$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52c23ee1-da43-30b8-884c-97582767c533.roa File: 52c23ee1-da43-30b8-884c-97582767c533.roa (raw, json) Hash identifier: +XxyQ+Ms/fmr3YFtnehGeIYPagu5p3Vf5YIJ5O6kV6o= Subject key identifier: 09:23:58:5E:9B:FD:D8:3D:FF:02:56:82:1F:90:77:D3:EE:23:46:87 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244DC5C288930F0BBD2A98 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52c23ee1-da43-30b8-884c-97582767c533.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 141.152.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4d:c5:c2:88:93:0f:0b:bd:2a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=6bbe3028-f599-4c9e-84b3-84dd068e9aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6b:ef:3d:7a:2d:81:5e:2d:32:82:6f:f0:77: 5a:51:e7:19:3d:18:7f:71:63:77:aa:d1:fd:bc:ad: b7:93:42:9d:be:49:d8:6d:57:f5:20:70:cf:07:37: a6:6e:8c:b3:6e:d0:42:5b:5e:2b:59:19:af:c5:64: 55:25:e0:c9:22:d6:16:e1:2d:a3:d6:fa:cb:4f:9e: 95:ea:ac:3c:fc:c6:23:2d:45:4c:e9:f5:4d:f8:3c: b7:b0:aa:8b:bb:e5:75:df:e1:91:84:aa:71:bb:a2: dc:c8:2f:fa:10:5b:9b:4a:65:c4:74:e7:cf:f8:2e: 38:b5:a3:f6:47:ec:5f:3d:50:36:88:9f:7f:02:70: 9a:b2:7c:73:11:19:09:e5:d8:ce:c5:fc:9f:2a:4c: d4:a4:45:ed:cf:ee:e4:57:2e:12:c2:74:61:7a:bd: 20:33:12:e4:ef:9c:19:9d:52:da:54:9e:2e:7c:82: 94:18:bb:48:93:b6:5f:d0:6e:82:7d:7e:44:d7:7f: 1a:7b:32:1a:2e:ef:09:71:e0:26:23:44:f4:5f:3a: ce:13:e4:c5:96:84:74:2e:e4:c6:db:8e:73:1e:70: 1a:24:9f:18:cf:0b:ae:a1:22:a5:96:a5:38:5e:e8: 22:93:d1:8d:26:3d:f9:91:65:5c:2e:33:db:cb:7e: 85:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:23:58:5E:9B:FD:D8:3D:FF:02:56:82:1F:90:77:D3:EE:23:46:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52c23ee1-da43-30b8-884c-97582767c533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.152.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:17:ca:9e:df:22:0c:ed:a9:a6:ae:7f:2d:f7:ad:5b:88:18: 29:69:01:b7:57:e0:3f:8f:5d:90:90:3b:95:08:e9:a5:52:47: d6:16:4f:1f:9b:5a:61:5c:65:4f:a5:3a:15:a9:f0:d3:a6:ac: 23:cb:f1:91:4a:5c:80:bb:5f:5e:fc:7d:6d:ab:1e:5b:ea:22: 3a:b0:2b:6e:0a:61:bf:ca:44:70:f8:14:4c:5d:45:ce:e2:60: f0:10:e4:22:68:44:94:c5:a8:65:b2:36:74:a6:4d:c3:fd:fc: cf:a0:19:2f:0d:2f:a5:30:d0:23:78:37:c3:7b:14:8d:32:6b: 89:74:96:01:3b:c3:1f:49:c6:b3:25:f8:94:2f:1a:f1:b6:10: 10:e2:41:19:63:a6:8b:13:8b:5b:cf:e6:5d:b3:a3:37:23:f6: 93:b3:a5:1a:e4:3e:25:57:d0:2c:e8:96:dd:26:a8:20:ba:98: b6:59:c1:8a:b6:e9:95:a8:fa:0c:7a:dd:69:8d:95:0b:e6:e1: a1:61:80:23:68:13:e3:ec:3f:6d:61:0a:0e:7c:95:e8:a2:1d: f6:bd:fc:21:07:eb:7f:75:db:bb:f3:f9:68:29:18:49:9e:83: cb:6f:e9:d7:84:28:8d:a1:92:87:d7:04:19:85:b6:48:c4:cb: a8:a0:93:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJE3FwoiTDwu9KpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NmJiZTMwMjgtZjU5OS00YzllLTg0YjMtODRkZDA2OGU5YWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmvvPXotgV4tMoJv8HdaUecZPRh/cWN3qtH9 vK23k0KdvknYbVf1IHDPBzemboyzbtBCW14rWRmvxWRVJeDJItYW4S2j1vrLT56V 6qw8/MYjLUVM6fVN+Dy3sKqLu+V13+GRhKpxu6LcyC/6EFubSmXEdOfP+C44taP2 R+xfPVA2iJ9/AnCasnxzERkJ5djOxfyfKkzUpEXtz+7kVy4SwnRher0gMxLk75wZ nVLaVJ4ufIKUGLtIk7Zf0G6CfX5E138aezIaLu8JceAmI0T0XzrOE+TFloR0LuTG 245zHnAaJJ8YzwuuoSKllqU4Xugik9GNJj35kWVcLjPby36F/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkjWF6b/dg9/wJWgh+Qd9PuI0aHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTJjMjNlZTEtZGE0My0z MGI4LTg4NGMtOTc1ODI3NjdjNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZgRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwXyp7fIgztqaaufy33rVuIGClpAbdX4D+PXZCQO5UI6aVSR9YWTx+b WmFcZU+lOhWp8NOmrCPL8ZFKXIC7X178fW2rHlvqIjqwK24KYb/KRHD4FExdRc7i YPAQ5CJoRJTFqGWyNnSmTcP9/M+gGS8NL6Uw0CN4N8N7FI0ya4l0lgE7wx9JxrMl +JQvGvG2EBDiQRljposTi1vP5l2zozcj9pOzpRrkPiVX0Czolt0mqCC6mLZZwYq2 6ZWo+gx63WmNlQvm4aFhgCNoE+PsP21hCg58leiiHfa9/CEH639127vz+WgpGEme g8tv6deEKI2hkofXBBmFtkjEy6igk1A= -----END CERTIFICATE-----Generated at Sat Apr 26 22:59:43 2025 by rpki-client