$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/862aa735-b2f1-3e2b-954a-0ebcfe82fe10.roa File: 862aa735-b2f1-3e2b-954a-0ebcfe82fe10.roa (raw, json) Hash identifier: GcpS66BfV1N6Mh2/zV16G8yZFwHtI9gkKpB9UEW/O+M= Subject key identifier: D7:A1:4D:7A:12:7F:2E:80:44:42:A6:8C:82:1A:D6:F2:04:ED:1D:DA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246FBDB54C1149CF9DA7A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/862aa735-b2f1-3e2b-954a-0ebcfe82fe10.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 100.11.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:fb:db:54:c1:14:9c:f9:da:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=7cdfdb26-e356-40a3-acdc-f7b2c2462063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7c:56:fa:5a:fa:89:bc:1f:e6:a9:88:67:76: 57:5e:ac:e2:7a:21:57:a8:0b:8f:95:8c:9d:c0:a8: 45:dc:bc:77:14:a1:65:c8:1e:c2:1f:75:45:04:f7: f5:71:d6:2e:fc:52:ad:37:67:35:55:54:6e:cc:30: 73:c5:3d:e9:47:b5:6f:9a:ca:b4:1e:37:ef:42:35: ef:ee:a0:ba:25:e5:1d:c7:e3:81:d5:80:57:1a:63: f5:d3:00:21:7a:cd:19:f7:92:42:bf:fe:69:63:c4: 1b:7d:53:db:a8:86:45:6a:7a:7e:de:c0:7c:a1:3e: b6:00:a9:21:47:7c:2f:c9:03:c4:32:bf:45:1e:a5: ba:57:3b:5a:06:8b:a0:d7:23:be:e6:60:45:04:7c: d1:14:f6:b7:7e:72:04:54:47:d7:a7:5e:5d:d4:c4: fd:c3:1f:b4:d9:f8:74:65:57:8c:9e:73:a2:3e:e9: 26:80:b4:f9:01:74:b5:c1:7d:02:e5:87:94:81:3e: a6:5a:89:f3:25:05:80:60:25:6f:70:20:96:5e:16: 1c:cf:62:9c:bf:11:73:34:be:f9:c5:dc:55:ae:00: 1f:0c:ae:16:c9:a1:c6:a4:4a:b5:79:97:da:d5:f8: ca:42:97:9c:b2:03:5d:5e:6b:89:d8:fc:ab:d2:8e: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A1:4D:7A:12:7F:2E:80:44:42:A6:8C:82:1A:D6:F2:04:ED:1D:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/862aa735-b2f1-3e2b-954a-0ebcfe82fe10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.11.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c7:46:e3:64:bf:af:2c:b4:df:3f:03:0b:98:a6:a5:3c:52: 14:be:c4:8f:b0:d1:1b:94:0c:12:b0:25:9b:db:60:1e:b4:fa: f8:fd:0b:88:8a:5a:e4:81:a3:7d:6f:34:74:4f:a3:dd:90:2a: 83:f9:bc:9c:4b:b0:a1:bb:35:d5:d4:28:1a:0c:88:e0:4a:5d: 67:e1:e8:a1:76:3a:88:f5:07:db:fe:02:3b:d1:40:7c:fa:fc: 35:12:51:f2:73:b7:cf:9a:ee:36:69:ce:83:89:5b:31:83:b7: 4e:48:d0:c3:34:9b:6e:20:b5:21:c3:44:0f:ed:a6:91:2c:2b: 60:6d:2b:47:e3:a2:6f:b2:3c:43:54:b1:01:89:6b:17:37:2d: 13:c5:1b:29:46:52:97:48:95:be:f2:62:52:6c:5a:ff:f4:9b: fb:f7:84:67:61:c6:cb:9a:27:b7:08:62:48:7b:87:74:4a:fc: 80:1c:7e:b0:db:48:38:bf:b4:4c:d6:59:6c:65:4a:72:c4:be: c6:50:fd:ed:38:20:2c:7c:89:c9:78:ee:43:42:0d:82:f4:a3: a2:20:d7:42:c9:17:37:5f:fb:fe:45:42:26:cc:f1:37:9b:bc: f4:ec:85:04:9f:76:7e:f3:24:c5:96:bf:28:04:6b:92:f6:fe: d1:9d:2b:38 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRvvbVMEUnPnaeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk N2NkZmRiMjYtZTM1Ni00MGEzLWFjZGMtZjdiMmMyNDYyMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnxW+lr6ibwf5qmIZ3ZXXqzieiFXqAuPlYyd wKhF3Lx3FKFlyB7CH3VFBPf1cdYu/FKtN2c1VVRuzDBzxT3pR7Vvmsq0HjfvQjXv 7qC6JeUdx+OB1YBXGmP10wAhes0Z95JCv/5pY8QbfVPbqIZFanp+3sB8oT62AKkh R3wvyQPEMr9FHqW6VztaBoug1yO+5mBFBHzRFPa3fnIEVEfXp15d1MT9wx+02fh0 ZVeMnnOiPukmgLT5AXS1wX0C5YeUgT6mWonzJQWAYCVvcCCWXhYcz2KcvxFzNL75 xdxVrgAfDK4WyaHGpEq1eZfa1fjKQpecsgNdXmuJ2Pyr0o7qdQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNehTXoSfy6AREKmjIIa1vIE7R3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODYyYWE3MzUtYjJmMS0z ZTJiLTk1NGEtMGViY2ZlODJmZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZAswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgMdG42S/ryy03z8DC5impTxSFL7Ej7DRG5QMErAlm9tgHrT6+P0LiIpa 5IGjfW80dE+j3ZAqg/m8nEuwobs11dQoGgyI4EpdZ+HooXY6iPUH2/4CO9FAfPr8 NRJR8nO3z5ruNmnOg4lbMYO3TkjQwzSbbiC1IcNED+2mkSwrYG0rR+Oib7I8Q1Sx AYlrFzctE8UbKUZSl0iVvvJiUmxa//Sb+/eEZ2HGy5ontwhiSHuHdEr8gBx+sNtI OL+0TNZZbGVKcsS+xlD97TggLHyJyXjuQ0INgvSjoiDXQskXN1/7/kVCJszxN5u8 9OyFBJ92fvMkxZa/KARrkvb+0Z0rOA== -----END CERTIFICATE-----Generated at Sat Apr 26 22:55:07 2025 by rpki-client