$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d5873-043c-3b99-9095-ad60a8b913af.roa File: db5d5873-043c-3b99-9095-ad60a8b913af.roa (raw, json) Hash identifier: KcGmUifdRB+KAJVbUOxsIfYzUvyfOGpgWD3xxubNe4Y= Subject key identifier: AC:2C:C1:12:FA:29:04:96:8A:51:48:F1:A8:49:A7:09:AB:48:4B:9C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584921843445D67D0D4C9098A100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d5873-043c-3b99-9095-ad60a8b913af.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 6167 IP address blocks: 97.191.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:34:45:d6:7d:0d:4c:90:98:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=53bb905f-b8f2-485e-bbbe-bd28975aeea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:ca:1e:04:7a:1b:ea:d9:82:8e:0c:95:7b: a8:a7:2d:3a:b2:9d:db:86:fe:4f:91:32:17:dd:03: c0:45:4e:25:1f:87:ff:de:16:a1:38:5b:3d:c8:bd: 50:29:92:8a:fc:3b:ef:14:ff:f8:79:28:f1:1b:8c: 0a:e9:1b:6f:e6:52:54:90:2d:c7:35:d2:72:85:46: 3c:b2:bb:69:37:e5:01:34:e6:3b:cc:83:cd:51:b1: 2e:41:09:87:67:19:28:fc:71:7b:19:db:ab:29:84: 0a:49:9b:18:0a:a2:a7:e3:90:81:29:68:93:66:a5: 2a:80:fc:73:46:7b:2a:da:8b:e0:c7:7b:26:4c:02: e4:d5:a2:bd:23:33:a8:7f:68:fe:23:12:8b:c5:84: 8e:d8:2e:b1:b1:24:14:db:7d:7b:a6:d6:50:36:4f: 12:9f:06:5b:4a:1a:04:73:c6:c9:55:44:67:bc:76: e0:44:4f:4d:8b:cd:35:bf:57:39:28:a6:0a:f8:76: 96:a1:04:a9:23:fc:80:8d:26:45:e1:d8:7a:13:c0: a1:db:76:cb:55:51:ab:2f:4b:ca:d9:bc:1c:1b:c4: 03:26:ca:cd:0e:7b:ad:c9:ed:ba:24:e6:cb:ef:00: 02:41:c6:25:3e:a8:e7:3d:48:40:a2:aa:6f:4e:e2: de:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2C:C1:12:FA:29:04:96:8A:51:48:F1:A8:49:A7:09:AB:48:4B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d5873-043c-3b99-9095-ad60a8b913af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.191.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:cb:86:0c:9e:77:91:0d:7f:1d:1f:f3:fd:f5:52:c3:24:81: d0:82:11:d5:aa:a0:b6:e6:6b:aa:92:f2:78:d2:86:e5:25:09: 6d:fe:7f:aa:5d:f5:46:0c:71:bc:0f:55:69:1a:45:91:96:2c: 29:c6:49:f4:9c:d4:32:a2:8c:97:10:98:7c:1e:77:45:1c:b8: 75:4a:b1:9d:a3:24:0e:bf:23:77:36:a8:b4:3f:34:d6:d2:f8: a4:5e:e7:11:3f:a3:0f:8c:09:76:27:d3:be:9e:28:62:c9:1b: fa:8c:7b:41:cf:7e:71:e0:14:8c:72:e5:50:4f:9a:67:81:d0: 67:b8:45:02:b2:ab:ec:38:12:07:10:f4:94:ff:8d:85:8c:bb: db:ed:f0:d7:8f:d0:f9:69:d9:ca:fc:02:fd:e0:98:8e:1e:10: 88:17:f9:64:0e:1a:d0:2b:62:53:43:77:fa:eb:97:f5:26:20: 8d:db:32:5a:61:e2:19:ec:e6:86:f4:3a:9b:eb:08:24:55:be: 1c:ad:e4:76:cf:be:8e:ae:28:a8:73:45:ae:36:e7:a8:1d:c7: 78:37:55:62:e6:df:41:2a:e3:e0:b5:98:b4:a2:19:33:52:eb: a8:47:4f:3b:30:42:f3:39:a6:4f:98:81:bd:a5:5e:4b:fc:b2: de:00:12:42 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkhhDRF1n0NTJCYoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NTNiYjkwNWYtYjhmMi00ODVlLWJiYmUtYmQyODk3NWFlZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuivKHgR6G+rZgo4MlXuopy06sp3bhv5PkTIX 3QPARU4lH4f/3hahOFs9yL1QKZKK/DvvFP/4eSjxG4wK6Rtv5lJUkC3HNdJyhUY8 srtpN+UBNOY7zIPNUbEuQQmHZxko/HF7GdurKYQKSZsYCqKn45CBKWiTZqUqgPxz Rnsq2ovgx3smTALk1aK9IzOof2j+IxKLxYSO2C6xsSQU2317ptZQNk8SnwZbShoE c8bJVURnvHbgRE9Ni801v1c5KKYK+HaWoQSpI/yAjSZF4dh6E8Ch23bLVVGrL0vK 2bwcG8QDJsrNDnutye26JObL7wACQcYlPqjnPUhAoqpvTuLeYQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKwswRL6KQSWilFI8ahJpwmrSEucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1ZDU4NzMtMDQzYy0z Yjk5LTkwOTUtYWQ2MGE4YjkxM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYb8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWMuGDJ53kQ1/HR/z/fVSwySB0IIR1aqgtuZrqpLyeNKG5SUJbf5/ql31 RgxxvA9VaRpFkZYsKcZJ9JzUMqKMlxCYfB53RRy4dUqxnaMkDr8jdzaotD801tL4 pF7nET+jD4wJdifTvp4oYskb+ox7Qc9+ceAUjHLlUE+aZ4HQZ7hFArKr7DgSBxD0 lP+NhYy72+3w14/Q+WnZyvwC/eCYjh4QiBf5ZA4a0CtiU0N3+uuX9SYgjdsyWmHi GezmhvQ6m+sIJFW+HK3kds++jq4oqHNFrjbnqB3HeDdVYubfQSrj4LWYtKIZM1Lr qEdPOzBC8zmmT5iBvaVeS/yy3gASQg== -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:45 2025 by rpki-client