$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4d65600-fb4f-3a47-811f-061e4f4f5f40.roa File: f4d65600-fb4f-3a47-811f-061e4f4f5f40.roa (raw, json) Hash identifier: uICXP1PtwTBQw6l0ZWZuhOVZSSTX78TcFgJZ0KMjGPU= Subject key identifier: A1:2E:A7:F3:F1:73:11:E6:47:E9:F9:30:61:85:D1:45:31:44:F8:AB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244E5D0DABDF08354B4E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4d65600-fb4f-3a47-811f-061e4f4f5f40.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 141.153.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4e:5d:0d:ab:df:08:35:4b:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=9507a076-9acf-40b3-8631-7961a13043a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:56:c4:15:9d:1b:f5:d1:56:35:81:68:db: ea:2a:99:a9:75:a7:16:6c:d6:bd:a0:8f:7d:0b:c6: 06:83:99:d4:c2:90:50:b4:6f:c1:95:33:f4:1a:e9: 60:2f:84:41:e7:0e:ae:fe:dc:b6:e1:2c:40:28:77: 5e:2e:20:76:05:e0:ca:5c:c3:23:e7:b7:7a:27:3e: e6:5c:7b:4f:86:9e:1d:ca:3e:45:5c:ef:58:7d:7e: 08:d4:f7:8e:28:b7:a8:34:c4:24:4c:54:6d:9e:23: 26:60:20:08:ce:4f:b8:fb:59:56:a9:96:1e:e7:27: bb:48:78:2f:55:46:7a:a0:0b:93:4b:73:33:8e:3c: f1:bb:48:63:94:fe:d6:0c:4f:bf:c9:eb:e8:f1:a8: c2:62:db:f8:1d:8e:05:91:56:f3:04:80:c3:4e:c1: 16:f9:4c:12:02:64:55:1b:bb:a6:7d:82:ce:05:77: b7:ec:a8:ad:22:de:f0:ff:dc:1d:de:ad:ee:e0:5c: 8a:79:c1:1d:41:07:27:29:d3:5b:db:26:ab:df:43: f8:2c:04:65:b1:f5:bd:7c:df:87:bd:02:ea:44:d3: fe:19:4d:33:55:f6:45:62:e9:4e:e9:0e:33:4b:ff: 82:b1:07:f9:2e:e1:5d:fe:a6:8f:27:e1:a7:cf:05: 1d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2E:A7:F3:F1:73:11:E6:47:E9:F9:30:61:85:D1:45:31:44:F8:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4d65600-fb4f-3a47-811f-061e4f4f5f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.153.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:86:7e:14:c6:1b:30:a1:8f:50:41:e3:d7:0a:ce:7d:62:98: 10:d6:de:f0:76:ca:22:ac:8e:ae:28:c6:9f:38:b7:60:0d:ed: 2d:a5:95:99:35:b7:50:c6:53:8b:4f:97:d0:d8:ad:6b:23:b8: ff:64:fd:f8:76:4b:fc:96:a1:d5:df:4f:33:6e:2a:db:ed:5b: e8:99:53:25:fc:64:0c:df:41:3c:83:91:c8:12:33:af:20:0a: 49:be:99:28:a7:b7:6e:a2:34:a3:00:d8:bd:63:a9:0d:02:f7: 4f:af:af:c4:df:ea:3e:70:7c:40:d4:78:20:e3:2f:a7:57:69: 6c:ce:2d:95:4e:73:55:c5:b7:40:37:b1:45:f6:30:df:99:a9: 9d:fa:22:b7:2d:de:91:8a:d8:51:5c:a0:e3:d5:a3:a6:32:cf: 9e:fe:f1:17:e3:5a:6d:59:cc:df:ee:f4:5a:f8:5d:2e:9d:79: 52:34:29:cb:69:ae:51:34:2b:c6:5f:fa:71:e6:a1:53:62:90: c4:ad:ca:37:79:a5:29:5f:fd:9e:9d:9e:8f:f4:05:f8:33:41: 11:db:e6:68:3b:e9:6d:cc:e0:06:dc:38:b8:20:90:e0:ce:94: ab:69:3c:58:b5:b9:6a:11:7f:26:4b:1c:ad:e3:b2:e7:34:70: 00:88:3a:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJE5dDavfCDVLToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk OTUwN2EwNzYtOWFjZi00MGIzLTg2MzEtNzk2MWExMzA0M2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFZWxBWdG/XRVjWBaNvqKpmpdacWbNa9oI99 C8YGg5nUwpBQtG/BlTP0GulgL4RB5w6u/ty24SxAKHdeLiB2BeDKXMMj57d6Jz7m XHtPhp4dyj5FXO9YfX4I1PeOKLeoNMQkTFRtniMmYCAIzk+4+1lWqZYe5ye7SHgv VUZ6oAuTS3Mzjjzxu0hjlP7WDE+/yevo8ajCYtv4HY4FkVbzBIDDTsEW+UwSAmRV G7umfYLOBXe37KitIt7w/9wd3q3u4FyKecEdQQcnKdNb2yar30P4LARlsfW9fN+H vQLqRNP+GU0zVfZFYulO6Q4zS/+CsQf5LuFd/qaPJ+GnzwUdvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEup/PxcxHmR+n5MGGF0UUxRPirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjRkNjU2MDAtZmI0Zi0z YTQ3LTgxMWYtMDYxZTRmNGY1ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaGfhTGGzChj1BB49cKzn1imBDW3vB2yiKsjq4oxp84t2AN7S2llZk1 t1DGU4tPl9DYrWsjuP9k/fh2S/yWodXfTzNuKtvtW+iZUyX8ZAzfQTyDkcgSM68g Ckm+mSint26iNKMA2L1jqQ0C90+vr8Tf6j5wfEDUeCDjL6dXaWzOLZVOc1XFt0A3 sUX2MN+ZqZ36Irct3pGK2FFcoOPVo6Yyz57+8RfjWm1ZzN/u9Fr4XS6deVI0Kctp rlE0K8Zf+nHmoVNikMStyjd5pSlf/Z6dno/0BfgzQRHb5mg76W3M4AbcOLggkODO lKtpPFi1uWoRfyZLHK3jsuc0cACIOgk= -----END CERTIFICATE-----Generated at Sat Apr 5 18:23:51 2025 by rpki-client