$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf26fa2f-f310-3489-acc9-77d2e4850e94.roa File: cf26fa2f-f310-3489-acc9-77d2e4850e94.roa (raw, json) Hash identifier: 1hbSnS/5ciIYQTy18FW450hCVArNl45o1zQKcPegiOY= Subject key identifier: 74:E7:20:30:04:9D:6A:A1:70:B9:90:D2:C9:E4:F0:CC:97:C9:AA:3F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244E9AD214D9D8E3305200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf26fa2f-f310-3489-acc9-77d2e4850e94.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 141.153.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4e:9a:d2:14:d9:d8:e3:30:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=eb0f6ee6-a5da-49d5-934b-ef048752a023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:25:92:2f:42:19:a5:ba:dd:b9:9b:61:84:c5: 5f:0a:93:52:74:b8:d4:73:8a:31:75:ec:9e:40:ad: e7:b6:6a:97:07:19:7d:71:d2:95:f0:ae:b5:b3:bd: bb:75:6a:99:2f:af:0e:51:a7:35:6d:e3:cb:6e:d8: 8c:11:11:32:ff:3e:49:a0:32:7d:11:1c:55:21:7e: 73:b1:32:4e:1a:d7:03:0b:8f:5b:0c:2e:e6:ba:1a: e5:9e:ff:46:e8:9b:61:a0:b6:8c:39:95:2f:42:24: 07:e0:bf:0d:78:75:24:13:75:5c:df:a7:86:53:9c: ec:38:28:8d:7b:64:c4:76:14:e0:24:55:92:ef:01: 5d:c9:44:11:95:87:c6:4b:72:be:4b:70:72:b6:33: 9f:b8:ea:ed:0b:7a:b7:6d:30:25:63:06:6d:77:54: 6e:b1:26:d0:51:74:ea:6e:ef:e7:9a:8d:e4:d9:d2: f9:e7:8a:04:45:d5:04:26:9c:c9:61:63:54:51:75: ae:68:0c:50:71:04:7a:31:d0:23:f4:92:37:d4:17: d9:98:9c:c3:45:e2:22:05:1e:86:c9:e9:13:9f:1f: 3f:40:98:aa:07:9f:82:6e:7c:14:c8:fd:ae:2a:12: ab:be:1e:41:aa:41:c9:f8:1b:d5:31:0e:97:02:99: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E7:20:30:04:9D:6A:A1:70:B9:90:D2:C9:E4:F0:CC:97:C9:AA:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf26fa2f-f310-3489-acc9-77d2e4850e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.153.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:1c:7f:12:0a:18:23:6f:b9:19:a8:ec:77:9c:2d:b0:38:72: 87:8c:cd:43:93:80:26:24:97:ba:15:f0:38:7b:eb:2a:e3:47: 0b:3a:8d:10:6a:f4:ca:11:60:e7:62:44:5b:21:e5:98:42:5c: 24:2a:ce:84:d4:b7:4b:fe:df:c0:11:08:52:ea:bd:e6:94:89: 30:dc:d7:4c:44:88:1b:a2:2e:c7:e1:fb:18:99:75:c5:2d:8c: 16:15:fc:71:36:ef:16:a0:1f:9a:25:34:9f:6b:7c:ef:18:19: 01:dc:b8:a7:c4:03:9a:02:95:a2:b1:d1:f1:5c:e6:78:03:94: 79:70:b0:13:fe:cf:ba:28:00:d2:88:57:e1:6b:be:4e:32:bf: c9:63:68:ce:04:33:27:f1:30:49:65:62:51:16:99:d9:2e:28: 0e:42:a8:ef:07:d5:c7:4b:fb:cb:d9:e7:7d:03:97:8b:e4:33: 89:b4:d6:ab:1c:79:cd:2e:dc:ed:34:68:47:5f:00:d6:16:13: 19:1d:d2:d4:cc:aa:d0:e9:16:9e:68:db:e1:78:b1:95:3e:38: 4a:66:f7:3c:92:46:7b:71:15:0a:3e:98:bb:9b:0f:d4:cd:77: b5:3d:71:c0:2d:74:56:30:59:6a:4b:09:fb:59:d0:5f:40:40: ba:54:59:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJE6a0hTZ2OMwUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZWIwZjZlZTYtYTVkYS00OWQ1LTkzNGItZWYwNDg3NTJhMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCWSL0IZpbrduZthhMVfCpNSdLjUc4oxdeye QK3ntmqXBxl9cdKV8K61s727dWqZL68OUac1bePLbtiMEREy/z5JoDJ9ERxVIX5z sTJOGtcDC49bDC7muhrlnv9G6JthoLaMOZUvQiQH4L8NeHUkE3Vc36eGU5zsOCiN e2TEdhTgJFWS7wFdyUQRlYfGS3K+S3BytjOfuOrtC3q3bTAlYwZtd1RusSbQUXTq bu/nmo3k2dL554oERdUEJpzJYWNUUXWuaAxQcQR6MdAj9JI31BfZmJzDReIiBR6G yekTnx8/QJiqB5+CbnwUyP2uKhKrvh5BqkHJ+BvVMQ6XApkqSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTnIDAEnWqhcLmQ0snk8MyXyao/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2YyNmZhMmYtZjMxMC0z NDg5LWFjYzktNzdkMmU0ODUwZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZn9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAcfxIKGCNvuRmo7HecLbA4coeMzUOTgCYkl7oV8Dh76yrjRws6jRBq 9MoRYOdiRFsh5ZhCXCQqzoTUt0v+38ARCFLqveaUiTDc10xEiBuiLsfh+xiZdcUt jBYV/HE27xagH5olNJ9rfO8YGQHcuKfEA5oClaKx0fFc5ngDlHlwsBP+z7ooANKI V+Frvk4yv8ljaM4EMyfxMEllYlEWmdkuKA5CqO8H1cdL+8vZ530Dl4vkM4m01qsc ec0u3O00aEdfANYWExkd0tTMqtDpFp5o2+F4sZU+OEpm9zySRntxFQo+mLubD9TN d7U9ccAtdFYwWWpLCftZ0F9AQLpUWSY= -----END CERTIFICATE-----Generated at Sun Apr 6 01:09:57 2025 by rpki-client