$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/860b90f1-7aab-3845-8eae-0ee7f20cfb4d.roa File: 860b90f1-7aab-3845-8eae-0ee7f20cfb4d.roa (raw, json) Hash identifier: 7BohtnV/eElGpAxmC5hy/zQndTBDZHxbz8jB3LVvcgc= Subject key identifier: DA:93:7B:AD:2F:6B:94:06:25:A5:54:AB:DE:46:B8:68:E8:A7:53:61 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246FCF39AC8948538985D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/860b90f1-7aab-3845-8eae-0ee7f20cfb4d.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 173.52.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:fc:f3:9a:c8:94:85:38:98:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=a7c93800-36bc-4748-ac39-6dcc2ce03519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:19:ed:98:52:25:26:a6:06:f9:a0:e7:dc:3f: f3:e7:c8:68:a9:5e:2b:6c:54:1e:3f:71:fc:33:79: 1b:d4:12:b7:c2:ef:0d:ec:49:59:75:28:d7:65:78: 56:81:48:05:39:a9:a0:1e:7a:52:86:38:5c:5c:06: 3f:31:a5:92:25:0e:98:5d:66:b0:9b:28:63:86:1e: ff:8e:63:40:67:05:10:f3:55:db:ea:04:c8:3f:39: 3b:df:5d:5c:5a:97:d9:15:9c:31:a1:99:ad:b4:32: 5e:0d:27:1b:03:af:3a:fc:b9:89:b9:e9:59:de:80: a9:5c:97:4d:5d:fc:e0:50:e3:be:b3:01:13:c3:93: b1:b2:f5:3e:c5:0c:fd:d2:07:cb:31:ae:0a:48:74: a8:21:cc:e1:0b:c5:37:c2:68:c7:09:2f:a9:7b:cc: 9c:b8:70:05:20:f8:42:9f:c8:4f:cc:1a:02:93:58: f6:12:e3:f2:ca:16:36:ea:9c:f8:6a:fd:7f:80:12: d8:e5:4c:ba:da:e0:85:54:f8:dd:ee:c3:46:fd:b3: d4:b1:69:d7:06:c7:5e:41:35:48:09:e5:39:d6:9a: b1:1a:03:f2:5e:8f:d0:5b:25:36:a8:02:5b:3f:8d: a8:c0:db:db:ad:99:cb:65:a3:1d:b1:aa:56:06:30: 02:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:93:7B:AD:2F:6B:94:06:25:A5:54:AB:DE:46:B8:68:E8:A7:53:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/860b90f1-7aab-3845-8eae-0ee7f20cfb4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.52.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:15:77:76:57:44:65:34:9e:4f:93:48:17:eb:66:ea:e8:d5: bc:ae:fd:7b:a1:2b:2a:28:e6:cb:39:c0:96:c1:93:4c:d0:ef: cb:39:5b:b7:52:35:1f:7b:f7:5d:61:71:f2:9d:63:a9:21:b7: c4:44:82:90:63:6b:85:63:7a:03:16:de:cd:27:8c:53:ba:d2: cb:79:de:5b:cb:53:72:92:d4:fe:49:b9:93:bd:c0:f7:7f:0d: 63:0e:e6:d7:c6:3e:e0:b3:d8:32:a1:fb:40:f4:da:c8:af:2c: 83:a2:e0:50:62:25:8d:9c:2c:83:31:7c:fd:e6:b7:c9:b3:6f: 76:a1:b0:d2:44:9c:a5:20:76:28:8a:cd:3a:45:52:df:fd:21: 19:1d:32:36:ae:f2:1a:e8:49:b2:6a:76:03:3e:9b:09:de:06: 71:84:df:37:7e:c5:f2:5b:4d:99:2a:fa:a2:fa:65:19:2c:cf: f3:26:a1:48:b4:f7:12:92:1c:29:ff:0a:d4:82:a6:90:a3:ef: eb:fd:d9:5c:3c:34:86:c6:4d:8c:6a:c1:7e:92:e3:94:12:84: 31:a1:4e:62:86:f3:53:50:53:6e:93:5c:6b:b4:a9:13:9e:f2: ef:e8:64:7a:f0:f5:21:f9:75:f3:d9:3d:7e:f7:93:d6:4b:fa: 92:21:83:3b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRvzzmsiUhTiYXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YTdjOTM4MDAtMzZiYy00NzQ4LWFjMzktNmRjYzJjZTAzNTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhntmFIlJqYG+aDn3D/z58hoqV4rbFQeP3H8 M3kb1BK3wu8N7ElZdSjXZXhWgUgFOamgHnpShjhcXAY/MaWSJQ6YXWawmyhjhh7/ jmNAZwUQ81Xb6gTIPzk7311cWpfZFZwxoZmttDJeDScbA686/LmJuelZ3oCpXJdN XfzgUOO+swETw5OxsvU+xQz90gfLMa4KSHSoIczhC8U3wmjHCS+pe8ycuHAFIPhC n8hPzBoCk1j2EuPyyhY26pz4av1/gBLY5Uy62uCFVPjd7sNG/bPUsWnXBsdeQTVI CeU51pqxGgPyXo/QWyU2qAJbP42owNvbrZnLZaMdsapWBjACLwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNqTe60va5QGJaVUq95GuGjop1NhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODYwYjkwZjEtN2FhYi0z ODQ1LThlYWUtMGVlN2YyMGNmYjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArTQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALhV3dldEZTSeT5NIF+tm6ujVvK79e6ErKijmyznAlsGTTNDvyzlbt1I1 H3v3XWFx8p1jqSG3xESCkGNrhWN6AxbezSeMU7rSy3neW8tTcpLU/km5k73A938N Yw7m18Y+4LPYMqH7QPTayK8sg6LgUGIljZwsgzF8/ea3ybNvdqGw0kScpSB2KIrN OkVS3/0hGR0yNq7yGuhJsmp2Az6bCd4GcYTfN37F8ltNmSr6ovplGSzP8yahSLT3 EpIcKf8K1IKmkKPv6/3ZXDw0hsZNjGrBfpLjlBKEMaFOYobzU1BTbpNca7SpE57y 7+hkevD1Ifl189k9fveT1kv6kiGDOw== -----END CERTIFICATE-----Generated at Sat Apr 26 22:57:53 2025 by rpki-client