2:52:ae:3a:77:44:70:f0:e2:ec:69:5f:86: a9:6a:4c:1f:1f:9c:bc:94:93:9f:ae:f5:c2:ff:39: 5d:68:17:59:20:62:0f:6f:63:d1:ce:94:0f:31:64: b7:92:43:97:84:7a:a9:4c:9d:c4:06:52:4b:12:68: f4:2f:a7:21:86:6a:d3:fe:3e:66:77:5c:99:be:2c: 76:ad:9d:61:c3:59:01:ec:9a:1f:81:fb:63:87:7a: e8:34:3a:5d:80:d4:96:9d:7d:dc:79:21:c1:e1:be: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FF:EB:00:6B:B2:ED:B6:6F:06:67:2D:10:AE:83:5A:E8:23:2B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9dcab617-7807-367e-9401-361064e28966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.33.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:87:9a:c4:d1:dc:02:23:7c:e8:23:63:9b:41:f3:0d:05:96: 6d:92:70:d2:35:2e:2b:dc:32:f7:04:f0:9a:43:4e:74:67:ad: 7a:ed:47:f7:0f:92:ec:77:e4:67:38:ff:85:50:89:da:78:99: 84:76:75:a6:7b:99:17:b7:57:01:51:33:2b:c5:03:2e:9b:33: e8:20:54:94:d2:26:74:d9:15:7f:f1:49:87:74:29:7c:4d:02: b7:da:16:d1:03:28:1d:8e:45:41:a5:44:fe:c1:97:8d:96:3e: 0b:30:e0:54:49:8a:fd:14:e9:0f:3b:28:5d:3b:e5:f7:db:f2: 3c:46:41:55:db:12:fc:ab:86:25:60:f0:92:55:30:ce:1e:58: 45:e7:ce:87:5b:79:05:b7:63:ef:53:2d:ec:84:72:06:ae:30: 06:5c:45:fa:55:1d:9c:44:f3:80:d9:d1:22:a6:7a:07:42:a4: 96:9a:3f:a3:c5:55:7f:ff:10:9d:32:3a:a7:ad:3f:b4:4e:09: cd:90:e0:a8:cc:fd:7e:11:af:ae:bd:71:f9:42:9c:44:9d:5f: 27:d0:3d:9a:88:5b:94:22:e7:97:67:dc:30:77:42:02:e2:37: 33:73:bd:39:39:88:1f:7a:e7:a8:81:3b:f9:03:e4:a4:aa:2e: 02:62:43:c5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRtXi4VkhYGRrs/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZGRlMWU5ZmUtNTBhNS00MTg5LTk4MjctMDgxY2JjZDE0NGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F3cEM9CFLTBCIMnvq68nka0VhQSvEIgk5JD ENBlcZXfp8gXX/tJsdy3QSvuzFejiHj0WbVcwtuRnsjhdU0Gw5XEggUnKxG5WwXt CWWlFaFwT8N7hBPpO/VRLzJfhINYtOLv1PWHHklyu/KLoQxz8HuN0PntJz/RzjAR EDwDSC2LAa2tI4qyPclL1vkUuUHVesX0qJABi6JSrjp3RHDw4uxpX4apakwfH5y8 lJOfrvXC/zldaBdZIGIPb2PRzpQPMWS3kkOXhHqpTJ3EBlJLEmj0L6chhmrT/j5m d1yZvix2rZ1hw1kB7Jofgftjh3roNDpdgNSWnX3ceSHB4b6gqQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH7/6wBrsu22bwZnLRCug1roIysHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWRjYWI2MTctNzgwNy0z NjdlLTk0MDEtMzYxMDY0ZTI4OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZCEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIYeaxNHcAiN86CNjm0HzDQWWbZJw0jUuK9wy9wTwmkNOdGeteu1H9w+S 7HfkZzj/hVCJ2niZhHZ1pnuZF7dXAVEzK8UDLpsz6CBUlNImdNkVf/FJh3QpfE0C t9oW0QMoHY5FQaVE/sGXjZY+CzDgVEmK/RTpDzsoXTvl99vyPEZBVdsS/KuGJWDw klUwzh5YRefOh1t5Bbdj71Mt7IRyBq4wBlxF+lUdnETzgNnRIqZ6B0Kklpo/o8VV f/8QnTI6p60/tE4JzZDgqMz9fhGvrr1x+UKcRJ1fJ9A9mohblCLnl2fcMHdCAuI3 M3O9OTmIH3rnqIE7+QPkpKouAmJDxQ== -----END CERTIFICATE-----Generated at Sun Apr 6 10:14:12 2025 by rpki-client