$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b126a72f-7141-39be-b8b0-4f8a2768c645.roa File: b126a72f-7141-39be-b8b0-4f8a2768c645.roa (raw, json) Hash identifier: bZ0IRYBxogs/rt/Q2AZ97cv3nxJ0R+8cJp99iVyWCLU= Subject key identifier: 55:6E:38:68:A6:77:3D:1A:4E:28:3E:7A:3B:C8:29:CC:FE:BA:C7:2B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584964845F5F55842F71EFCFA400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b126a72f-7141-39be-b8b0-4f8a2768c645.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 6167 IP address blocks: 75.203.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:5f:5f:55:84:2f:71:ef:cf:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=f8351d58-a1ee-4037-a72f-676e4fe14723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:59:fb:c1:cb:52:38:d3:44:91:12:cc:d5:34: 29:46:3c:e0:da:51:41:2d:f2:82:a2:d7:ae:22:c3: 62:c8:58:68:da:44:b7:85:f4:45:4b:6a:09:49:11: 72:55:ad:ff:a3:b5:6a:6a:fb:05:8e:a1:3b:75:25: b0:2e:37:1d:c2:d9:7a:92:a5:9c:ec:f0:86:9a:0e: fc:a5:f0:30:36:e8:08:84:6f:5d:83:13:e7:2e:33: 2d:41:d3:0d:cb:89:11:f8:3e:19:7d:3c:ea:5f:0f: 6f:bb:dc:29:43:51:a8:55:42:d5:c2:2a:ef:7c:cd: 8e:1a:27:cf:f3:84:0a:d8:83:35:e6:8b:da:f7:46: cd:6c:90:02:0b:f0:3e:41:27:33:a0:9c:00:82:89: 7b:f9:64:75:5a:b9:d6:f4:33:85:66:03:e4:42:b4: 2d:19:55:db:f3:64:fb:88:95:f2:f8:0c:e4:ba:06: 0f:3b:90:74:45:73:f0:34:8d:5c:84:b5:85:81:86: c0:7a:fa:dd:c2:c9:54:02:03:d3:69:05:40:8d:31: dc:e4:17:ef:aa:a1:81:74:8d:33:83:c5:c2:17:e0: 2e:c9:12:12:78:ba:79:1b:3b:93:23:3c:a4:02:fb: b4:f8:3f:9c:7d:95:2e:0f:1a:54:7d:e0:d1:3d:0d: 8d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6E:38:68:A6:77:3D:1A:4E:28:3E:7A:3B:C8:29:CC:FE:BA:C7:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b126a72f-7141-39be-b8b0-4f8a2768c645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 75.203.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:14:ef:c1:e0:e2:46:4e:e5:86:4f:53:f1:9a:78:7a:f5:4d: 5f:fa:a5:7f:96:d5:0f:07:35:bc:44:1d:04:a9:23:f8:89:0d: 43:a8:53:c6:c2:be:a0:f0:54:cd:ea:b7:5e:61:06:76:05:7e: 5d:4c:9f:98:40:71:4a:5f:24:bd:89:4f:86:96:9b:90:c7:9f: c2:cc:3f:f8:94:4f:d7:75:7b:93:71:82:eb:cb:d0:ea:f9:e5: ce:65:d3:0e:0b:65:ec:4d:66:90:2c:c8:ca:f3:83:89:88:64: bb:cc:9b:f7:20:71:6f:d0:cc:9c:37:80:36:77:ab:3c:c3:64: 57:56:91:61:0f:20:d5:5c:a8:41:d6:37:9e:a0:3e:49:7c:05: da:62:df:21:5f:90:58:5a:a4:84:92:a4:8e:f6:d1:01:ce:86: 9c:9d:55:26:ac:c0:5e:ec:c3:34:03:88:9f:ca:66:ce:fa:22: c1:42:fd:5f:8b:14:27:b6:0b:f9:ae:de:96:86:9a:dd:78:38: 14:c8:13:87:1e:c3:04:da:d1:b2:59:42:8f:14:1e:40:bf:f3: 94:31:fc:b3:eb:a1:b4:01:dc:56:25:56:cf:30:1c:38:ac:8d: 71:42:ec:40:ab:e5:d6:32:ab:2a:f9:38:f5:25:82:c8:72:c1: b3:4f:6c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhF9fVYQvce/PpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZjgzNTFkNTgtYTFlZS00MDM3LWE3MmYtNjc2ZTRmZTE0NzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFn7wctSONNEkRLM1TQpRjzg2lFBLfKCoteu IsNiyFho2kS3hfRFS2oJSRFyVa3/o7VqavsFjqE7dSWwLjcdwtl6kqWc7PCGmg78 pfAwNugIhG9dgxPnLjMtQdMNy4kR+D4ZfTzqXw9vu9wpQ1GoVULVwirvfM2OGifP 84QK2IM15ova90bNbJACC/A+QSczoJwAgol7+WR1WrnW9DOFZgPkQrQtGVXb82T7 iJXy+AzkugYPO5B0RXPwNI1chLWFgYbAevrdwslUAgPTaQVAjTHc5BfvqqGBdI0z g8XCF+AuyRISeLp5GzuTIzykAvu0+D+cfZUuDxpUfeDRPQ2N/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVuOGimdz0aTig+ejvIKcz+uscrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjEyNmE3MmYtNzE0MS0z OWJlLWI4YjAtNGY4YTI3NjhjNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES8vAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQU78Hg4kZO5YZPU/GaeHr1TV/6pX+W1Q8HNbxEHQSpI/iJDUOoU8bC vqDwVM3qt15hBnYFfl1Mn5hAcUpfJL2JT4aWm5DHn8LMP/iUT9d1e5NxguvL0Or5 5c5l0w4LZexNZpAsyMrzg4mIZLvMm/cgcW/QzJw3gDZ3qzzDZFdWkWEPINVcqEHW N56gPkl8Bdpi3yFfkFhapISSpI720QHOhpydVSaswF7swzQDiJ/KZs76IsFC/V+L FCe2C/mu3paGmt14OBTIE4cewwTa0bJZQo8UHkC/85Qx/LProbQB3FYlVs8wHDis jXFC7ECr5dYyqyr5OPUlgshywbNPbJk= -----END CERTIFICATE-----Generated at Sun Apr 6 11:13:25 2025 by rpki-client