$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a776614a-b1fe-3fff-b36e-9c1d0f6ff26a.roa File: a776614a-b1fe-3fff-b36e-9c1d0f6ff26a.roa (raw, json) Hash identifier: Mgj+e4IKOOAdXyRJ0dxXFkQYIhs1PfOj2K0Qj4j+3p4= Subject key identifier: CA:F1:86:74:94:26:BD:74:A4:20:44:2F:A6:2F:75:8C:68:96:29:A9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584964845E01A88162A8D4EF58C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a776614a-b1fe-3fff-b36e-9c1d0f6ff26a.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 6167 IP address blocks: 75.197.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:5e:01:a8:81:62:a8:d4:ef:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=d4808704-06b3-4e5a-acf2-824cd2c21b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7a:6a:94:a6:79:30:a6:d2:0e:5e:d8:5b:e6: 77:fd:66:a6:1b:59:8a:02:39:16:7f:ca:7b:15:da: 33:b7:58:91:29:6a:6f:6d:19:f1:e0:85:54:2b:66: ce:28:13:bd:07:8a:69:a7:99:89:c4:ad:27:ef:5c: fb:34:67:b1:1a:14:d4:b0:e4:ed:0c:23:65:2b:b6: 9c:ca:9d:e9:b7:47:f7:8a:34:16:7a:61:d6:69:90: c3:59:07:75:d7:fc:ea:1a:be:99:db:31:fa:1e:cc: 77:fb:6d:16:31:19:57:e2:32:8c:02:c1:08:b2:19: 2a:de:a8:e6:0b:8a:00:26:b7:53:a5:d6:ea:be:27: 9d:a6:86:8b:51:96:69:c1:0e:cc:55:55:27:f8:e8: 4b:34:0d:e4:10:8f:dc:40:9a:f0:7d:f0:af:0e:a6: 3e:99:30:7a:38:8a:e9:1f:52:07:f5:83:af:ae:39: 31:c1:3d:7c:5f:40:77:ad:25:37:65:7a:6d:6d:4a: 77:99:c4:72:83:3a:3b:55:96:97:c0:78:b2:f6:80: 53:c8:c8:51:21:e6:62:54:05:24:d5:dc:7d:bf:38: 67:b5:c6:63:b1:e2:e0:3f:48:61:f8:e8:37:14:73: 97:a7:b6:57:f1:bc:9f:b5:a6:40:01:bc:8f:96:0b: 57:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F1:86:74:94:26:BD:74:A4:20:44:2F:A6:2F:75:8C:68:96:29:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a776614a-b1fe-3fff-b36e-9c1d0f6ff26a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 75.197.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:0a:81:e3:9b:b7:2f:c6:f2:ed:30:e7:8c:56:00:b9:0c:e7: d3:92:05:af:94:d1:46:b1:78:54:6e:f8:7f:ea:a3:b9:2c:e4: 8b:63:9c:03:73:c4:52:fd:84:c9:68:d1:fb:b5:a5:e0:33:00: 3f:d9:bd:d0:2c:7c:6a:34:ba:7a:93:35:fe:65:ac:e2:be:f8: f8:e8:92:d0:06:f0:62:40:fd:86:6c:40:4e:4c:6a:52:c0:aa: f7:ca:01:c4:ed:a5:33:a5:63:fd:38:bd:cf:5e:c8:66:80:b5: db:11:81:11:4e:7d:a0:69:94:e8:90:69:f0:e7:28:61:58:ad: 3e:d7:43:b1:89:08:39:ba:4c:7f:72:e1:6f:ee:29:ff:ce:cc: a2:75:dd:f1:fd:17:72:ef:e7:95:fb:5d:34:6a:fa:dd:4c:7a: 5a:f8:6b:d9:05:54:83:a9:ff:c2:e8:a8:d5:d4:06:38:fe:bb: 68:d1:3e:45:f4:d2:cf:57:13:3a:64:79:1b:36:3d:3d:80:c6: d3:8f:cd:52:07:d4:5a:df:02:39:db:1b:cb:68:a7:19:24:d5: 5b:37:2a:b3:2a:aa:da:9f:d5:b7:47:63:46:c7:9c:37:0f:de: b4:e1:1b:d9:9d:6a:48:1a:f2:dc:eb:98:40:7f:23:12:59:43: 0e:ff:f5:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhF4BqIFiqNTvWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZDQ4MDg3MDQtMDZiMy00ZTVhLWFjZjItODI0Y2QyYzIxYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3pqlKZ5MKbSDl7YW+Z3/WamG1mKAjkWf8p7 Fdozt1iRKWpvbRnx4IVUK2bOKBO9B4ppp5mJxK0n71z7NGexGhTUsOTtDCNlK7ac yp3pt0f3ijQWemHWaZDDWQd11/zqGr6Z2zH6Hsx3+20WMRlX4jKMAsEIshkq3qjm C4oAJrdTpdbqviedpoaLUZZpwQ7MVVUn+OhLNA3kEI/cQJrwffCvDqY+mTB6OIrp H1IH9YOvrjkxwT18X0B3rSU3ZXptbUp3mcRygzo7VZaXwHiy9oBTyMhRIeZiVAUk 1dx9vzhntcZjseLgP0hh+Og3FHOXp7ZX8byftaZAAbyPlgtXEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrxhnSUJr10pCBEL6YvdYxolimpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTc3NjYxNGEtYjFmZS0z ZmZmLWIzNmUtOWMxZDBmNmZmMjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS8XkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgKgeObty/G8u0w54xWALkM59OSBa+U0UaxeFRu+H/qo7ks5ItjnANz xFL9hMlo0fu1peAzAD/ZvdAsfGo0unqTNf5lrOK++PjoktAG8GJA/YZsQE5MalLA qvfKAcTtpTOlY/04vc9eyGaAtdsRgRFOfaBplOiQafDnKGFYrT7XQ7GJCDm6TH9y 4W/uKf/OzKJ13fH9F3Lv55X7XTRq+t1Melr4a9kFVIOp/8LoqNXUBjj+u2jRPkX0 0s9XEzpkeRs2PT2AxtOPzVIH1FrfAjnbG8topxkk1Vs3KrMqqtqf1bdHY0bHnDcP 3rThG9mdakga8tzrmEB/IxJZQw7/9S0= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:44 2025 by rpki-client