$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa File: d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa (raw, json) Hash identifier: s3btaD6vHDSIkw+Kv7p1EUygsKJyM6vIG3phL1pbg8s= Subject key identifier: 9E:41:A0:71:A7:94:F6:48:94:93:D4:CE:AA:F3:2C:1C:99:D9:1E:30 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D2694B92CA001E76C920 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 173.67.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d2:69:4b:92:ca:00:1e:76:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=90b92087-f29a-4ed2-a653-319b30810db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:d4:19:0d:55:f8:28:4b:e1:1f:4c:b4:4e: 51:6b:a6:a1:11:a8:85:d1:a3:ad:2d:67:ac:60:be: 3f:59:cb:d4:1d:ad:df:76:9f:33:4b:fc:78:6a:56: 60:69:39:9c:f5:46:57:1a:51:04:b5:4a:7b:9e:90: e4:1d:f3:bf:e9:b8:7f:35:4d:7d:e3:89:9f:25:a6: 93:93:b8:12:13:39:20:bf:30:1b:c3:3e:77:1f:88: 65:91:c4:99:b0:24:cf:be:8c:96:68:c7:aa:55:f6: 67:e5:b4:da:6e:5c:22:07:25:1c:95:03:cb:76:56: 50:09:c2:d8:9a:2d:ea:39:28:6e:3b:5f:32:33:2e: 6d:b5:71:57:61:f1:f3:49:9b:43:2c:9c:f2:51:2e: a1:74:5c:67:b5:66:19:38:97:fe:c6:74:bf:a9:29: 8a:2f:6b:8e:c0:bc:60:51:bb:fe:4d:fe:bd:ae:5a: 60:88:46:11:c6:3d:33:97:f8:8e:28:ed:6c:b5:54: 4f:57:f7:3a:f8:9e:2e:17:4d:01:2a:72:a2:75:04: e3:3b:df:32:40:02:15:3b:a0:af:c0:b3:f6:72:85: 7a:56:e6:f4:1a:fe:94:38:e5:e1:c5:15:7e:50:de: 24:ec:42:a4:41:c3:37:81:c0:0e:8b:5b:22:cc:73: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:41:A0:71:A7:94:F6:48:94:93:D4:CE:AA:F3:2C:1C:99:D9:1E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.67.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a6:25:09:e7:af:04:81:87:f8:93:ce:25:a2:14:0d:35:03: 83:d9:54:d0:52:6d:53:0f:94:fc:a3:20:1b:2b:51:fb:3a:09: d4:20:30:f6:13:a6:d3:32:2a:b3:a4:a6:b8:de:37:e1:5a:1f: 6d:68:c6:b7:8b:a1:33:69:f0:db:54:65:f9:e9:e8:ca:19:12: ab:72:4d:14:69:fc:80:59:91:f8:27:7b:4c:1d:a4:62:0f:f8: ea:c7:7e:a0:60:57:a5:83:af:d5:6d:46:aa:4b:2c:8e:19:ed: 3c:42:66:e8:cf:e8:bb:06:fd:85:ff:29:db:94:a9:c9:2c:c5: b6:ac:e7:88:de:fa:d5:1b:1c:a3:3a:3b:c0:bc:af:d4:2c:94: 29:df:b8:f9:5f:47:18:91:30:58:26:8d:3c:fa:24:85:6a:7a: 94:15:93:79:91:85:ce:1e:08:86:2e:38:50:32:2b:53:7b:d8: f9:f5:dc:0c:f2:46:70:e6:ff:01:ef:80:3f:cf:e9:d0:5b:fc: 57:81:c6:95:e1:1e:0d:57:91:19:6e:6a:64:31:60:52:a8:68: 56:96:59:71:e9:a8:01:a1:5e:2e:2e:7e:9c:d1:80:72:c4:80: 29:40:72:6f:33:a0:a1:61:8c:55:6a:54:98:9b:fe:ee:12:53: f6:94:3c:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtJpS5LKAB52ySAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OTBiOTIwODctZjI5YS00ZWQyLWE2NTMtMzE5YjMwODEwZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG/UGQ1V+ChL4R9MtE5Ra6ahEaiF0aOtLWes YL4/WcvUHa3fdp8zS/x4alZgaTmc9UZXGlEEtUp7npDkHfO/6bh/NU1944mfJaaT k7gSEzkgvzAbwz53H4hlkcSZsCTPvoyWaMeqVfZn5bTablwiByUclQPLdlZQCcLY mi3qOShuO18yMy5ttXFXYfHzSZtDLJzyUS6hdFxntWYZOJf+xnS/qSmKL2uOwLxg Ubv+Tf69rlpgiEYRxj0zl/iOKO1stVRPV/c6+J4uF00BKnKidQTjO98yQAIVO6Cv wLP2coV6Vub0Gv6UOOXhxRV+UN4k7EKkQcM3gcAOi1sizHMYAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5BoHGnlPZIlJPUzqrzLByZ2R4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDNlZmZkOWYtMGE4ZC0z ZmUzLTljZWYtNzYwY2VhZWU2N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErUPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGmJQnnrwSBh/iTziWiFA01A4PZVNBSbVMPlPyjIBsrUfs6CdQgMPYT ptMyKrOkprjeN+FaH21oxreLoTNp8NtUZfnp6MoZEqtyTRRp/IBZkfgne0wdpGIP +OrHfqBgV6WDr9VtRqpLLI4Z7TxCZujP6LsG/YX/KduUqcksxbas54je+tUbHKM6 O8C8r9QslCnfuPlfRxiRMFgmjTz6JIVqepQVk3mRhc4eCIYuOFAyK1N72Pn13Azy RnDm/wHvgD/P6dBb/FeBxpXhHg1XkRluamQxYFKoaFaWWXHpqAGhXi4ufpzRgHLE gClAcm8zoKFhjFVqVJib/u4SU/aUPLM= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:20 2025 by rpki-client