$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d43005aa-8e40-3f0b-b26d-95cb53a14a22.roa File: d43005aa-8e40-3f0b-b26d-95cb53a14a22.roa (raw, json) Hash identifier: CxB5FewVwzTvl4eUat8q+/+BjWXhEoKiHA0SYOncCLg= Subject key identifier: 41:1B:47:E2:D7:C5:7F:34:8A:EE:B0:06:01:1E:A8:2C:A9:73:2F:85 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858497C3EF5EA7585447DC4BE7A60 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d43005aa-8e40-3f0b-b26d-95cb53a14a22.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 6167 IP address blocks: 97.200.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f5:ea:75:85:44:7d:c4:be:7a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=599906e2-9946-484c-83d9-2f19ab89f2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ac:b9:a2:a7:26:e2:11:58:64:d7:40:0f:c7: 52:2b:32:ea:55:73:99:a5:e7:cc:2c:d0:41:59:4e: e1:56:54:05:99:40:03:55:7e:11:b1:d3:9c:eb:a1: f9:37:58:e2:3e:ef:42:cd:54:c5:9d:87:13:5e:16: 33:bb:be:82:1a:59:69:73:4f:bc:22:f0:8e:b8:41: c2:c3:44:10:fe:b1:4f:8f:45:17:41:45:69:99:6e: 9d:4d:6d:e3:7f:53:65:67:06:25:9d:7f:25:60:aa: b0:45:38:43:40:2d:29:1a:c4:21:ad:bf:59:b4:b6: 68:30:68:50:c3:78:4e:36:eb:32:27:2d:91:9f:b4: cc:ca:da:8f:7f:21:2f:1f:e5:33:25:33:96:bd:56: 67:2c:58:f0:61:a6:ca:3e:10:61:4b:3a:58:c4:2a: de:69:2b:da:6e:aa:c1:2f:9e:ec:ea:91:ef:c7:6c: 0a:23:a1:f9:39:60:bf:b9:95:64:9f:c6:45:da:22: 61:46:85:c3:a3:16:7f:7f:33:b0:ae:04:08:f7:a1: 86:9f:75:4a:7b:47:5b:b2:0f:01:04:45:ef:6d:63: ff:fd:30:03:0d:5b:1a:71:0f:ca:c0:e8:1d:20:b3: ac:7d:62:37:e7:d0:23:a8:01:89:62:98:31:01:2d: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1B:47:E2:D7:C5:7F:34:8A:EE:B0:06:01:1E:A8:2C:A9:73:2F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d43005aa-8e40-3f0b-b26d-95cb53a14a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.200.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:56:38:3e:25:b3:bc:4b:77:a1:47:ff:48:2e:48:88:02:bb: 03:50:2b:a8:7a:4c:00:4a:7e:8b:26:87:a7:89:14:18:6b:ab: 76:1b:e6:50:49:3c:f9:0d:bd:49:a8:18:ca:32:6d:25:40:33: 80:fd:0c:ab:37:4d:5c:75:1a:5b:5a:08:a6:70:51:15:25:84: a3:0a:01:55:8b:87:01:0b:01:52:15:a7:82:0e:b4:2f:e5:27: 15:ff:d3:a3:bc:61:30:bf:6f:c2:f0:da:a9:77:fb:de:1a:fc: ad:c9:cb:9a:71:80:62:d0:dd:35:1c:38:a1:51:8e:6c:1a:2e: 44:23:ba:ae:f3:35:a5:eb:cd:21:1c:6a:63:c7:e7:48:af:d3: f0:9e:a1:1d:c7:43:2e:22:76:db:e8:fd:49:58:cd:9f:76:0c: 04:12:df:52:05:76:f0:fb:4b:f5:75:6c:44:75:fc:1b:56:91: 54:1a:89:8d:45:0f:04:07:70:39:51:f2:d5:2a:60:9e:c9:4e: a2:29:a6:e6:05:92:38:1c:be:b2:a8:08:7e:a8:63:35:96:e6: c6:35:f4:38:1a:dc:9b:b8:d8:9b:c4:bf:78:70:1a:01:22:e3: 60:aa:42:56:5d:54:79:d7:ef:63:dd:33:d1:dd:e5:fa:ca:f8: 3d:1b:e8:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvXqdYVEfcS+emAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk NTk5OTA2ZTItOTk0Ni00ODRjLTgzZDktMmYxOWFiODlmMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgay5oqcm4hFYZNdAD8dSKzLqVXOZpefMLNBB WU7hVlQFmUADVX4RsdOc66H5N1jiPu9CzVTFnYcTXhYzu76CGllpc0+8IvCOuEHC w0QQ/rFPj0UXQUVpmW6dTW3jf1NlZwYlnX8lYKqwRThDQC0pGsQhrb9ZtLZoMGhQ w3hONusyJy2Rn7TMytqPfyEvH+UzJTOWvVZnLFjwYabKPhBhSzpYxCreaSvabqrB L57s6pHvx2wKI6H5OWC/uZVkn8ZF2iJhRoXDoxZ/fzOwrgQI96GGn3VKe0dbsg8B BEXvbWP//TADDVsacQ/KwOgdILOsfWI359AjqAGJYpgxAS10YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEbR+LXxX80iu6wBgEeqCypcy+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQzMDA1YWEtOGU0MC0z ZjBiLWIyNmQtOTVjYjUzYTE0YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYciAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpWOD4ls7xLd6FH/0guSIgCuwNQK6h6TABKfosmh6eJFBhrq3Yb5lBJ PPkNvUmoGMoybSVAM4D9DKs3TVx1GltaCKZwURUlhKMKAVWLhwELAVIVp4IOtC/l JxX/06O8YTC/b8Lw2ql3+94a/K3Jy5pxgGLQ3TUcOKFRjmwaLkQjuq7zNaXrzSEc amPH50iv0/CeoR3HQy4idtvo/UlYzZ92DAQS31IFdvD7S/V1bER1/BtWkVQaiY1F DwQHcDlR8tUqYJ7JTqIppuYFkjgcvrKoCH6oYzWW5sY19Dga3Ju42JvEv3hwGgEi 42CqQlZdVHnX72PdM9Hd5frK+D0b6Mw= -----END CERTIFICATE-----Generated at Sat Apr 26 22:54:33 2025 by rpki-client