$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d544bc8-99f7-3ce3-85eb-4a94ef961b89.roa File: 5d544bc8-99f7-3ce3-85eb-4a94ef961b89.roa (raw, json) Hash identifier: 9PzyB7tASEeQc53KrJPz/MjKSigw9+Lb9BDxmVKJkQc= Subject key identifier: C0:79:56:2F:F3:E5:DF:E5:00:79:19:B4:0C:04:41:09:37:89:1B:04 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858496054202EF86CC9B4C8D1E280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d544bc8-99f7-3ce3-85eb-4a94ef961b89.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 6167 IP address blocks: 97.228.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:20:2e:f8:6c:c9:b4:c8:d1:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=2db3825d-2197-427c-b8f1-cde810161524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cd:3b:fa:91:5b:e3:6a:7e:bb:f4:8f:53:0f: 88:fa:bb:a4:aa:7f:ad:99:4e:16:a6:4c:e2:8f:b3: 4e:ff:dd:2b:e4:9f:f4:10:5e:a4:1c:89:f3:44:b7: 9d:d8:9e:cf:85:dd:b5:80:65:68:a4:8a:e0:0a:ce: 6a:c7:fd:00:06:0d:c9:eb:fc:d1:2b:e9:41:a0:26: 79:21:bb:2e:a8:80:9e:d7:4d:71:e4:19:64:c1:c5: d8:22:db:6c:e0:4a:92:46:42:3e:55:8c:9a:39:cb: f7:f2:ec:91:05:8b:7f:de:9d:9c:bf:21:24:54:35: fb:e3:36:e6:e6:a8:88:5e:62:21:4c:63:15:03:27: f0:7f:e9:15:44:33:8e:98:9d:39:29:82:50:03:07: 8c:6e:e2:5d:a3:ba:78:16:76:db:ba:3c:87:0f:56: 72:68:16:81:f9:aa:85:56:71:4b:80:a5:9e:e2:1b: 5a:e4:4d:e7:18:9f:e2:ec:9b:13:ea:fa:e1:19:73: 26:32:05:66:7c:c4:cd:f3:0b:03:65:80:fd:56:75: f9:76:4c:bc:a4:b9:fe:e2:b5:22:d5:3e:f1:69:d0: be:9d:a8:03:ad:b5:a2:ea:f5:9f:93:5d:de:70:d3: 04:78:ed:cc:82:6a:ef:18:72:21:6c:c5:93:a9:41: 99:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:79:56:2F:F3:E5:DF:E5:00:79:19:B4:0C:04:41:09:37:89:1B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d544bc8-99f7-3ce3-85eb-4a94ef961b89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.228.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:0b:f8:e8:2a:9b:5e:40:45:6a:50:35:20:e3:c3:56:05:6e: e5:34:b0:0b:bd:a6:44:69:7c:fb:89:86:01:1d:d5:5e:39:a8: 75:01:7e:45:7b:34:d6:89:da:f2:7e:be:ee:9f:9e:45:1a:01: 98:3c:52:39:ad:2d:02:37:2d:25:71:cd:9d:0d:de:ad:b1:70: cf:62:7a:3f:d3:c1:90:e4:e1:2f:36:09:49:62:45:56:0c:87: 8c:09:08:00:8f:92:42:c4:76:ef:7b:3c:81:10:44:a0:55:d2: d9:39:87:48:8c:df:57:85:28:40:03:7f:03:e1:86:84:d3:74: b2:f7:7e:41:3e:e7:bb:b2:6d:27:57:a5:e6:28:c0:8c:3b:80: 7d:72:01:e0:ca:cb:ce:8b:1d:c9:a9:7c:a0:87:20:5b:55:f3: d3:c8:e7:b2:c8:d4:0a:5f:21:d9:4d:fc:b1:e4:38:48:ef:82: 89:92:62:c7:56:90:a0:05:7a:36:4e:23:90:b4:87:1e:01:a1: 7c:d0:50:2f:ca:34:63:91:3b:28:01:2c:56:8d:ba:93:f1:24: 76:dd:05:4b:15:3c:0d:3c:3f:26:ce:d3:50:60:c2:99:60:a3: 61:51:24:ed:98:92:31:35:00:46:75:a7:33:f6:d8:eb:c0:3c: c3:be:49:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVCAu+GzJtMjR4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk MmRiMzgyNWQtMjE5Ny00MjdjLWI4ZjEtY2RlODEwMTYxNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM07+pFb42p+u/SPUw+I+rukqn+tmU4Wpkzi j7NO/90r5J/0EF6kHInzRLed2J7Phd21gGVopIrgCs5qx/0ABg3J6/zRK+lBoCZ5 IbsuqICe101x5BlkwcXYItts4EqSRkI+VYyaOcv38uyRBYt/3p2cvyEkVDX74zbm 5qiIXmIhTGMVAyfwf+kVRDOOmJ05KYJQAweMbuJdo7p4FnbbujyHD1ZyaBaB+aqF VnFLgKWe4hta5E3nGJ/i7JsT6vrhGXMmMgVmfMTN8wsDZYD9VnX5dky8pLn+4rUi 1T7xadC+nagDrbWi6vWfk13ecNMEeO3MgmrvGHIhbMWTqUGZ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMB5Vi/z5d/lAHkZtAwEQQk3iRsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWQ1NDRiYzgtOTlmNy0z Y2UzLTg1ZWItNGE5NGVmOTYxYjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYeQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQL+Ogqm15ARWpQNSDjw1YFbuU0sAu9pkRpfPuJhgEd1V45qHUBfkV7 NNaJ2vJ+vu6fnkUaAZg8UjmtLQI3LSVxzZ0N3q2xcM9iej/TwZDk4S82CUliRVYM h4wJCACPkkLEdu97PIEQRKBV0tk5h0iM31eFKEADfwPhhoTTdLL3fkE+57uybSdX peYowIw7gH1yAeDKy86LHcmpfKCHIFtV89PI57LI1ApfIdlN/LHkOEjvgomSYsdW kKAFejZOI5C0hx4BoXzQUC/KNGOROygBLFaNupPxJHbdBUsVPA08PybO01Bgwplg o2FRJO2YkjE1AEZ1pzP22OvAPMO+SdU= -----END CERTIFICATE-----Generated at Sat Apr 26 22:49:49 2025 by rpki-client