$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d15e2956-081e-305d-8e43-92418fd8c4cd.roa File: d15e2956-081e-305d-8e43-92418fd8c4cd.roa (raw, json) Hash identifier: AT+tcJWS/L1TopyxfU0N7QRwkwNZZzllezdSK+FniS0= Subject key identifier: 5B:8B:70:1A:6F:EB:3F:53:83:F0:48:D6:51:2A:FA:38:4B:2F:E5:AF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C2476B3821389EB38A819C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d15e2956-081e-305d-8e43-92418fd8c4cd.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 0 IP address blocks: 204.91.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:76:b3:82:13:89:eb:38:a8:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=133c6388-7066-4a70-9e40-8f3d02ed3041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7b:1f:97:17:da:bd:e1:75:71:93:53:cf:e0: 74:ea:2a:79:1a:fd:19:b8:38:ea:f7:9b:79:48:ed: 1a:51:9a:81:88:c1:3d:80:17:0d:69:04:83:4c:0f: 8e:1f:32:14:f0:4c:ac:43:fd:5c:f1:b8:6f:8e:04: 27:d9:c6:00:13:d3:6a:eb:49:e4:7d:be:7a:d4:ed: 3c:39:35:fe:46:dd:fa:fb:1a:20:56:9e:3f:04:c7: 0a:99:de:64:00:6e:0b:09:32:d8:c5:11:b2:b8:a4: 4a:68:c0:9d:1e:be:32:c6:d9:52:ae:33:d3:93:f0: 2f:26:97:56:27:a2:78:90:ce:3e:57:a8:a7:fe:51: 0a:cf:d2:74:64:d0:80:ab:ca:88:de:8e:e0:42:96: 88:0f:19:ca:3d:ab:86:bf:1a:7d:04:b2:4f:a7:9b: 51:92:47:7d:13:a5:7d:b3:cf:f3:6e:5d:09:e1:d9: 07:25:09:5e:d7:84:04:f5:75:fa:b4:db:45:ef:f0: 7d:41:62:ca:36:e2:c4:61:12:cf:b6:56:c1:29:31: b4:49:84:c8:82:85:c9:74:f5:fe:0b:89:29:44:8b: 78:ce:d7:9a:21:14:e0:50:3f:15:98:d2:09:9f:73: 74:53:5a:12:b0:c6:71:be:b5:ef:4d:82:f1:80:3b: ab:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8B:70:1A:6F:EB:3F:53:83:F0:48:D6:51:2A:FA:38:4B:2F:E5:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d15e2956-081e-305d-8e43-92418fd8c4cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 204.91.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a2:24:06:d1:c6:9b:44:99:e4:28:4f:c1:69:1e:f1:56:b3: c5:08:91:55:0e:4a:ff:80:35:5a:a8:25:d2:76:1e:ed:f4:3a: 4e:f4:28:2f:1e:e2:8b:e9:51:16:26:09:34:a4:27:d2:5b:c2: 6f:58:07:2d:7a:6d:8e:45:0a:23:0f:d7:b4:0b:70:d4:af:09: 04:65:2c:73:61:a4:f5:9f:65:86:2b:44:c6:13:d8:6b:5d:ce: 40:f0:8d:27:38:37:c5:1c:be:27:03:70:eb:b2:a6:38:5a:a6: c7:e8:cd:bb:a5:bb:4e:91:3a:86:8e:84:4e:07:10:27:1a:fb: 6a:97:59:5f:41:85:83:c2:ca:10:3d:d3:fb:02:ff:d5:66:6d: 63:8a:9d:07:5c:b5:70:b9:df:3b:1a:87:32:cf:fa:f9:f8:f2: 78:d0:ba:77:de:9f:2f:ce:7f:05:2f:d5:49:b2:3e:51:b0:45: 93:b9:93:0f:fb:b7:01:0c:17:8a:08:45:4b:64:59:1f:0f:8f: 70:cf:38:67:e0:85:9c:a3:48:27:d0:11:c4:a4:07:17:d5:cc: 34:ae:a1:68:ce:3d:d4:e9:58:a3:91:14:8f:40:77:97:ea:9f: 10:08:77:80:67:3f:72:7d:e9:40:a8:39:31:44:88:22:72:00: 71:e1:5b:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJHazghOJ6zioGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MTMzYzYzODgtNzA2Ni00YTcwLTllNDAtOGYzZDAyZWQzMDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXsflxfaveF1cZNTz+B06ip5Gv0ZuDjq95t5 SO0aUZqBiME9gBcNaQSDTA+OHzIU8EysQ/1c8bhvjgQn2cYAE9Nq60nkfb561O08 OTX+Rt36+xogVp4/BMcKmd5kAG4LCTLYxRGyuKRKaMCdHr4yxtlSrjPTk/AvJpdW J6J4kM4+V6in/lEKz9J0ZNCAq8qI3o7gQpaIDxnKPauGvxp9BLJPp5tRkkd9E6V9 s8/zbl0J4dkHJQle14QE9XX6tNtF7/B9QWLKNuLEYRLPtlbBKTG0SYTIgoXJdPX+ C4kpRIt4zteaIRTgUD8VmNIJn3N0U1oSsMZxvrXvTYLxgDurOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuLcBpv6z9Tg/BI1lEq+jhLL+WvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDE1ZTI5NTYtMDgxZS0z MDVkLThlNDMtOTI0MThmZDhjNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzFtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECiJAbRxptEmeQoT8FpHvFWs8UIkVUOSv+ANVqoJdJ2Hu30Ok70KC8e 4ovpURYmCTSkJ9Jbwm9YBy16bY5FCiMP17QLcNSvCQRlLHNhpPWfZYYrRMYT2Gtd zkDwjSc4N8UcvicDcOuypjhapsfozbulu06ROoaOhE4HECca+2qXWV9BhYPCyhA9 0/sC/9VmbWOKnQdctXC53zsahzLP+vn48njQunfeny/OfwUv1UmyPlGwRZO5kw/7 twEMF4oIRUtkWR8Pj3DPOGfghZyjSCfQEcSkBxfVzDSuoWjOPdTpWKORFI9Ad5fq nxAId4BnP3J96UCoOTFEiCJyAHHhW28= -----END CERTIFICATE-----Generated at Sat Apr 5 23:26:03 2025 by rpki-client