$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3c1ab74-91cd-3765-96d6-cba5a0da750f.roa File: e3c1ab74-91cd-3765-96d6-cba5a0da750f.roa (raw, json) Hash identifier: X21FAE9cd8x6Q897zS1B5Vo8jcCi4vMus8PtHzA8Uog= Subject key identifier: DA:65:78:C7:D1:41:45:F4:C0:1E:F8:BE:A0:AF:AD:BF:04:AC:88:BD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849648468CB29A22D3C53B8C480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3c1ab74-91cd-3765-96d6-cba5a0da750f.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 6167 IP address blocks: 75.241.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:68:cb:29:a2:2d:3c:53:b8:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=d61445bb-419c-45c1-8e7a-35ea802a3caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5d:27:11:eb:e6:90:2d:56:45:21:ab:c6:7b: 97:72:26:a8:33:3b:04:84:08:11:22:ed:7b:5d:97: a1:0a:d5:80:2f:16:14:f6:ea:fa:5a:63:da:57:09: 38:a2:2b:8c:0f:ef:bf:90:e4:17:6b:9a:1d:e6:e3: 7b:84:35:eb:bc:2d:b3:16:14:e8:7c:bb:83:d0:24: 78:46:09:e1:5f:b2:5b:d7:ca:cd:28:d3:7a:c3:ac: a2:3f:ee:e7:f0:9c:1f:27:f0:00:86:81:20:22:c9: c6:30:f0:dc:d6:32:dc:f2:02:a0:ba:79:ab:ea:db: 17:30:eb:67:42:4c:49:52:17:69:7d:28:05:e5:59: 31:15:fa:c6:f1:fc:77:c6:2f:fc:87:77:4a:43:58: 77:e1:55:c1:1c:95:d4:e5:b1:89:e8:bd:00:33:1c: 44:e8:f1:ff:e5:d0:43:5d:8b:aa:c0:a5:a4:bd:2c: 96:85:c3:03:8f:70:b7:4d:9c:11:89:0c:9e:28:ee: cb:76:39:f4:cf:ef:07:c5:2d:fb:6e:c6:b6:71:4a: 04:8f:aa:29:71:78:18:49:4f:3f:6c:43:9b:d8:c6: 11:4a:55:4b:d0:84:f4:fe:ca:e2:04:0a:52:c5:d4: 0c:50:18:46:20:3f:43:3c:7f:df:aa:eb:0d:3d:f6: 60:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:65:78:C7:D1:41:45:F4:C0:1E:F8:BE:A0:AF:AD:BF:04:AC:88:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3c1ab74-91cd-3765-96d6-cba5a0da750f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 75.241.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:b8:4c:e2:cd:62:b5:26:d4:3d:dc:71:ea:74:df:ad:30:4b: a5:7a:08:53:56:94:bc:14:01:c9:9c:bc:af:2c:c1:37:1d:ea: 23:25:da:46:00:9e:06:0c:99:00:39:4f:5d:8d:fd:34:99:97: c7:8c:b8:24:0b:fa:85:d4:ab:9a:14:02:b6:e4:86:33:75:68: a8:79:b8:1c:be:d9:e6:7a:52:3c:8a:14:b9:ac:73:ff:d5:60: 94:71:fd:9e:c2:d0:05:d7:7b:d8:23:e9:82:0a:2e:d2:18:ba: 5e:27:27:03:89:44:80:fe:4c:6b:1d:36:48:44:f4:20:d2:a6: 5e:65:ae:7b:3c:b6:69:37:79:32:20:84:83:c4:69:2d:3e:92: 8b:b0:c2:cd:2f:4a:91:af:ee:01:d0:71:7d:65:70:2a:0a:bc: 46:78:61:35:0b:e8:e0:d8:21:53:f0:59:c1:5f:3c:d1:2c:3c: fb:cf:b1:99:77:d7:d9:4f:f6:8d:e3:60:6c:0c:e6:da:cc:19: d6:9c:85:04:a4:13:87:ea:96:36:c1:68:70:3e:6b:aa:6c:f6: 69:64:7f:87:88:d7:29:f5:2b:e8:9a:98:13:70:be:d1:94:7e: db:42:f8:23:15:de:df:13:7a:22:82:7d:df:13:99:ef:45:f6: 9b:81:a2:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhGjLKaItPFO4xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZDYxNDQ1YmItNDE5Yy00NWMxLThlN2EtMzVlYTgwMmEzY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl0nEevmkC1WRSGrxnuXciaoMzsEhAgRIu17 XZehCtWALxYU9ur6WmPaVwk4oiuMD++/kOQXa5od5uN7hDXrvC2zFhTofLuD0CR4 RgnhX7Jb18rNKNN6w6yiP+7n8JwfJ/AAhoEgIsnGMPDc1jLc8gKgunmr6tsXMOtn QkxJUhdpfSgF5VkxFfrG8fx3xi/8h3dKQ1h34VXBHJXU5bGJ6L0AMxxE6PH/5dBD XYuqwKWkvSyWhcMDj3C3TZwRiQyeKO7Ldjn0z+8HxS37bsa2cUoEj6opcXgYSU8/ bEOb2MYRSlVL0IT0/sriBApSxdQMUBhGID9DPH/fqusNPfZgbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpleMfRQUX0wB74vqCvrb8ErIi9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTNjMWFiNzQtOTFjZC0z NzY1LTk2ZDYtY2JhNWEwZGE3NTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS/H8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALe4TOLNYrUm1D3ccep0360wS6V6CFNWlLwUAcmcvK8swTcd6iMl2kYA ngYMmQA5T12N/TSZl8eMuCQL+oXUq5oUArbkhjN1aKh5uBy+2eZ6UjyKFLmsc//V YJRx/Z7C0AXXe9gj6YIKLtIYul4nJwOJRID+TGsdNkhE9CDSpl5lrns8tmk3eTIg hIPEaS0+kouwws0vSpGv7gHQcX1lcCoKvEZ4YTUL6ODYIVPwWcFfPNEsPPvPsZl3 19lP9o3jYGwM5trMGdachQSkE4fqljbBaHA+a6ps9mlkf4eI1yn1K+iamBNwvtGU fttC+CMV3t8TeiKCfd8Tme9F9puBot0= -----END CERTIFICATE-----Generated at Sat Apr 5 18:38:22 2025 by rpki-client