$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f9bbc07-8b48-344b-b885-253a6681ae78.roa File: 3f9bbc07-8b48-344b-b885-253a6681ae78.roa (raw, json) Hash identifier: sraUeCGTsyzhnUejGvGpnq6qpMu8PliAgcBJgB4zFWo= Subject key identifier: 02:90:5F:F6:B3:4F:EF:89:43:72:8E:79:A0:69:61:B5:3B:9D:F9:BB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246FB1456BCF6FC206D1F94 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f9bbc07-8b48-344b-b885-253a6681ae78.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 173.53.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:fb:14:56:bc:f6:fc:20:6d:1f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=0b8133f9-e632-4816-b3a7-38f0d7867445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:98:c8:a9:41:f4:b4:25:93:ef:36:ba:8c: 59:68:07:c2:f8:ab:1d:34:8b:4a:a9:39:54:36:ac: 77:01:4a:ed:bb:18:97:0a:69:66:56:0c:a5:f7:6a: dc:e1:f2:b2:1f:19:d2:c2:42:3a:69:a7:d6:58:28: 55:61:7e:f7:dc:53:f8:b2:42:d8:a7:bb:26:e2:e7: 76:2e:ec:2e:b6:3a:b8:d0:8b:e6:59:fe:a3:ab:05: b8:a7:9a:03:3b:46:83:60:5f:49:ce:a1:56:a3:bf: 4d:e6:06:b1:e4:f1:f4:10:e1:d4:d3:f6:b4:5b:aa: 59:60:c4:27:da:1d:f9:9f:49:7f:c6:3a:67:07:6e: 6b:7f:96:66:2b:3b:c8:7e:84:ca:37:c5:78:5f:1a: a5:8e:a7:a9:c7:15:c4:6d:78:f3:16:59:62:99:d2: 9f:88:95:58:23:72:99:bb:01:28:03:30:d6:fb:93: 73:84:c0:e1:81:5e:1e:10:23:23:6f:14:0d:7b:54: fd:e6:37:3c:72:50:e9:76:c4:f2:7c:06:bc:00:c4: 86:79:4d:78:d4:4a:42:7d:35:bb:52:02:ed:99:2c: 41:c3:bb:ad:be:ac:3b:b6:e5:6e:76:4e:03:91:5b: 3f:c9:b1:2d:31:dc:70:cd:fc:d2:b4:a2:2b:29:d9: 91:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:90:5F:F6:B3:4F:EF:89:43:72:8E:79:A0:69:61:B5:3B:9D:F9:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f9bbc07-8b48-344b-b885-253a6681ae78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.53.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:1b:12:fd:98:6e:e4:ac:74:95:53:cd:81:c3:21:17:6b:87: a7:b2:95:15:ae:59:be:ed:41:7a:51:9a:83:d0:6c:ec:8e:70: 5c:ef:fb:b0:ae:28:6c:70:0e:e8:95:20:8e:47:76:5e:81:f9: df:01:c6:ec:7a:2b:38:67:14:3c:01:94:d1:00:0b:49:18:87: b4:66:29:e9:bc:a4:86:14:9a:4a:6c:61:f4:21:6a:7e:79:46: bf:3a:98:0c:32:39:c3:9e:be:72:22:56:1d:8f:ec:74:4d:21: a8:5d:1a:39:65:f6:0b:97:10:fa:ca:a8:62:ef:86:10:d0:62: dd:ed:b1:b0:01:9d:5a:49:05:13:60:7b:d5:7b:fc:48:c8:64: 54:74:40:36:8c:12:a6:eb:bf:04:df:bf:eb:99:ab:b3:1c:bc: 1e:4a:ef:be:62:03:c7:20:aa:a4:ed:7d:5c:ed:57:f9:6e:54: 5c:21:8c:20:a5:62:af:f2:0d:0c:54:74:78:42:bb:3d:bf:4f: bc:38:1a:c2:b6:b6:6e:c5:e5:16:5c:27:2c:f8:6b:72:b1:d6: e1:c1:49:1a:1b:2a:c0:e9:9e:f6:90:6e:72:1e:3e:35:0e:62: 7c:54:34:c1:4c:80:b7:5d:c9:c0:d6:f7:65:d6:e6:9c:8a:7a: 22:cd:45:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvsUVrz2/CBtH5QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MGI4MTMzZjktZTYzMi00ODE2LWIzYTctMzhmMGQ3ODY3NDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nSYyKlB9LQlk+82uoxZaAfC+KsdNItKqTlU Nqx3AUrtuxiXCmlmVgyl92rc4fKyHxnSwkI6aafWWChVYX733FP4skLYp7sm4ud2 Luwutjq40IvmWf6jqwW4p5oDO0aDYF9JzqFWo79N5gax5PH0EOHU0/a0W6pZYMQn 2h35n0l/xjpnB25rf5ZmKzvIfoTKN8V4XxqljqepxxXEbXjzFllimdKfiJVYI3KZ uwEoAzDW+5NzhMDhgV4eECMjbxQNe1T95jc8clDpdsTyfAa8AMSGeU141EpCfTW7 UgLtmSxBw7utvqw7tuVudk4DkVs/ybEtMdxwzfzStKIrKdmRvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKQX/azT++JQ3KOeaBpYbU7nfm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2Y5YmJjMDctOGI0OC0z NDRiLWI4ODUtMjUzYTY2ODFhZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrTUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIbEv2YbuSsdJVTzYHDIRdrh6eylRWuWb7tQXpRmoPQbOyOcFzv+7Cu KGxwDuiVII5Hdl6B+d8Bxux6KzhnFDwBlNEAC0kYh7RmKem8pIYUmkpsYfQhan55 Rr86mAwyOcOevnIiVh2P7HRNIahdGjll9guXEPrKqGLvhhDQYt3tsbABnVpJBRNg e9V7/EjIZFR0QDaMEqbrvwTfv+uZq7McvB5K775iA8cgqqTtfVztV/luVFwhjCCl Yq/yDQxUdHhCuz2/T7w4GsK2tm7F5RZcJyz4a3Kx1uHBSRobKsDpnvaQbnIePjUO YnxUNMFMgLddycDW92XW5pyKeiLNRcY= -----END CERTIFICATE-----Generated at Sun Apr 27 04:19:26 2025 by rpki-client