$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3dbb93b-f5d3-3b48-9110-b83af1a6a134.roa File: d3dbb93b-f5d3-3b48-9110-b83af1a6a134.roa (raw, json) Hash identifier: cpU9Em6qPd+S/QgvCt5rO5+eICV3I3JxTsUqp4ZmBIY= Subject key identifier: B5:EE:F4:68:11:98:F5:94:71:42:FE:E5:EA:45:F9:88:3A:3D:8D:05 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584921842637684B74E5066C5980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3dbb93b-f5d3-3b48-9110-b83af1a6a134.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 141.207.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:26:37:68:4b:74:e5:06:6c:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=89e039f9-007f-4706-95e8-6d1122f0d552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0f:99:98:c8:4b:4c:a1:b9:3a:b4:2a:89:72: da:4f:8d:25:35:2d:63:79:91:8a:67:8b:67:b8:75: 3f:92:a0:58:5e:0d:0c:32:51:76:b0:7a:ad:c4:80: d4:f9:fe:f7:ab:bf:38:63:d8:ad:c6:ca:94:fb:ce: b1:83:c3:c3:e2:c4:10:f5:02:9e:2e:13:eb:47:16: 7e:e2:cf:12:3b:69:69:ee:31:c8:e6:59:2c:ea:6f: 92:7a:fe:53:f2:0e:fd:cc:63:11:49:e3:6a:a7:22: f3:88:bf:37:1c:47:83:8d:bd:ad:4a:d1:69:95:87: 47:50:a6:78:28:2d:a1:e6:48:82:8c:a2:3b:37:19: 19:aa:7f:99:e9:0d:7a:b4:1c:a2:43:fc:48:c4:23: 36:9a:91:d8:a5:80:5c:27:a0:bd:c0:8f:18:94:99: b1:4c:ec:ce:b7:f0:d2:8b:71:86:f2:6c:2e:f7:31: b1:eb:f3:73:e8:43:0b:ac:f0:71:3a:e1:bc:49:ce: 94:4e:b6:72:e6:2b:6c:27:23:fd:2f:76:17:20:60: 2d:dc:54:b9:24:1e:98:94:f8:08:8d:74:2a:d8:24: bb:eb:8b:b8:36:e4:c4:80:c4:62:75:78:b9:77:12: 1d:aa:2b:0f:99:62:55:5b:08:7b:18:d4:2b:fc:74: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EE:F4:68:11:98:F5:94:71:42:FE:E5:EA:45:F9:88:3A:3D:8D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3dbb93b-f5d3-3b48-9110-b83af1a6a134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.207.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:17:d7:34:ac:36:11:2c:1e:75:e8:46:87:36:bc:06:af:3b: bc:a2:69:b9:28:a8:04:96:59:12:44:7d:fd:3e:39:5c:29:88: d3:18:41:4f:0e:21:d9:55:b6:e1:b5:3b:68:f5:53:78:78:f5: c7:3a:1b:58:ee:28:ba:2b:88:2f:73:b6:9b:ab:f9:c0:6c:3b: 7c:f8:5c:de:88:4a:a0:f0:45:29:87:82:de:b9:1e:93:89:f2: bf:06:94:dd:29:81:db:1c:97:ea:eb:84:b1:dd:de:8c:ae:76: 45:d9:b3:0d:7f:ca:a3:b9:a8:fb:a2:b5:e7:07:b3:dd:89:ae: fe:a9:7a:8f:fc:1f:37:a3:95:6b:3f:b7:b9:29:ef:4f:7f:bc: ec:b0:06:bf:b6:fd:ab:b2:ed:67:b9:d4:b8:47:93:53:f6:3d: 76:45:4c:b1:1d:e1:86:c0:56:3c:54:9f:27:c6:f4:39:eb:16: 19:8e:05:f7:82:b8:42:b4:62:f9:c7:d5:09:c3:b3:39:92:3b: 85:91:a3:1f:42:ff:17:6c:b1:8f:48:b3:cb:59:38:c9:15:46: b4:e3:c2:c2:8c:52:27:db:a0:35:10:b4:bd:52:a9:cd:5f:f5: 83:e0:d2:80:b2:70:d4:f5:bd:9c:6d:71:b0:4f:94:1e:92:41: 6d:53:0f:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhCY3aEt05QZsWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ODllMDM5ZjktMDA3Zi00NzA2LTk1ZTgtNmQxMTIyZjBkNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw+ZmMhLTKG5OrQqiXLaT40lNS1jeZGKZ4tn uHU/kqBYXg0MMlF2sHqtxIDU+f73q784Y9itxsqU+86xg8PD4sQQ9QKeLhPrRxZ+ 4s8SO2lp7jHI5lks6m+Sev5T8g79zGMRSeNqpyLziL83HEeDjb2tStFplYdHUKZ4 KC2h5kiCjKI7NxkZqn+Z6Q16tByiQ/xIxCM2mpHYpYBcJ6C9wI8YlJmxTOzOt/DS i3GG8mwu9zGx6/Nz6EMLrPBxOuG8Sc6UTrZy5itsJyP9L3YXIGAt3FS5JB6YlPgI jXQq2CS764u4NuTEgMRidXi5dxIdqisPmWJVWwh7GNQr/HSkUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXu9GgRmPWUcUL+5epF+Yg6PY0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDNkYmI5M2ItZjVkMy0z YjQ4LTkxMTAtYjgzYWYxYTZhMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjc/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsX1zSsNhEsHnXoRoc2vAavO7yiabkoqASWWRJEff0+OVwpiNMYQU8O IdlVtuG1O2j1U3h49cc6G1juKLoriC9ztpur+cBsO3z4XN6ISqDwRSmHgt65HpOJ 8r8GlN0pgdscl+rrhLHd3oyudkXZsw1/yqO5qPuitecHs92Jrv6peo/8HzejlWs/ t7kp709/vOywBr+2/auy7We51LhHk1P2PXZFTLEd4YbAVjxUnyfG9DnrFhmOBfeC uEK0YvnH1QnDszmSO4WRox9C/xdssY9Is8tZOMkVRrTjwsKMUifboDUQtL1Sqc1f 9YPg0oCycNT1vZxtcbBPlB6SQW1TD2k= -----END CERTIFICATE-----Generated at Sun Apr 6 04:47:22 2025 by rpki-client