$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4130276b-a12f-3613-bc9c-8da5b9f30025.roa File: 4130276b-a12f-3613-bc9c-8da5b9f30025.roa (raw, json) Hash identifier: ejOX/U/29Uoghc3O02j8gLJcrztIpwq45oLIXb6rqBc= Subject key identifier: 44:88:20:C0:E1:CA:68:59:E3:07:FD:6B:57:8F:26:99:3B:0C:23:BB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D1FA28F35AAFAA73B830 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4130276b-a12f-3613-bc9c-8da5b9f30025.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 151.204.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d1:fa:28:f3:5a:af:aa:73:b8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=36822eba-1f87-4afa-83ec-75a2a301a0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:80:42:b6:0c:b5:8f:19:fa:74:2c:d8:50: b5:7b:f2:68:47:c7:8c:0b:80:9b:fc:4d:ff:95:be: b6:e5:ba:f1:dc:d8:82:75:c4:90:c7:08:e1:8d:0a: 6b:92:9c:1f:70:1e:46:21:49:e9:ea:a5:72:fe:11: b2:e8:2a:33:3e:2b:c4:f4:70:1e:dc:1e:46:c9:ee: 41:3a:73:e6:ba:e0:10:5e:ef:75:da:0b:aa:df:de: 94:59:26:57:f5:c7:2a:c8:8f:df:f7:db:7b:bf:ab: 6f:d6:7e:f9:a3:fd:e9:c3:89:bb:59:57:97:be:28: 99:51:95:02:e1:60:05:44:96:0e:b4:5f:64:5c:b0: b1:1b:c0:78:ce:54:e5:c3:c6:49:bb:0a:ae:63:3c: 62:50:0b:67:50:6f:ad:e8:40:15:73:6c:5f:1c:22: 01:26:8a:d7:03:4e:b3:1f:0f:cd:79:73:62:9c:c2: a3:86:4e:0b:65:81:ee:07:fe:5b:88:1c:d2:32:c9: 30:c0:4e:49:fa:6d:56:d3:58:0c:28:49:bb:8e:53: 78:50:d3:b8:80:89:9f:9f:27:9c:9a:10:82:7f:04: 4a:ff:d6:55:13:47:55:0b:58:32:ab:d5:cb:8b:a1: 5a:fa:c5:4d:36:6a:c7:7f:7c:75:5c:a3:0e:35:fc: f0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:88:20:C0:E1:CA:68:59:E3:07:FD:6B:57:8F:26:99:3B:0C:23:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4130276b-a12f-3613-bc9c-8da5b9f30025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 151.204.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ee:19:5b:6e:02:ac:10:b4:18:7d:7e:75:0e:15:85:c6:e4: f9:b7:40:f7:bc:4e:66:19:b0:a3:a3:90:0a:21:84:17:7f:fc: 57:f1:2a:a8:ab:46:a6:7d:8a:6c:4a:a6:35:23:22:3f:c8:ce: ea:38:76:11:32:c0:8b:9b:5e:75:33:c4:b1:28:56:a5:14:1f: a5:5e:96:c6:6d:ac:60:44:d8:9d:37:a5:88:9c:28:0b:ac:82: b4:6e:48:e9:4e:be:44:fe:5d:cc:69:00:3f:e7:e1:ec:eb:7c: 10:5f:9c:a7:d9:a3:05:a6:04:c2:54:75:2d:87:8a:4b:a0:bf: c5:fe:65:07:8b:3d:1a:ef:32:dc:46:aa:ca:75:c6:6a:f4:d9: fa:fe:38:b3:7a:02:4c:27:00:64:09:76:eb:c2:48:a1:e0:9f: 01:3e:58:7a:84:ff:36:c8:17:e2:f4:fb:ab:a7:7f:5d:5c:6a: 99:20:92:a6:47:47:d7:88:82:d7:c9:1b:20:57:3a:0a:c2:bb: 80:e0:ab:87:84:a8:62:9f:d4:33:f6:00:8c:72:2c:a4:c8:7e: 9b:cf:53:5d:31:f3:59:36:d3:e2:a0:86:ed:7b:f9:42:79:3f: 26:ad:45:4f:45:d8:0f:4c:db:ca:63:55:04:9d:3e:43:0d:11: d7:77:8a:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtH6KPNar6pzuDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MzY4MjJlYmEtMWY4Ny00YWZhLTgzZWMtNzVhMmEzMDFhMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCOAQrYMtY8Z+nQs2FC1e/JoR8eMC4Cb/E3/ lb625brx3NiCdcSQxwjhjQprkpwfcB5GIUnp6qVy/hGy6CozPivE9HAe3B5Gye5B OnPmuuAQXu912guq396UWSZX9ccqyI/f99t7v6tv1n75o/3pw4m7WVeXviiZUZUC 4WAFRJYOtF9kXLCxG8B4zlTlw8ZJuwquYzxiUAtnUG+t6EAVc2xfHCIBJorXA06z Hw/NeXNinMKjhk4LZYHuB/5biBzSMskwwE5J+m1W01gMKEm7jlN4UNO4gImfnyec mhCCfwRK/9ZVE0dVC1gyq9XLi6Fa+sVNNmrHf3x1XKMONfzwFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESIIMDhymhZ4wf9a1ePJpk7DCO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDEzMDI3NmItYTEyZi0z NjEzLWJjOWMtOGRhNWI5ZjMwMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl8ywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbuGVtuAqwQtBh9fnUOFYXG5Pm3QPe8TmYZsKOjkAohhBd//FfxKqir RqZ9imxKpjUjIj/Izuo4dhEywIubXnUzxLEoVqUUH6VelsZtrGBE2J03pYicKAus grRuSOlOvkT+XcxpAD/n4ezrfBBfnKfZowWmBMJUdS2Hikugv8X+ZQeLPRrvMtxG qsp1xmr02fr+OLN6AkwnAGQJduvCSKHgnwE+WHqE/zbIF+L0+6unf11capkgkqZH R9eIgtfJGyBXOgrCu4Dgq4eEqGKf1DP2AIxyLKTIfpvPU10x81k20+Kghu17+UJ5 PyatRU9F2A9M28pjVQSdPkMNEdd3ioY= -----END CERTIFICATE-----Generated at Sun Apr 27 02:18:07 2025 by rpki-client