$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aec849ee-0a0e-30ea-af69-be4af676bd65.roa File: aec849ee-0a0e-30ea-af69-be4af676bd65.roa (raw, json) Hash identifier: DEfC70UnfKvgIGOlYRIOGmzhQf39bw3bxA2sJUBLgY8= Subject key identifier: 47:3F:9C:EA:68:77:5D:C0:95:5D:D3:B2:C2:0E:E3:35:5C:AD:07:DB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849218425FA1DA0BE3A9119BD40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aec849ee-0a0e-30ea-af69-be4af676bd65.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 141.207.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:25:fa:1d:a0:be:3a:91:19:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=41620495-fd14-4957-b30c-6922a7997ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:16:e5:fe:1e:5b:5a:af:f5:85:0c:cf:0e:d2: a7:24:84:57:ef:e6:1a:b7:2c:8a:75:da:fa:0d:76: 7e:d1:3f:0e:e4:9c:3b:a6:79:b1:e6:5c:87:9a:41: a4:ff:23:b5:86:6c:22:3c:d9:e1:65:b1:7f:16:4a: 36:e8:34:ef:02:5f:e1:62:ff:b3:59:e6:f0:90:4c: f9:89:7f:96:33:93:3b:57:68:81:9d:62:77:aa:84: a5:1e:a4:5e:c6:8b:ef:0d:e6:e5:23:51:40:b6:61: e5:c1:16:32:ce:18:e9:0a:4f:75:62:8e:69:e2:fe: 00:5b:63:fd:a9:ab:67:6b:77:19:2a:74:02:e7:16: 26:b0:b3:a0:11:57:92:fe:8d:27:b2:fe:50:40:ba: 9a:df:13:28:5a:9d:95:dc:9c:ae:fa:71:bf:3c:93: 71:63:c6:b1:9f:5a:f7:e4:22:45:73:ab:6b:08:f4: ba:7a:80:10:e8:93:31:d0:a0:e9:f8:4a:95:c7:da: 44:77:da:a4:29:82:f1:bf:ad:24:ce:35:44:1f:74: 0a:59:94:96:9a:85:6b:5c:c6:72:91:ae:bc:55:ad: e3:cf:11:bc:db:08:6b:eb:0a:81:6c:73:19:b9:1b: 2f:e3:9f:68:71:31:e7:e9:d5:72:d8:f5:d4:b3:0d: 42:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3F:9C:EA:68:77:5D:C0:95:5D:D3:B2:C2:0E:E3:35:5C:AD:07:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aec849ee-0a0e-30ea-af69-be4af676bd65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.207.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:cc:a8:88:49:ed:5d:67:ff:14:47:83:17:a7:5b:3f:18:ba: 96:06:dc:89:a6:4b:9c:67:2a:54:54:f6:a9:63:85:0d:24:6a: 9c:14:89:01:39:8e:b5:b9:8d:4c:8f:dd:e4:b7:90:d4:75:52: bb:12:a0:be:1b:fa:88:8f:ff:e3:24:20:c6:7d:95:d5:2e:e7: 17:ca:34:3a:0c:14:03:6d:ef:ba:43:50:bd:34:0d:5b:73:aa: 05:ea:b9:45:b7:ec:a2:77:7e:9d:fc:9d:52:6e:3d:60:79:d2: 16:93:3c:fc:17:8b:21:44:9c:c5:f8:19:58:c9:fa:32:f3:eb: 48:b4:e7:a7:7e:3e:56:f1:7d:ec:48:14:6d:c5:5a:4c:57:bc: 53:7d:5b:da:56:93:d9:d4:34:80:22:61:b0:ec:64:f1:2e:bc: 13:46:fd:ef:6a:c2:93:d0:a7:a1:42:29:39:bd:23:53:31:fc: e7:ff:c9:2e:b8:12:82:01:79:6f:d3:fe:64:4a:d5:7c:0f:b6: 2e:41:88:58:93:e1:fd:f1:4b:53:14:02:59:6d:e9:89:34:82: 82:29:d3:2a:a4:b2:47:20:2e:e1:b8:85:36:45:73:5c:b2:87: 74:85:fe:a3:43:6a:aa:ea:d2:74:33:d5:44:90:3d:8e:b2:67: 22:9d:24:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhCX6HaC+OpEZvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NDE2MjA0OTUtZmQxNC00OTU3LWIzMGMtNjkyMmE3OTk3ZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBbl/h5bWq/1hQzPDtKnJIRX7+YatyyKddr6 DXZ+0T8O5Jw7pnmx5lyHmkGk/yO1hmwiPNnhZbF/Fko26DTvAl/hYv+zWebwkEz5 iX+WM5M7V2iBnWJ3qoSlHqRexovvDeblI1FAtmHlwRYyzhjpCk91Yo5p4v4AW2P9 qatna3cZKnQC5xYmsLOgEVeS/o0nsv5QQLqa3xMoWp2V3Jyu+nG/PJNxY8axn1r3 5CJFc6trCPS6eoAQ6JMx0KDp+EqVx9pEd9qkKYLxv60kzjVEH3QKWZSWmoVrXMZy ka68Va3jzxG82whr6wqBbHMZuRsv459ocTHn6dVy2PXUsw1CEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEc/nOpod13AlV3TssIO4zVcrQfbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWVjODQ5ZWUtMGEwZS0z MGVhLWFmNjktYmU0YWY2NzZiZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjc+yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvMqIhJ7V1n/xRHgxenWz8YupYG3ImmS5xnKlRU9qljhQ0kapwUiQE5 jrW5jUyP3eS3kNR1UrsSoL4b+oiP/+MkIMZ9ldUu5xfKNDoMFANt77pDUL00DVtz qgXquUW37KJ3fp38nVJuPWB50haTPPwXiyFEnMX4GVjJ+jLz60i056d+PlbxfexI FG3FWkxXvFN9W9pWk9nUNIAiYbDsZPEuvBNG/e9qwpPQp6FCKTm9I1Mx/Of/yS64 EoIBeW/T/mRK1XwPti5BiFiT4f3xS1MUAllt6Yk0goIp0yqkskcgLuG4hTZFc1yy h3SF/qNDaqrq0nQz1USQPY6yZyKdJME= -----END CERTIFICATE-----Generated at Sat Apr 5 18:28:47 2025 by rpki-client