$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7e9177a-305a-3be9-9aef-0b228a66de1d.roa File: f7e9177a-305a-3be9-9aef-0b228a66de1d.roa (raw, json) Hash identifier: tnqQpevMnvuVbUDCq9cJ++KM0hfKDTfUwSo2cYs5VJo= Subject key identifier: F0:70:2C:BB:C9:C4:C5:CB:26:EB:F9:62:40:31:18:F2:37:AE:92:67 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584909E69834F2A4CBB8EF447B96 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7e9177a-305a-3be9-9aef-0b228a66de1d.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 6167 IP address blocks: 97.207.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:98:34:f2:a4:cb:b8:ef:44:7b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=676a16cf-ddaa-45b7-aa41-ecea5d79dbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:d7:5a:69:4e:21:3a:70:3f:46:a3:89:08: 8d:a9:dc:d7:ad:1d:22:a7:ca:40:2b:7b:a7:a7:a3: a5:8d:c6:51:b8:93:00:bb:ae:f2:31:d5:27:73:b9: 33:09:24:b4:61:16:9d:c6:85:f4:7e:75:fb:bb:e4: 0c:0a:53:73:1b:db:8c:a9:08:a3:a5:28:ab:30:e3: f8:ac:19:90:41:e7:9e:6d:31:f3:bc:82:c9:1d:a0: b8:30:13:da:28:b8:91:39:b3:42:a1:38:68:36:f1: 3d:0b:0b:45:f6:b3:91:73:53:2f:a1:5e:95:c2:45: 6f:da:44:89:8a:7d:17:c8:4c:f4:0a:46:bd:85:92: 7c:0a:0a:c2:80:92:1b:b8:9b:27:ff:9a:11:cf:3b: 96:a8:dd:04:3b:01:25:dd:74:0d:11:a3:36:5b:2c: f1:51:e8:7c:29:f0:d7:0d:f4:81:a2:88:55:6b:4e: 02:a3:b5:6c:fd:af:50:2e:3d:72:f7:e2:d2:1e:b3: 6a:cc:43:08:a7:9e:0a:9a:0f:e4:99:9e:e6:3f:cc: 4b:f8:bc:98:89:25:dd:83:15:d8:c2:f1:12:9b:f6: 0d:ad:80:02:b5:22:c1:84:a7:60:f8:0a:ed:14:00: 89:ea:95:ef:51:da:40:e0:ea:2e:fe:75:cf:0a:e7: 28:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:70:2C:BB:C9:C4:C5:CB:26:EB:F9:62:40:31:18:F2:37:AE:92:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7e9177a-305a-3be9-9aef-0b228a66de1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.207.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:9e:a1:81:ad:fc:3e:2d:1e:25:02:84:43:1c:74:c4:35:39: 03:3e:e1:e1:49:c0:45:15:9b:86:de:04:23:6c:92:70:76:62: 3d:12:32:26:76:d8:13:f5:35:0f:d8:89:2e:bb:a8:01:ae:50: b6:34:16:11:de:7b:4c:4e:db:47:f7:3a:c9:ec:cc:00:d7:fd: ad:2e:12:79:73:29:5d:47:fc:10:a6:dc:56:6c:a4:ea:e6:ee: eb:79:d9:20:a3:ce:a9:77:f3:ff:a6:e7:c9:55:54:cf:9a:ab: 6d:66:89:ab:89:e6:29:b4:b2:1e:38:0b:46:1c:76:e3:b7:c5: bf:15:47:dc:42:fa:4a:b8:32:c4:af:de:4d:52:06:eb:9c:10: 4d:25:6b:fe:b7:34:51:5e:86:e5:73:14:2e:2f:57:00:a5:02: bc:6f:1c:32:0e:29:19:e4:0b:d8:95:f8:a7:9e:f8:87:54:e6: 83:67:ba:74:17:55:dc:5c:39:8f:14:61:5e:14:64:68:f7:4a: ae:7e:27:c7:14:69:e6:b9:bc:46:53:7f:4c:30:6e:39:8d:5f: fd:3b:01:3e:2a:2d:bb:85:c9:f9:b1:20:64:e9:3a:78:90:7b: 68:5d:2e:25:a0:9d:50:e1:1d:ec:10:d4:42:21:ed:fb:f7:93: 66:6c:f4:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5pg08qTLuO9Ee5YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk Njc2YTE2Y2YtZGRhYS00NWI3LWFhNDEtZWNlYTVkNzlkYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNXXWmlOITpwP0ajiQiNqdzXrR0ip8pAK3un p6OljcZRuJMAu67yMdUnc7kzCSS0YRadxoX0fnX7u+QMClNzG9uMqQijpSirMOP4 rBmQQeeebTHzvILJHaC4MBPaKLiRObNCoThoNvE9CwtF9rORc1MvoV6VwkVv2kSJ in0XyEz0Cka9hZJ8CgrCgJIbuJsn/5oRzzuWqN0EOwEl3XQNEaM2WyzxUeh8KfDX DfSBoohVa04Co7Vs/a9QLj1y9+LSHrNqzEMIp54Kmg/kmZ7mP8xL+LyYiSXdgxXY wvESm/YNrYACtSLBhKdg+ArtFACJ6pXvUdpA4Oou/nXPCucoRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBwLLvJxMXLJuv5YkAxGPI3rpJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjdlOTE3N2EtMzA1YS0z YmU5LTlhZWYtMGIyMjhhNjZkZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYc+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGeoYGt/D4tHiUChEMcdMQ1OQM+4eFJwEUVm4beBCNsknB2Yj0SMiZ2 2BP1NQ/YiS67qAGuULY0FhHee0xO20f3OsnszADX/a0uEnlzKV1H/BCm3FZspOrm 7ut52SCjzql38/+m58lVVM+aq21miauJ5im0sh44C0YcduO3xb8VR9xC+kq4MsSv 3k1SBuucEE0la/63NFFehuVzFC4vVwClArxvHDIOKRnkC9iV+Kee+IdU5oNnunQX VdxcOY8UYV4UZGj3Sq5+J8cUaea5vEZTf0wwbjmNX/07AT4qLbuFyfmxIGTpOniQ e2hdLiWgnVDhHewQ1EIh7fv3k2Zs9EI= -----END CERTIFICATE-----Generated at Sat Apr 5 21:24:27 2025 by rpki-client