$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa File: a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa (raw, json) Hash identifier: ZjpWCarfdzMsWJw8k/g5LfGRknxLtLpv2t1Qypr7CUI= Subject key identifier: 06:81:38:7B:11:0C:AD:3A:92:5F:6A:14:93:98:D8:76:03:96:5A:66 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C24809241A088C210FE3D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 0 IP address blocks: 198.133.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:80:92:41:a0:88:c2:10:fe:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=68457b5f-dfc1-45c6-8eb6-887ab73bf1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0a:fb:d2:a1:13:6f:63:42:96:b2:dd:45:46: e1:88:e7:d0:81:87:f4:e1:b5:9e:85:7d:17:74:a9: dd:1c:18:75:52:1a:64:85:df:51:fa:2d:75:61:0f: ea:92:1a:cb:c4:05:1b:63:bc:d7:2d:d8:d8:fb:e2: fc:79:eb:b9:4f:82:f6:e4:2d:b9:8a:99:0b:31:2f: b1:a3:e2:6a:c9:29:7a:24:15:06:b4:16:47:b1:b9: f1:23:f0:3f:6b:65:f7:c6:4a:96:59:ab:b6:ca:af: 48:bd:9a:70:02:d9:b2:3d:e8:24:a1:62:a1:a2:c0: 63:99:49:78:9c:8e:84:f5:c1:3e:24:4d:ee:ff:c8: 0c:64:89:be:fb:6e:65:83:1b:80:53:ac:ed:90:8c: 25:39:52:b6:8b:ea:df:87:36:ac:08:83:77:fc:b1: fc:8b:ca:58:04:e6:4a:d5:76:0a:01:23:8a:1c:00: dd:61:31:b1:c4:90:d7:f8:49:11:9a:bb:35:06:64: c5:13:36:40:a3:e6:bb:78:cc:ff:8d:5f:ee:e0:a0: 8d:f9:fc:01:79:de:14:77:67:b6:7b:de:91:ef:66: d2:74:5b:73:26:8b:45:87:45:ae:f3:91:a2:a7:a5: 44:3b:41:8a:fa:a8:30:80:63:ef:94:d0:0d:9d:f0: b0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:81:38:7B:11:0C:AD:3A:92:5F:6A:14:93:98:D8:76:03:96:5A:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.133.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:cb:a5:9d:10:fc:39:73:62:16:60:dd:e9:a8:31:93:04:23: 87:70:00:85:62:17:c6:6d:c2:e9:13:4f:85:11:6f:fc:5e:02: 1e:77:b6:a0:5d:83:e6:ce:e0:2a:bb:50:1e:7a:c3:82:49:aa: e1:00:7f:43:d9:f2:03:ea:45:e1:78:d8:24:23:5c:95:c3:16: cc:5b:99:6b:53:44:e7:6b:08:35:4f:93:14:33:ea:dd:0c:0b: e8:0d:e6:30:ae:a6:b2:01:df:63:e2:cd:4d:d2:59:a3:d7:53: a7:07:48:33:5c:b2:d2:a3:20:b5:45:50:2a:05:99:39:2a:60: 19:71:41:ed:f8:5e:e5:a8:eb:fc:b5:c6:11:16:1b:f6:0b:6d: 46:6e:42:73:e4:86:d7:fa:0c:cf:c4:33:4f:bf:70:80:0a:45: 6a:0b:f2:8a:43:96:b1:f4:7e:4f:7c:5c:9c:71:73:f2:09:dd: 4a:ee:42:3a:76:95:08:e0:e0:cd:fc:40:62:b2:f9:4d:50:c2: 59:7c:98:b2:d9:b5:fe:99:7d:47:c6:e5:ea:83:6d:35:79:91: fe:e6:11:98:99:96:cc:00:93:40:98:b5:ae:4c:c6:89:76:7f: 73:98:cd:8a:09:1d:0d:f7:3c:ac:a2:13:99:ce:0b:d4:72:0c: ea:11:f6:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJICSQaCIwhD+PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk Njg0NTdiNWYtZGZjMS00NWM2LThlYjYtODg3YWI3M2JmMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgr70qETb2NClrLdRUbhiOfQgYf04bWehX0X dKndHBh1Uhpkhd9R+i11YQ/qkhrLxAUbY7zXLdjY++L8eeu5T4L25C25ipkLMS+x o+JqySl6JBUGtBZHsbnxI/A/a2X3xkqWWau2yq9IvZpwAtmyPegkoWKhosBjmUl4 nI6E9cE+JE3u/8gMZIm++25lgxuAU6ztkIwlOVK2i+rfhzasCIN3/LH8i8pYBOZK 1XYKASOKHADdYTGxxJDX+EkRmrs1BmTFEzZAo+a7eMz/jV/u4KCN+fwBed4Ud2e2 e96R72bSdFtzJotFh0Wu85Gip6VEO0GK+qgwgGPvlNANnfCwRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaBOHsRDK06kl9qFJOY2HYDllpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTRkNjgzNTItNjQ3My0z N2ZmLTlhNTktMWM4ZjNkZDc4NWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxoVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7LpZ0Q/DlzYhZg3emoMZMEI4dwAIViF8ZtwukTT4URb/xeAh53tqBd g+bO4Cq7UB56w4JJquEAf0PZ8gPqReF42CQjXJXDFsxbmWtTROdrCDVPkxQz6t0M C+gN5jCuprIB32PizU3SWaPXU6cHSDNcstKjILVFUCoFmTkqYBlxQe34XuWo6/y1 xhEWG/YLbUZuQnPkhtf6DM/EM0+/cIAKRWoL8opDlrH0fk98XJxxc/IJ3UruQjp2 lQjg4M38QGKy+U1Qwll8mLLZtf6ZfUfG5eqDbTV5kf7mEZiZlswAk0CYta5Mxol2 f3OYzYoJHQ33PKyiE5nOC9RyDOoR9ps= -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:37 2025 by rpki-client