$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da6ce676-be40-3db9-aa5a-1d4b82892db2.roa File: da6ce676-be40-3db9-aa5a-1d4b82892db2.roa (raw, json) Hash identifier: XLFK/QjvqzQRO3URq2WNGIYOetW0z5O6qhyTNRT1e/A= Subject key identifier: A2:E8:22:B6:16:8E:3F:8E:96:B1:FA:5E:52:39:6B:B6:1F:05:9C:8F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858492184353233886EC5E87B9E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da6ce676-be40-3db9-aa5a-1d4b82892db2.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 141.207.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:35:32:33:88:6e:c5:e8:7b:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=af39bfab-2381-474d-b83f-a488b382acee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:bb:30:4f:0e:a7:ea:e5:98:6c:91:93:72: 1c:00:df:98:08:3e:23:e0:ff:43:f6:73:31:de:51: ff:c7:ea:af:c0:c9:8a:f1:e5:a1:32:4b:e2:b9:61: 6b:5b:53:bf:b6:6b:54:0a:a9:89:84:1b:be:89:4e: 80:7e:89:4b:e5:ae:cf:f8:52:ac:e3:5b:0b:ae:57: c6:19:5d:81:c5:95:34:1a:f1:8f:aa:e0:b0:bc:f2: 44:ca:83:19:d4:46:22:1f:db:b1:5f:dd:86:40:d2: 97:12:12:87:14:4f:94:37:d0:53:01:a6:74:1a:8c: be:c7:e6:be:5c:31:6f:44:d0:99:40:d6:57:95:91: 7c:8b:8f:94:e1:07:54:17:39:fa:fd:aa:09:f6:1a: a9:aa:43:d2:f6:de:3e:18:06:fd:3c:d6:c6:01:13: df:41:e1:9b:d6:3c:90:b1:25:1d:ad:aa:c3:d0:46: a6:d1:78:df:67:3f:31:ff:da:59:e7:7a:e6:9a:c4: 23:03:db:da:70:0c:a6:51:23:c1:46:22:55:1a:ba: b0:a2:68:30:9e:98:49:9e:d4:4f:a9:0d:c9:8f:db: c4:d1:eb:d3:bc:9a:79:5c:b2:c7:a9:71:01:bd:72: 80:f1:03:f0:e7:9f:7f:50:8e:d5:a1:66:72:47:96: 54:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E8:22:B6:16:8E:3F:8E:96:B1:FA:5E:52:39:6B:B6:1F:05:9C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da6ce676-be40-3db9-aa5a-1d4b82892db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.207.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5d:59:97:d6:1c:2d:a7:bb:28:a5:3d:52:31:21:8b:e6:f9: 16:b9:40:88:41:12:3f:16:14:e0:8c:71:86:73:47:7d:b8:a6: bd:f8:de:6d:43:5e:34:6d:89:4c:f3:27:19:95:d2:7a:ae:b7: 3e:d9:e4:29:ac:12:79:ef:26:8c:44:0d:f6:ab:1d:77:d3:09: 7a:a4:22:db:9b:4f:a3:2e:96:60:60:e9:da:19:38:fe:6a:aa: 65:0a:05:3b:c8:43:ea:80:1d:8d:db:48:3a:b9:09:5d:f2:d9: cd:4f:da:88:51:6a:ef:13:ca:d3:74:9f:24:95:c5:ff:52:15: 77:15:9d:20:3e:b6:9c:e2:93:9d:a2:22:ef:f3:67:12:2c:09: fa:bf:53:6e:1c:7b:c8:77:b2:ec:cb:cb:2a:79:d1:97:06:66: 57:df:28:06:43:1d:8e:db:d1:36:3a:19:ee:49:32:c0:c8:3a: 65:dd:5c:d3:6a:77:47:38:25:3e:5a:28:70:c4:8b:89:45:eb: df:a9:1b:60:09:a3:b1:17:a5:92:6a:ab:bf:f6:31:5f:a6:e5: 24:bd:b1:ad:8a:42:e3:b4:2c:5c:e1:a7:ac:b3:59:c0:dd:b0: 98:d7:5d:84:c8:58:e6:3a:11:64:bd:16:d0:af:4c:90:5e:1a: 97:b9:cb:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhDUyM4huxeh7ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YWYzOWJmYWItMjM4MS00NzRkLWI4M2YtYTQ4OGIzODJhY2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV27ME8Op+rlmGyRk3IcAN+YCD4j4P9D9nMx 3lH/x+qvwMmK8eWhMkviuWFrW1O/tmtUCqmJhBu+iU6AfolL5a7P+FKs41sLrlfG GV2BxZU0GvGPquCwvPJEyoMZ1EYiH9uxX92GQNKXEhKHFE+UN9BTAaZ0Goy+x+a+ XDFvRNCZQNZXlZF8i4+U4QdUFzn6/aoJ9hqpqkPS9t4+GAb9PNbGARPfQeGb1jyQ sSUdrarD0Eam0XjfZz8x/9pZ53rmmsQjA9vacAymUSPBRiJVGrqwomgwnphJntRP qQ3Jj9vE0evTvJp5XLLHqXEBvXKA8QPw559/UI7VoWZyR5ZUPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLoIrYWjj+OlrH6XlI5a7YfBZyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGE2Y2U2NzYtYmU0MC0z ZGI5LWFhNWEtMWQ0YjgyODkyZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjc+KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZdWZfWHC2nuyilPVIxIYvm+Ra5QIhBEj8WFOCMcYZzR324pr343m1D XjRtiUzzJxmV0nqutz7Z5CmsEnnvJoxEDfarHXfTCXqkItubT6MulmBg6doZOP5q qmUKBTvIQ+qAHY3bSDq5CV3y2c1P2ohRau8TytN0nySVxf9SFXcVnSA+tpzik52i Iu/zZxIsCfq/U24ce8h3suzLyyp50ZcGZlffKAZDHY7b0TY6Ge5JMsDIOmXdXNNq d0c4JT5aKHDEi4lF69+pG2AJo7EXpZJqq7/2MV+m5SS9sa2KQuO0LFzhp6yzWcDd sJjXXYTIWOY6EWS9FtCvTJBeGpe5y6o= -----END CERTIFICATE-----Generated at Sat Apr 5 23:23:25 2025 by rpki-client