$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbaf091c-9c87-392f-b45b-1620fdf3058c.roa File: dbaf091c-9c87-392f-b45b-1620fdf3058c.roa (raw, json) Hash identifier: FQHTBqZ9TkNT5UY2aQ9P2chwOvq/yUU8nML/WPz0aAA= Subject key identifier: 55:3E:1B:D0:23:52:14:60:0E:D9:58:B4:81:D1:8B:B9:5C:40:09:13 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858499D108079C144894E8881CE00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbaf091c-9c87-392f-b45b-1620fdf3058c.roa Signing time: Tue 22 Apr 2025 19:08:59 +0000 ROA not before: Tue 22 Apr 2025 19:08:59 +0000 ROA not after: Mon 21 Jul 2025 19:08:59 +0000 asID: 6167 IP address blocks: 97.221.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:10:80:79:c1:44:89:4e:88:81:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 22 19:08:59 2025 GMT Not After : Jul 21 19:08:59 2025 GMT Subject: CN=1d2b4a31-ea93-437c-9d04-dce277404b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:a9:d2:29:b0:11:60:7f:5f:b8:06:d8:9f: 38:b7:1e:98:1b:a7:f7:04:bb:19:46:62:05:fc:48: 96:1b:19:82:dd:b0:8a:a3:ff:e1:04:b5:03:9b:f7: 2a:95:d0:ce:f3:5d:58:d8:12:55:fc:ec:6c:2f:b8: 59:78:73:68:0e:48:69:a8:78:17:4a:dd:f2:e2:32: 98:e8:5a:d9:23:9a:9d:4e:ef:81:ff:e5:b9:6f:ac: 0b:cb:db:2c:57:a7:6c:24:96:b9:58:72:e0:5a:7b: 1f:b7:83:c2:a5:7b:11:dc:93:14:be:cd:5b:5d:b9: 1a:2f:90:34:05:ef:0a:4f:49:90:9f:09:50:e8:4d: 25:32:4f:07:f3:71:c6:4e:a7:c0:ba:90:cd:76:1e: c9:18:57:12:3d:29:6f:eb:84:f4:96:8e:3f:75:b5: 6a:44:71:d6:e0:22:18:d2:e1:70:cd:13:47:ea:b8: 84:3c:3f:92:4b:e4:23:97:d3:c3:d2:59:16:bd:a6: e0:ad:93:49:24:78:21:2b:6a:10:4d:48:09:23:aa: 88:80:af:6a:f4:8f:6b:da:5a:65:f9:01:09:02:ab: fe:c2:2c:1c:c8:d1:35:70:c2:94:f8:a2:a1:f4:37: 8b:d9:57:ea:9d:55:97:28:9d:98:00:84:ba:9c:1f: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3E:1B:D0:23:52:14:60:0E:D9:58:B4:81:D1:8B:B9:5C:40:09:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbaf091c-9c87-392f-b45b-1620fdf3058c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.221.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:90:79:52:87:e9:06:aa:38:78:5f:5b:48:66:9f:78:72:29: ba:4e:f3:11:f7:c8:de:0e:6c:39:dd:20:63:0f:f0:66:d9:72: db:73:1d:3b:0f:c9:a1:65:7c:b3:e2:1b:a3:12:b5:93:e6:f6: 4f:ce:cf:f0:e9:cd:be:f4:18:32:0c:3d:fd:47:cf:08:5d:85: 55:05:ea:1d:aa:fe:ff:1c:21:e4:45:f5:18:64:87:3f:b5:79: 3e:d3:06:66:9d:a1:78:d8:e3:68:e9:87:58:eb:95:d8:da:2d: 38:78:fa:f5:4a:bc:50:45:99:df:71:93:bf:fe:1d:40:cc:7c: 0b:38:2e:76:57:80:55:71:d4:f1:cf:30:c1:1a:70:d4:62:43: 56:4b:1c:b8:ea:03:34:36:af:8d:b1:2c:25:8b:69:15:e7:9a: 6b:82:da:b2:dd:35:8c:29:bc:f3:96:df:bb:35:fc:ba:66:9a: 83:f9:7d:17:89:48:42:cc:54:c6:f0:00:3b:e8:65:43:95:18: 4e:78:ca:4c:66:83:72:a2:9c:1c:0a:c5:df:8e:07:c1:87:8d: 0d:39:f1:f5:1d:8a:8f:c4:91:cf:eb:5a:e6:a6:79:da:e0:be: ab:a5:83:d1:1c:d0:52:39:d3:82:59:3c:1b:1b:64:f4:e8:02: 4b:d4:8e:70 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmdEIB5wUSJToiBzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyMjE5MDg1OVoXDTI1MDcyMTE5MDg1OVowLzEtMCsGA1UEAxMk MWQyYjRhMzEtZWE5My00MzdjLTlkMDQtZGNlMjc3NDA0YjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6up0imwEWB/X7gG2J84tx6YG6f3BLsZRmIF /EiWGxmC3bCKo//hBLUDm/cqldDO811Y2BJV/OxsL7hZeHNoDkhpqHgXSt3y4jKY 6FrZI5qdTu+B/+W5b6wLy9ssV6dsJJa5WHLgWnsft4PCpXsR3JMUvs1bXbkaL5A0 Be8KT0mQnwlQ6E0lMk8H83HGTqfAupDNdh7JGFcSPSlv64T0lo4/dbVqRHHW4CIY 0uFwzRNH6riEPD+SS+Qjl9PD0lkWvabgrZNJJHghK2oQTUgJI6qIgK9q9I9r2lpl +QEJAqv+wiwcyNE1cMKU+KKh9DeL2VfqnVWXKJ2YAIS6nB9sTQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFU+G9AjUhRgDtlYtIHRi7lcQAkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGJhZjA5MWMtOWM4Ny0z OTJmLWI0NWItMTYyMGZkZjMwNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYd0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEArJB5UofpBqo4eF9bSGafeHIpuk7zEffI3g5sOd0gYw/wZtly23MdOw/J oWV8s+IboxK1k+b2T87P8OnNvvQYMgw9/UfPCF2FVQXqHar+/xwh5EX1GGSHP7V5 PtMGZp2heNjjaOmHWOuV2NotOHj69Uq8UEWZ33GTv/4dQMx8CzgudleAVXHU8c8w wRpw1GJDVkscuOoDNDavjbEsJYtpFeeaa4Last01jCm885bfuzX8umaag/l9F4lI QsxUxvAAO+hlQ5UYTnjKTGaDcqKcHArF344HwYeNDTnx9R2Kj8SRz+ta5qZ52uC+ q6WD0RzQUjnTglk8Gxtk9OgCS9SOcA== -----END CERTIFICATE-----Generated at Sun Apr 27 10:14:03 2025 by rpki-client