$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e3cdb2-ba0a-3515-937b-85defca8456c.roa File: c4e3cdb2-ba0a-3515-937b-85defca8456c.roa (raw, json) Hash identifier: WK5GiKuT+uP4zQYKB1KMV+2ijrNtLL9YNUBWa/Zo2A0= Subject key identifier: FD:B2:C2:04:4B:32:4A:42:F6:9A:8D:C0:01:70:D6:D5:5A:76:32:39 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D342B57FAD76465F6F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e3cdb2-ba0a-3515-937b-85defca8456c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 141.155.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d3:42:b5:7f:ad:76:46:5f:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=0819a691-7f5e-4c27-ac37-5ee04cebcd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3d:01:b3:80:7c:e4:f9:b2:1f:d2:f2:f4:07: dd:44:84:30:25:4b:29:77:eb:28:f0:9c:a3:03:94: 49:5f:c5:ee:36:4f:8c:d1:05:46:9b:94:2a:c4:c8: 62:81:f1:b0:65:94:cf:6b:05:a9:a3:6c:d7:bf:c5: 55:ca:c7:07:a3:d6:18:5b:16:dc:9b:c3:07:f1:94: da:78:05:dc:65:f9:c1:50:5a:91:bd:9a:46:00:e6: b2:2b:c7:74:e4:b7:ae:de:09:b1:4c:e2:9f:79:07: e0:e8:a8:db:6f:ca:6c:5b:88:7d:1c:1a:36:d6:45: f6:10:28:93:1d:8c:da:47:43:16:2b:de:4c:9f:17: 10:67:80:70:7e:36:1a:4d:b2:f0:ce:28:18:75:4b: f8:3b:51:70:12:ea:49:36:45:5d:bf:d2:3d:d9:18: 84:6e:ae:81:9d:ca:d8:08:7d:d3:b9:13:a6:ee:80: ef:46:12:7e:c2:52:03:56:4a:eb:85:71:dc:59:bb: 8d:bc:6f:1d:cc:46:45:db:08:3a:34:74:5a:1a:af: 73:e9:06:ae:4d:e3:09:43:c9:43:51:cb:1d:79:1d: 8a:14:25:cb:01:2a:2a:31:a0:f9:11:7f:b4:c0:8e: c1:7e:17:e0:63:2e:6e:9c:c9:c7:f9:b4:8e:da:b9: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B2:C2:04:4B:32:4A:42:F6:9A:8D:C0:01:70:D6:D5:5A:76:32:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e3cdb2-ba0a-3515-937b-85defca8456c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.155.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:5c:f9:8c:f7:b4:f2:27:fc:76:54:2c:93:59:b8:87:ba:25: da:3a:80:13:d7:b5:79:16:55:63:45:9a:45:f0:2b:7d:6f:1a: d2:8d:9b:85:e2:89:ff:19:e3:cb:d3:42:6c:0d:b0:6d:8e:0f: 5c:dc:f4:39:10:8f:9a:b4:06:4b:e6:60:ee:da:9a:8c:55:b7: 16:b5:35:9d:80:d7:7c:a7:2c:3c:23:1b:6d:1a:f6:11:2a:30: 86:21:d6:67:ef:08:4f:9f:6b:ee:20:89:c2:f8:ef:f6:da:02: 07:33:f6:d0:57:ab:4b:90:e9:d5:e2:ac:27:f1:24:94:04:32: 1c:8c:36:84:ba:61:4b:61:45:2d:8f:7c:d7:d2:dd:3b:c9:8d: c7:85:19:e0:f3:d2:a7:28:61:8b:e9:ae:c2:91:75:5b:c1:46: a8:45:82:af:37:35:bf:40:c5:46:4e:87:f5:b8:f4:13:a8:ec: cf:0e:7e:65:d0:f9:27:11:fb:6e:3e:34:ea:34:ac:87:82:5d: a7:3b:96:40:45:fd:0b:2f:56:32:2d:44:33:1a:c2:c8:26:11: 25:be:af:a2:ea:54:40:c4:7f:f5:d2:25:e0:8b:a6:42:d1:17: 89:95:5a:9e:40:a8:68:e8:b0:f9:30:ad:04:81:3b:b1:41:38: a4:79:d3:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtNCtX+tdkZfbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MDgxOWE2OTEtN2Y1ZS00YzI3LWFjMzctNWVlMDRjZWJjZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj0Bs4B85PmyH9Ly9AfdRIQwJUspd+so8Jyj A5RJX8XuNk+M0QVGm5QqxMhigfGwZZTPawWpo2zXv8VVyscHo9YYWxbcm8MH8ZTa eAXcZfnBUFqRvZpGAOayK8d05Leu3gmxTOKfeQfg6Kjbb8psW4h9HBo21kX2ECiT HYzaR0MWK95MnxcQZ4BwfjYaTbLwzigYdUv4O1FwEupJNkVdv9I92RiEbq6BncrY CH3TuROm7oDvRhJ+wlIDVkrrhXHcWbuNvG8dzEZF2wg6NHRaGq9z6QauTeMJQ8lD UcsdeR2KFCXLASoqMaD5EX+0wI7BfhfgYy5unMnH+bSO2rmHpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2ywgRLMkpC9pqNwAFw1tVadjI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRlM2NkYjItYmEwYS0z NTE1LTkzN2ItODVkZWZjYTg0NTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjZvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpc+Yz3tPIn/HZULJNZuIe6Jdo6gBPXtXkWVWNFmkXwK31vGtKNm4Xi if8Z48vTQmwNsG2OD1zc9DkQj5q0BkvmYO7amoxVtxa1NZ2A13ynLDwjG20a9hEq MIYh1mfvCE+fa+4gicL47/baAgcz9tBXq0uQ6dXirCfxJJQEMhyMNoS6YUthRS2P fNfS3TvJjceFGeDz0qcoYYvprsKRdVvBRqhFgq83Nb9AxUZOh/W49BOo7M8OfmXQ +ScR+24+NOo0rIeCXac7lkBF/QsvVjItRDMawsgmESW+r6LqVEDEf/XSJeCLpkLR F4mVWp5AqGjosPkwrQSBO7FBOKR502M= -----END CERTIFICATE-----Generated at Sat Apr 5 18:37:19 2025 by rpki-client