$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70bef50b-8345-3ec3-b899-c4354bdff16b.roa File: 70bef50b-8345-3ec3-b899-c4354bdff16b.roa (raw, json) Hash identifier: YgMpgj38iI2pkLMios166508SJ/d8cJkvQxbqNX1Nog= Subject key identifier: 79:41:3D:EC:8F:F6:C7:D3:12:D4:9C:F1:88:6A:03:FE:08:34:82:13 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246D140CEA2D21F3F0E9200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70bef50b-8345-3ec3-b899-c4354bdff16b.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 100.2.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:d1:40:ce:a2:d2:1f:3f:0e:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=ae5949c3-c76e-4030-b197-f473f53b4582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c2:14:69:5e:e1:44:f9:9e:f4:97:39:c3:53: 4d:a9:b5:c7:18:84:45:df:1b:50:b6:3f:b6:d0:9d: bb:ea:15:75:31:5f:45:49:bb:de:78:61:97:cc:75: a7:3f:5c:48:fa:e0:e7:bf:9f:48:b7:ab:72:58:2e: a1:dd:5e:18:75:f5:ad:c9:6e:c8:05:0a:71:bc:eb: 56:b9:52:43:f1:20:29:2f:63:a1:ba:1c:a7:5e:63: 6e:50:82:ea:e0:f5:16:c6:55:3b:cb:fe:6f:a8:48: 4f:af:01:67:da:3a:7d:65:17:5e:ff:31:36:a3:4c: db:de:71:da:6e:00:be:82:57:cd:41:a6:76:32:02: bf:b1:d0:9b:e4:45:09:1d:68:89:02:ff:ef:27:4b: 41:62:70:cb:8d:62:86:13:0e:62:f6:bb:79:36:77: 67:78:02:f8:52:59:44:a7:66:cb:57:f7:1f:ae:22: a6:5f:f7:bc:2a:7e:22:a0:1a:51:01:86:a0:70:7e: 5f:7e:3e:7e:6e:fb:91:48:0d:f4:56:fa:84:c2:9f: be:27:b5:a1:8a:c6:4b:ce:d9:7f:68:17:72:72:e9: d1:29:57:5b:c9:31:09:fa:df:5f:85:ca:7f:b3:10: a0:c7:1e:29:c8:23:4f:94:97:d9:20:e5:6f:bd:71: a5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:41:3D:EC:8F:F6:C7:D3:12:D4:9C:F1:88:6A:03:FE:08:34:82:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70bef50b-8345-3ec3-b899-c4354bdff16b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.2.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:08:64:f5:52:a5:32:d1:bd:84:ff:a7:59:fd:5c:65:79:db: 2b:7a:9f:d1:de:97:f3:26:ab:1e:d2:a7:54:47:8d:3f:6d:dc: a4:3f:d5:b5:3f:cb:8a:c0:1f:0e:a5:64:86:9a:ec:57:a8:1b: ad:ed:b2:c4:52:81:2f:e2:ef:a2:b0:b0:4c:cb:d4:f7:30:9d: ae:76:a5:ed:c6:c0:78:d1:8a:14:8f:c5:2c:af:71:8c:76:94: 1a:b7:2e:91:23:9b:1c:65:df:80:9f:3d:5b:ee:2c:5f:97:3d: f1:cd:65:34:13:b3:aa:9b:87:fd:af:e8:60:8d:6c:fe:5a:02: a0:40:bc:e2:8f:65:d2:ff:10:bf:69:5d:b8:e1:b0:5b:2e:1d: 1e:b3:88:07:4a:a8:2a:6a:de:57:f0:76:91:38:ba:a6:94:39: fd:6b:ae:23:3b:95:7f:75:04:f9:bd:66:08:d0:e1:88:0b:aa: 59:9a:90:f0:b7:f3:8e:d2:75:38:50:86:17:00:5f:34:a2:6e: 48:97:7f:f1:be:08:6e:43:d1:88:cd:8e:b8:d1:53:8d:69:1b: d6:c4:02:db:61:01:7a:b4:88:82:74:3c:2b:78:c4:8f:07:bb: 7f:d7:c8:db:a2:33:2a:b2:62:63:0d:2d:9d:35:b7:80:69:a6: f5:96:e4:4e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRtFAzqLSHz8OkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YWU1OTQ5YzMtYzc2ZS00MDMwLWIxOTctZjQ3M2Y1M2I0NTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcIUaV7hRPme9Jc5w1NNqbXHGIRF3xtQtj+2 0J276hV1MV9FSbveeGGXzHWnP1xI+uDnv59It6tyWC6h3V4YdfWtyW7IBQpxvOtW uVJD8SApL2OhuhynXmNuUILq4PUWxlU7y/5vqEhPrwFn2jp9ZRde/zE2o0zb3nHa bgC+glfNQaZ2MgK/sdCb5EUJHWiJAv/vJ0tBYnDLjWKGEw5i9rt5NndneAL4UllE p2bLV/cfriKmX/e8Kn4ioBpRAYagcH5ffj5+bvuRSA30VvqEwp++J7WhisZLztl/ aBdycunRKVdbyTEJ+t9fhcp/sxCgxx4pyCNPlJfZIOVvvXGlFQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHlBPeyP9sfTEtSc8YhqA/4INIITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzBiZWY1MGItODM0NS0z ZWMzLWI4OTktYzQzNTRiZGZmMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZAIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAoghk9VKlMtG9hP+nWf1cZXnbK3qf0d6X8yarHtKnVEeNP23cpD/VtT/L isAfDqVkhprsV6gbre2yxFKBL+LvorCwTMvU9zCdrnal7cbAeNGKFI/FLK9xjHaU GrcukSObHGXfgJ89W+4sX5c98c1lNBOzqpuH/a/oYI1s/loCoEC84o9l0v8Qv2ld uOGwWy4dHrOIB0qoKmreV/B2kTi6ppQ5/WuuIzuVf3UE+b1mCNDhiAuqWZqQ8Lfz jtJ1OFCGFwBfNKJuSJd/8b4IbkPRiM2OuNFTjWkb1sQC22EBerSIgnQ8K3jEjwe7 f9fI26IzKrJiYw0tnTW3gGmm9ZbkTg== -----END CERTIFICATE-----Generated at Tue Apr 29 11:28:35 2025 by rpki-client