$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/def61996-eb4a-3c89-954b-6902e2e3c57e.roa File: def61996-eb4a-3c89-954b-6902e2e3c57e.roa (raw, json) Hash identifier: zRHiW6i8S7UJIJYSDytKpcu6WB56jl/MbY1rlSeATwo= Subject key identifier: 21:F1:60:4D:C7:1E:BF:37:DC:63:BD:00:30:50:E9:D6:1E:BA:A9:FC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A00DADD420BAC0121A81B7000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/def61996-eb4a-3c89-954b-6902e2e3c57e.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 6167 IP address blocks: 97.133.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:dd:42:0b:ac:01:21:a8:1b:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=b875610c-ce19-4201-8e01-fe1658f2fb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:07:08:d3:84:ba:48:69:c7:b5:4b:ad:ba:54: 58:4e:86:cf:0c:c5:1c:f0:54:a4:eb:87:54:0a:f9: ad:e5:1f:e5:d6:e6:54:84:52:10:b6:90:20:cd:70: b8:fc:2d:96:57:ef:25:cd:d9:a4:8c:5b:66:bf:bb: df:70:d3:e1:c6:ce:b3:ca:6a:e2:6f:00:e7:b5:be: 0f:80:56:6c:5e:54:b1:de:2a:26:4d:81:1d:9e:cc: ef:72:55:f9:64:23:78:75:a6:74:67:c9:81:c8:dc: 05:c9:79:27:d4:fa:0d:16:82:7f:44:25:50:e3:5e: 55:5f:6d:4b:bc:75:a8:de:4b:ac:53:b9:8f:93:e0: 88:b8:ba:49:5f:8d:25:03:c8:e8:7e:08:0a:0e:fd: 05:05:f2:16:cd:21:04:39:77:f2:e4:9d:26:b5:70: 1f:f8:f8:0c:bc:c4:95:0e:04:2b:08:fd:45:22:37: 0b:7f:d5:8a:fa:9c:25:6a:5d:b0:0c:ae:2e:d3:13: b2:5f:3e:3a:bb:49:a5:5e:4f:bc:77:ff:8a:3b:5a: 93:1e:1b:79:72:d5:cc:2f:92:d4:a1:57:eb:bd:8b: b1:c6:fb:88:e1:13:8b:5c:f4:3a:57:b2:b6:82:dd: 1e:ca:61:e1:cf:f4:42:0e:a4:55:42:4e:2f:c7:8d: 84:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F1:60:4D:C7:1E:BF:37:DC:63:BD:00:30:50:E9:D6:1E:BA:A9:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/def61996-eb4a-3c89-954b-6902e2e3c57e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.133.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:5e:f5:d0:6d:ad:1f:aa:7b:5a:29:c8:74:44:69:0b:af:28: 50:30:93:0e:e2:30:71:6f:ea:91:1b:ad:a3:4d:0c:88:3a:6c: 8d:07:7f:42:78:62:66:f1:7d:3f:55:5d:c6:61:f1:4a:5b:c8: db:49:b0:35:0c:64:00:8a:f4:0e:92:ca:f9:83:11:5f:35:32: 86:c4:32:88:12:4b:1f:5e:6d:26:8c:ec:b0:78:37:dd:77:55: e0:83:ee:9b:e2:f1:2b:3c:f3:55:d1:a0:bf:cd:db:bb:73:50: c1:c0:93:ae:13:08:73:31:96:b5:17:9b:93:40:fa:67:6c:79: d1:79:52:b6:68:c5:a7:b1:5c:44:4b:f2:fb:ba:c8:41:c9:e2: 22:83:2a:dd:3b:98:35:7f:f9:a7:3d:b5:6b:2c:9c:58:40:20: 50:9c:2b:e2:6f:fc:be:9b:d4:85:8c:65:75:2f:1a:b1:e4:07: cd:fc:3b:61:c7:68:14:90:cb:10:fc:73:f1:04:3f:e8:b8:48: ff:ed:4d:31:30:0c:9f:a4:f0:b9:02:17:3f:42:ac:85:75:67: ea:38:40:71:64:a4:a8:ae:3a:bf:e6:02:69:aa:87:ea:5a:0e: d1:6b:c1:f1:78:8d:4a:37:29:69:ca:d0:ff:86:5c:af:b7:c9: 7b:cd:9e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2t1CC6wBIagbcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk Yjg3NTYxMGMtY2UxOS00MjAxLThlMDEtZmUxNjU4ZjJmYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAcI04S6SGnHtUutulRYTobPDMUc8FSk64dU Cvmt5R/l1uZUhFIQtpAgzXC4/C2WV+8lzdmkjFtmv7vfcNPhxs6zymribwDntb4P gFZsXlSx3iomTYEdnszvclX5ZCN4daZ0Z8mByNwFyXkn1PoNFoJ/RCVQ415VX21L vHWo3kusU7mPk+CIuLpJX40lA8jofggKDv0FBfIWzSEEOXfy5J0mtXAf+PgMvMSV DgQrCP1FIjcLf9WK+pwlal2wDK4u0xOyXz46u0mlXk+8d/+KO1qTHht5ctXML5LU oVfrvYuxxvuI4ROLXPQ6V7K2gt0eymHhz/RCDqRVQk4vx42E0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHxYE3HHr833GO9ADBQ6dYeuqn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGVmNjE5OTYtZWI0YS0z Yzg5LTk1NGItNjkwMmUyZTNjNTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYYWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5e9dBtrR+qe1opyHREaQuvKFAwkw7iMHFv6pEbraNNDIg6bI0Hf0J4 YmbxfT9VXcZh8UpbyNtJsDUMZACK9A6SyvmDEV81MobEMogSSx9ebSaM7LB4N913 VeCD7pvi8Ss881XRoL/N27tzUMHAk64TCHMxlrUXm5NA+mdsedF5UrZoxaexXERL 8vu6yEHJ4iKDKt07mDV/+ac9tWssnFhAIFCcK+Jv/L6b1IWMZXUvGrHkB838O2HH aBSQyxD8c/EEP+i4SP/tTTEwDJ+k8LkCFz9CrIV1Z+o4QHFkpKiuOr/mAmmqh+pa DtFrwfF4jUo3KWnK0P+GXK+3yXvNniE= -----END CERTIFICATE-----Generated at Tue Jun 17 09:08:14 2025 by rpki-client