$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa File: 3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa (raw, json) Hash identifier: yrjR++Rv2Mwtf2Xtg34V8Pgz8XbV4FvhHxwLG/NYbPs= Subject key identifier: E5:A6:3B:D9:F2:B5:64:7D:29:CE:E1:A7:31:C6:E0:88:2A:A6:39:3A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C2480864D5436A509ECE490 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 0 IP address blocks: 198.133.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:80:86:4d:54:36:a5:09:ec:e4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=474a5672-0eb2-4ee5-b1ab-4ae246960e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b3:5d:f0:5e:d1:18:4a:f6:ee:be:41:ff:fb: c3:4b:73:2c:95:43:0c:a4:53:3e:8b:74:34:50:94: f0:e8:66:2f:46:82:11:59:68:dd:af:0a:99:3e:79: 5a:0d:4a:fb:39:3f:ce:58:9c:b4:9f:ed:0b:9c:50: 81:64:aa:07:82:da:f7:6f:44:e1:73:6a:dc:4e:14: 4c:19:e9:d0:3e:2d:7d:32:26:4a:d2:1a:f4:58:99: 4e:c0:00:3f:df:70:23:66:74:f8:4f:02:e7:0a:cf: db:52:9e:bc:1c:ea:c2:b8:41:4e:7d:c4:13:8b:59: 7e:55:04:a7:e3:b8:f7:55:a8:5a:2f:b4:3b:53:84: 28:f7:df:1c:81:ff:f6:69:23:24:ec:ce:0c:4f:99: a5:15:81:86:59:f1:e7:84:e0:1e:b1:d5:fe:9c:ba: 4e:29:99:8f:73:f1:07:fd:18:c2:ee:fb:b7:90:3f: e7:1f:69:59:08:9e:7d:a8:80:28:d1:80:c2:b0:34: fb:e0:aa:b5:ea:3f:3b:17:9f:d5:0a:63:65:c3:6f: 3f:4e:37:cb:27:a2:c2:b9:aa:77:b9:23:35:59:8f: df:fb:40:26:f0:e3:a3:ca:b3:38:bb:3c:75:33:78: 08:15:b6:32:1b:3d:f9:d1:11:47:53:a4:65:00:61: f6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A6:3B:D9:F2:B5:64:7D:29:CE:E1:A7:31:C6:E0:88:2A:A6:39:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.133.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:74:f6:54:6a:65:e3:35:ed:6c:af:03:64:ee:25:ab:d4:7c: 8f:83:4f:89:6a:2b:16:7a:aa:ea:6a:35:32:50:40:58:6a:a8: 48:f6:cd:32:94:89:55:ff:3d:b9:06:3c:76:4d:83:27:c3:d3: 08:79:4c:64:a0:23:39:f0:e8:8d:89:ab:04:e9:64:67:7b:81: 0d:65:f0:98:64:aa:6a:44:d5:2d:a0:33:e4:d8:11:c5:b0:97: c0:8b:a4:bc:57:ac:04:93:f0:f2:30:4d:b2:eb:14:9b:8d:04: c4:85:32:19:a7:93:88:b8:8f:e1:b2:ab:23:fd:e8:07:15:62: 59:d6:8c:7d:60:cb:d7:74:ce:8c:b3:12:b7:92:2a:d3:8f:46: a2:34:1e:b2:5f:df:7b:f2:90:52:31:85:23:d5:13:70:66:e0: 0f:5b:86:d2:2e:1e:99:ff:0b:28:38:d2:ea:4c:d2:3b:08:70: c0:cc:73:1f:6f:1b:1e:f2:aa:5c:30:c1:79:d5:8f:08:5e:31: 7d:c1:30:fa:d9:f1:09:fe:3b:b4:da:34:c7:2e:03:04:7b:b9: 54:7d:e7:b7:4a:fe:81:2d:7a:d9:b8:1b:1b:11:e5:92:a6:8d: 01:33:36:ad:ae:ba:b3:46:75:2c:c4:5c:41:23:35:08:74:b3: 55:56:42:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJICGTVQ2pQns5JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NDc0YTU2NzItMGViMi00ZWU1LWIxYWItNGFlMjQ2OTYwZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57Nd8F7RGEr27r5B//vDS3MslUMMpFM+i3Q0 UJTw6GYvRoIRWWjdrwqZPnlaDUr7OT/OWJy0n+0LnFCBZKoHgtr3b0Thc2rcThRM GenQPi19MiZK0hr0WJlOwAA/33AjZnT4TwLnCs/bUp68HOrCuEFOfcQTi1l+VQSn 47j3VahaL7Q7U4Qo998cgf/2aSMk7M4MT5mlFYGGWfHnhOAesdX+nLpOKZmPc/EH /RjC7vu3kD/nH2lZCJ59qIAo0YDCsDT74Kq16j87F5/VCmNlw28/TjfLJ6LCuap3 uSM1WY/f+0Am8OOjyrM4uzx1M3gIFbYyGz350RFHU6RlAGH2aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWmO9nytWR9Kc7hpzHG4Igqpjk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2Q2YzliNGEtZTM2NC0z ZjUwLWI3M2MtOGY2ODc4NmVjZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB09lRqZeM17WyvA2TuJavUfI+DT4lqKxZ6qupqNTJQQFhqqEj2zTKU iVX/PbkGPHZNgyfD0wh5TGSgIznw6I2JqwTpZGd7gQ1l8JhkqmpE1S2gM+TYEcWw l8CLpLxXrAST8PIwTbLrFJuNBMSFMhmnk4i4j+GyqyP96AcVYlnWjH1gy9d0zoyz EreSKtOPRqI0HrJf33vykFIxhSPVE3Bm4A9bhtIuHpn/Cyg40upM0jsIcMDMcx9v Gx7yqlwwwXnVjwheMX3BMPrZ8Qn+O7TaNMcuAwR7uVR957dK/oEtetm4GxsR5ZKm jQEzNq2uurNGdSzEXEEjNQh0s1VWQgQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:16:47 2025 by rpki-client