$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa File: 2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa (raw, json) Hash identifier: 35eq+/095cZWI3Dzfn6DExFc/7vlw4d3F5ogxIaPsSk= Subject key identifier: C3:33:76:60:6D:B2:D1:59:92:CE:C1:5C:E3:E3:96:9E:45:04:62:91 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C24776E8C1145F187A46D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 141.150.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:77:6e:8c:11:45:f1:87:a4:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=3c04d6c8-b8f4-4b11-9550-d883fdd1bfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:88:9d:12:64:84:5c:c5:c6:38:56:4b:83: 91:9c:71:68:b8:c3:fa:6d:f0:c8:a3:ab:89:ef:70: a1:44:9b:05:04:6d:3a:0c:94:21:64:81:d7:06:ad: 4a:d7:28:71:9b:2a:d5:2d:64:8c:6e:60:b6:e2:ce: aa:5a:9d:64:ff:fd:64:d7:9e:90:49:6f:07:a7:d4: 20:19:dd:da:4b:c7:af:00:70:90:90:90:60:28:29: c7:7d:4d:41:61:f3:3a:67:6c:c7:7c:b2:88:ce:83: 17:57:d8:e4:40:a3:ed:a4:e0:9c:05:eb:41:ad:b4: de:47:bb:55:c7:80:ce:3d:ac:26:f9:90:de:66:d1: 68:b0:31:90:66:ac:76:45:fc:2c:7c:85:98:6b:f0: c8:ea:4c:4b:75:d8:80:c7:d3:3e:ac:5b:1b:05:9a: 16:7b:b3:57:5d:54:e1:43:41:7a:90:2b:e9:08:d5: 14:c3:b1:f9:74:3b:c2:a1:d3:2d:a4:62:4f:4f:30: f2:59:df:e6:15:25:1c:b7:1a:13:eb:52:8d:63:7d: 5e:0b:35:8a:bb:5c:09:d9:e0:02:44:aa:fe:89:3e: e6:b6:6b:8d:85:53:85:76:e6:89:eb:81:f9:d4:ee: 86:fa:b2:37:54:18:37:58:7a:53:68:f5:53:75:16: 63:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:33:76:60:6D:B2:D1:59:92:CE:C1:5C:E3:E3:96:9E:45:04:62:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.150.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c7:7d:eb:d5:96:13:3e:00:73:3e:ba:ad:04:dd:56:e9:40: 1d:30:0d:b4:a9:98:14:9e:b2:19:20:1f:96:38:d1:6a:67:f8: 94:ff:4e:ba:63:b2:40:f9:2b:db:50:b9:59:7a:4e:67:ff:d4: c1:78:06:81:c5:2b:10:5e:50:1b:cc:9c:18:6e:59:37:77:64: 0e:90:6c:d9:5a:e8:32:61:0d:11:ea:7c:de:6b:e3:9d:15:2f: 72:e2:7b:27:d7:18:85:b6:db:a2:c0:6f:6a:00:e5:d2:b3:dd: 7a:25:73:a2:ab:1b:96:39:bd:df:e5:b6:bf:28:a8:be:7f:56: eb:a2:8d:88:d8:c3:8f:c3:1b:01:71:b1:d3:c0:68:a1:68:09: 86:73:79:44:f0:00:f4:cb:aa:55:c0:43:7d:0e:11:2f:05:cc: 94:20:e1:8a:16:5c:40:92:a8:82:15:18:8c:50:dd:d1:73:7e: 20:07:36:bc:34:c8:21:00:ee:33:cc:9f:bf:2b:e4:c7:33:8a: e7:a0:3f:2f:ba:55:a2:9e:e9:a3:e0:dc:4a:8c:10:11:4b:a3: ad:10:0c:61:48:99:64:99:b7:21:af:96:d5:38:86:fe:5b:23: b4:dd:ba:51:fe:17:bd:fd:70:4d:f0:ea:77:11:b1:5a:2e:47: b9:67:d3:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJHdujBFF8YekbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk M2MwNGQ2YzgtYjhmNC00YjExLTk1NTAtZDg4M2ZkZDFiZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU6InRJkhFzFxjhWS4ORnHFouMP6bfDIo6uJ 73ChRJsFBG06DJQhZIHXBq1K1yhxmyrVLWSMbmC24s6qWp1k//1k156QSW8Hp9Qg Gd3aS8evAHCQkJBgKCnHfU1BYfM6Z2zHfLKIzoMXV9jkQKPtpOCcBetBrbTeR7tV x4DOPawm+ZDeZtFosDGQZqx2RfwsfIWYa/DI6kxLddiAx9M+rFsbBZoWe7NXXVTh Q0F6kCvpCNUUw7H5dDvCodMtpGJPTzDyWd/mFSUctxoT61KNY31eCzWKu1wJ2eAC RKr+iT7mtmuNhVOFduaJ64H51O6G+rI3VBg3WHpTaPVTdRZj/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMzdmBtstFZks7BXOPjlp5FBGKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmExYjg3ODQtOGIyNS0z MWMzLTgzYjktZTgyOWJkNjUzYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjHfevVlhM+AHM+uq0E3VbpQB0wDbSpmBSeshkgH5Y40Wpn+JT/Trpj skD5K9tQuVl6Tmf/1MF4BoHFKxBeUBvMnBhuWTd3ZA6QbNla6DJhDRHqfN5r450V L3LieyfXGIW226LAb2oA5dKz3Xolc6KrG5Y5vd/ltr8oqL5/VuuijYjYw4/DGwFx sdPAaKFoCYZzeUTwAPTLqlXAQ30OES8FzJQg4YoWXECSqIIVGIxQ3dFzfiAHNrw0 yCEA7jPMn78r5McziuegPy+6VaKe6aPg3EqMEBFLo60QDGFImWSZtyGvltU4hv5b I7TdulH+F739cE3w6ncRsVouR7ln0/Y= -----END CERTIFICATE-----Generated at Sun Apr 27 03:35:03 2025 by rpki-client