$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa File: f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa (raw, json) Hash identifier: E8HDYTPH1ABCdqATHR9mqiFhp+a8IvWz8VsRou3MkUg= Subject key identifier: 84:B4:8C:CE:A0:0D:30:49:FC:EE:BA:D1:F5:3D:75:03:BD:15:74:27 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584902EC33478C55EB3672027880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 701 IP address blocks: 216.3.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:33:47:8c:55:eb:36:72:02:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=e19e4204-119c-48e6-8f9a-96dd78011932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:ee:22:4e:43:c5:ff:16:3d:18:f6:10:65: a8:e8:ee:95:65:59:61:f6:2c:88:83:14:77:41:19: a9:7e:67:51:e4:39:db:88:8d:81:b2:aa:dd:5d:89: 13:5c:38:8e:dd:c5:83:09:06:e2:ee:5b:97:fa:a8: 5a:1b:c1:42:6f:db:6a:18:d3:34:42:30:d7:e2:2f: 38:14:ec:dd:61:68:b7:0c:ce:84:59:49:44:ab:bc: 51:07:3e:34:39:ec:29:b1:c1:74:f4:8a:c3:4e:42: a2:c3:89:c5:6b:95:e2:a2:5c:79:8a:da:d9:1e:92: c7:39:5d:d0:33:d8:69:b4:7f:f5:31:3e:a8:b5:fc: 43:ac:96:b3:a1:fb:61:49:25:40:81:0a:b9:a6:75: 85:5e:28:2d:d4:72:69:ce:09:25:e8:f1:41:79:a7: 32:05:c1:5b:e9:1e:56:89:64:2f:37:e8:a9:2f:5c: 6e:1b:d9:76:2b:0c:13:ca:15:53:69:bc:b0:1e:15: 86:f7:64:46:b0:30:bd:09:1f:41:fb:bd:46:e2:11: 6c:50:7f:b2:64:21:d7:cf:b8:77:13:b9:7c:a9:58: c9:90:80:97:40:dd:15:9d:34:af:d4:72:c3:e6:df: 89:23:b2:02:f1:01:3f:40:08:dd:4f:cf:2a:c3:40: 44:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B4:8C:CE:A0:0D:30:49:FC:EE:BA:D1:F5:3D:75:03:BD:15:74:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 216.3.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:09:db:b8:95:50:ab:7c:32:04:fd:2a:4e:62:6a:d9:e8:0a: 03:11:4e:0e:bb:57:1b:59:19:e5:54:f7:d2:65:f6:9e:99:40: 7e:e4:6f:0a:9b:97:ad:f4:32:ed:f6:88:44:50:4e:50:a0:94: 28:65:35:45:61:38:e5:e0:26:ba:4c:c1:04:41:fb:83:c2:85: 06:2e:0b:12:6f:78:31:87:a6:17:de:5d:7e:8e:9a:70:d2:0f: 71:b6:47:e3:21:d2:c5:a6:45:3d:ce:bc:fe:50:5d:40:76:19: 07:68:8a:65:b7:df:10:e1:35:bc:2e:a8:9b:2c:e9:cb:37:fc: 1f:46:3b:78:0e:fb:6a:18:5a:3a:17:51:ca:fa:ef:ee:f7:47: 5d:54:aa:67:e6:64:64:46:c6:a8:41:d9:32:90:bb:eb:d6:75: a3:cd:21:ff:53:62:fe:4f:7c:28:37:e2:cd:bb:52:04:e8:08: c0:c0:14:d7:d6:e1:9c:09:bf:b2:06:77:23:ee:0d:0c:2d:31: 14:fa:e3:e5:26:3f:ed:e0:1e:0f:e2:ab:c2:2e:e4:24:92:f9: 0f:40:6a:50:e1:bf:23:be:4d:0d:8d:c3:67:2f:21:c0:7c:6f: a3:18:24:0c:9c:8d:f6:02:fd:e9:da:5b:8a:c3:1c:0f:12:e1: f2:36:1d:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7DNHjFXrNnICeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZTE5ZTQyMDQtMTE5Yy00OGU2LThmOWEtOTZkZDc4MDExOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwXuIk5Dxf8WPRj2EGWo6O6VZVlh9iyIgxR3 QRmpfmdR5DnbiI2BsqrdXYkTXDiO3cWDCQbi7luX+qhaG8FCb9tqGNM0QjDX4i84 FOzdYWi3DM6EWUlEq7xRBz40OewpscF09IrDTkKiw4nFa5Xiolx5itrZHpLHOV3Q M9hptH/1MT6otfxDrJazofthSSVAgQq5pnWFXigt1HJpzgkl6PFBeacyBcFb6R5W iWQvN+ipL1xuG9l2KwwTyhVTabywHhWG92RGsDC9CR9B+71G4hFsUH+yZCHXz7h3 E7l8qVjJkICXQN0VnTSv1HLD5t+JI7IC8QE/QAjdT88qw0BE/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS0jM6gDTBJ/O660fU9dQO9FXQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjA0ZjFlMjAtM2RiZC0z MTgxLTg3ZWEtNzhhYTQxZTYzZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AOZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsJ27iVUKt8MgT9Kk5iatnoCgMRTg67VxtZGeVU99Jl9p6ZQH7kbwqb l630Mu32iERQTlCglChlNUVhOOXgJrpMwQRB+4PChQYuCxJveDGHphfeXX6OmnDS D3G2R+Mh0sWmRT3OvP5QXUB2GQdoimW33xDhNbwuqJss6cs3/B9GO3gO+2oYWjoX Ucr67+73R11UqmfmZGRGxqhB2TKQu+vWdaPNIf9TYv5PfCg34s27UgToCMDAFNfW 4ZwJv7IGdyPuDQwtMRT64+UmP+3gHg/iq8Iu5CSS+Q9AalDhvyO+TQ2Nw2cvIcB8 b6MYJAycjfYC/enaW4rDHA8S4fI2HYM= -----END CERTIFICATE-----Generated at Tue Apr 29 09:44:42 2025 by rpki-client