$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4317245a-489f-3f66-9f06-9064540317d7.roa File: 4317245a-489f-3f66-9f06-9064540317d7.roa (raw, json) Hash identifier: qjxRSY7+r760sbAKHmV9Z7WWew8sxTddz0nFXwukAtA= Subject key identifier: CC:B3:5A:5E:AB:28:AE:8E:CB:B6:D4:0E:93:73:52:5F:4B:06:81:95 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A3548740371F44EC97AAB440 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4317245a-489f-3f66-9f06-9064540317d7.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 393630 IP address blocks: 216.4.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:87:40:37:1f:44:ec:97:aa:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=acdbf28d-dfba-44df-befa-44f2b208acd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1d:34:b3:5b:69:a6:e3:53:f3:c3:ae:08:dd: 62:92:cd:f6:55:08:db:7f:04:e7:e1:95:c6:a7:82: cc:7c:5c:5b:03:38:cd:65:63:8b:70:c5:34:97:3b: a5:ca:4e:46:58:fa:25:e0:2c:51:12:e9:74:83:9f: 8c:9d:d2:6e:9e:26:5e:cf:e4:1c:05:65:32:99:50: 33:3f:49:20:a9:2b:07:24:ad:9c:68:b0:62:1a:1e: 94:08:0c:59:98:eb:78:d3:d0:82:77:54:42:52:36: 7f:94:37:a1:6d:ad:ee:fc:a1:58:d6:24:2a:5c:e3: 39:68:60:b2:3d:c7:ce:92:b6:ef:57:ee:42:27:53: 86:a3:3c:4f:71:2b:2d:7b:7b:17:9b:5c:68:e2:49: 5b:31:f2:c1:9a:ee:3e:a6:7c:7e:48:4a:ef:61:7f: a0:4f:97:95:c2:41:e5:46:7c:d5:ff:72:4d:8c:ee: 64:4f:a5:f6:2f:ac:03:b6:b8:8b:41:4c:e5:cb:15: 97:92:77:78:fe:27:c5:2f:2b:f6:b0:6c:2d:0d:f6: b3:44:7a:e7:a8:de:ca:80:3d:31:ed:11:7c:62:ab: 25:74:26:67:0c:2e:f1:71:fc:0a:8a:8c:50:ed:0c: 09:d4:8a:78:ae:7a:b2:b6:01:19:ab:70:db:30:0d: b4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B3:5A:5E:AB:28:AE:8E:CB:B6:D4:0E:93:73:52:5F:4B:06:81:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4317245a-489f-3f66-9f06-9064540317d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 216.4.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d0:31:bc:e7:c0:42:be:af:55:35:37:13:07:ef:27:ce:c5: 98:a5:e1:11:9d:30:dd:41:5c:be:dc:8c:20:3a:18:50:79:87: 7c:59:0b:35:94:94:0f:8c:9f:c8:3d:aa:c6:83:22:91:c0:7e: c2:b5:b6:b0:82:0a:0a:57:13:03:12:79:3a:68:3b:bf:d6:a0: ec:45:29:6f:0e:40:9e:79:43:5b:19:db:c8:a3:ef:e3:30:16: 56:70:08:57:cb:41:b1:1b:b9:51:84:44:93:f9:3c:21:31:84: d8:7b:3a:23:19:bd:5b:79:30:30:fe:2e:04:6e:e7:5b:2d:7b: a0:12:54:79:48:9e:45:ec:d2:7b:00:9c:42:01:c7:3c:60:7a: d5:a7:67:59:f4:62:78:6a:ff:4a:03:75:ee:3d:e8:41:bf:c5: 54:07:5e:7e:b9:97:6c:89:26:99:08:4a:35:53:ee:3b:d0:cc: 60:97:a3:66:04:ca:14:40:a5:76:84:5d:ba:3a:ba:e5:8b:31: 6b:0b:14:bb:e5:a1:ce:c8:8c:88:8e:ac:6f:0d:cf:c2:c2:15: 29:aa:59:f2:5f:ce:b4:69:30:44:ed:fd:82:4b:ff:5d:21:dc: 87:78:1f:e6:dd:61:22:09:aa:56:3d:db:41:73:c3:e9:38:fc: 4c:c4:dc:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIdANx9E7JeqtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk YWNkYmYyOGQtZGZiYS00NGRmLWJlZmEtNDRmMmIyMDhhY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx00s1tppuNT88OuCN1iks32VQjbfwTn4ZXG p4LMfFxbAzjNZWOLcMU0lzulyk5GWPol4CxREul0g5+MndJuniZez+QcBWUymVAz P0kgqSsHJK2caLBiGh6UCAxZmOt409CCd1RCUjZ/lDehba3u/KFY1iQqXOM5aGCy PcfOkrbvV+5CJ1OGozxPcSste3sXm1xo4klbMfLBmu4+pnx+SErvYX+gT5eVwkHl RnzV/3JNjO5kT6X2L6wDtriLQUzlyxWXknd4/ifFLyv2sGwtDfazRHrnqN7KgD0x 7RF8YqsldCZnDC7xcfwKioxQ7QwJ1Ip4rnqytgEZq3DbMA20ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyzWl6rKK6Oy7bUDpNzUl9LBoGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDMxNzI0NWEtNDg5Zi0z ZjY2LTlmMDYtOTA2NDU0MDMxN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ATpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrQMbznwEK+r1U1NxMH7yfOxZil4RGdMN1BXL7cjCA6GFB5h3xZCzWU lA+Mn8g9qsaDIpHAfsK1trCCCgpXEwMSeTpoO7/WoOxFKW8OQJ55Q1sZ28ij7+Mw FlZwCFfLQbEbuVGERJP5PCExhNh7OiMZvVt5MDD+LgRu51ste6ASVHlInkXs0nsA nEIBxzxgetWnZ1n0Ynhq/0oDde496EG/xVQHXn65l2yJJpkISjVT7jvQzGCXo2YE yhRApXaEXbo6uuWLMWsLFLvloc7IjIiOrG8Nz8LCFSmqWfJfzrRpMETt/YJL/10h 3Id4H+bdYSIJqlY920Fzw+k4/EzE3EM= -----END CERTIFICATE-----Generated at Sun Apr 27 04:19:50 2025 by rpki-client