$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9f45a49-20a2-3df3-801a-4d1486ce4d45.roa File: f9f45a49-20a2-3df3-801a-4d1486ce4d45.roa (raw, json) Hash identifier: Td3W3iVjdwXdr0nbfw6yJiBHVp/orVezir/xmZHGr7U= Subject key identifier: E9:90:EC:7D:F8:32:98:A4:3A:CA:D7:CC:37:3A:76:EA:5B:29:DC:DB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858492184269274AF75A7648B4E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9f45a49-20a2-3df3-801a-4d1486ce4d45.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 141.207.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:26:92:74:af:75:a7:64:8b:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=b9d96834-591d-452a-8ca3-78786a875722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e6:fc:fc:24:83:29:18:7d:8f:a0:64:01:28: 00:3e:0d:f7:05:7f:ac:d7:48:cf:fe:47:28:e9:4a: 4f:f3:8a:7f:63:1a:26:29:6a:46:f4:73:57:90:3b: c1:1b:3f:84:92:3f:cc:4b:1d:9d:fa:1f:91:1b:03: 8c:bb:59:4c:36:aa:71:d1:e8:4e:f8:27:1a:35:0b: 24:33:42:ee:a3:10:c1:50:55:25:ef:3d:ab:12:0d: 19:3e:51:21:6f:6e:49:aa:e1:d1:64:38:43:22:bc: 76:3d:c0:de:98:16:66:ff:97:77:ea:3f:36:af:3d: 3c:fd:da:54:1a:b8:53:e7:d8:2d:6c:a3:f0:54:93: 27:15:f6:e7:a9:d0:67:71:19:9b:49:66:d4:07:cb: ac:e5:ae:d9:17:93:c1:f1:0a:7d:b8:3c:c9:54:d3: 41:fc:98:ee:6a:6e:a5:bf:86:99:54:c0:92:26:9a: 72:2c:40:ab:6c:be:b5:1c:a6:13:f8:65:54:e0:7b: a4:7b:99:81:27:6a:c4:72:ee:5c:f4:e3:09:8d:94: c4:98:9f:08:5b:4c:6f:5e:4d:8c:02:94:fa:b5:76: c8:36:86:ea:3a:68:23:65:ba:ed:c5:55:01:02:12: 8e:c6:52:b5:1d:f6:4a:4b:88:02:04:3e:2e:29:1d: bb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:EC:7D:F8:32:98:A4:3A:CA:D7:CC:37:3A:76:EA:5B:29:DC:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9f45a49-20a2-3df3-801a-4d1486ce4d45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.207.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:16:8f:16:59:df:23:3d:6d:a1:82:3e:a4:ce:62:df:6a:83: ac:b7:d8:96:6c:50:49:45:23:62:9a:d6:15:f9:9f:a9:e0:45: 2a:00:62:d8:9a:a9:e6:86:e8:b4:64:5c:fc:2a:43:ef:9b:c2: 86:31:26:9c:41:d9:e0:5f:d3:3d:fb:a1:31:0b:ec:2c:cf:cd: ba:c9:62:6e:05:9e:4b:72:f8:6c:21:34:0e:8b:ae:87:ed:38: 75:9a:1c:e1:bd:f7:a1:bc:04:fa:c2:19:31:73:e3:1b:ad:3a: 83:6d:8d:cf:fd:7a:de:a5:d8:98:32:f5:2f:3b:53:90:a6:64: 8b:fa:a1:33:7b:37:e6:ec:04:32:cb:71:63:78:95:8b:c8:8f: a6:49:d1:e4:42:a5:c4:f6:f3:52:04:b0:e9:0e:01:7c:72:29: 92:69:dd:f1:e2:24:d8:d9:95:87:e7:3d:d8:a2:b6:d1:75:0f: a7:d9:bc:cd:9a:79:d2:07:1e:51:4f:43:b2:49:11:59:fe:b3: 9f:3f:48:4c:01:e7:fa:2e:0c:8e:cd:36:21:83:1d:2c:ed:23: 6d:ea:96:9e:66:a7:47:8d:23:9d:1d:a1:ba:94:bc:49:ae:57: 52:4e:9b:e0:d3:42:49:37:0d:21:4d:dd:30:6e:0e:3b:86:88: 56:5b:58:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhCaSdK91p2SLToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YjlkOTY4MzQtNTkxZC00NTJhLThjYTMtNzg3ODZhODc1NzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeb8/CSDKRh9j6BkASgAPg33BX+s10jP/kco 6UpP84p/YxomKWpG9HNXkDvBGz+Ekj/MSx2d+h+RGwOMu1lMNqpx0ehO+CcaNQsk M0LuoxDBUFUl7z2rEg0ZPlEhb25JquHRZDhDIrx2PcDemBZm/5d36j82rz08/dpU GrhT59gtbKPwVJMnFfbnqdBncRmbSWbUB8us5a7ZF5PB8Qp9uDzJVNNB/Jjuam6l v4aZVMCSJppyLECrbL61HKYT+GVU4Huke5mBJ2rEcu5c9OMJjZTEmJ8IW0xvXk2M ApT6tXbINobqOmgjZbrtxVUBAhKOxlK1HfZKS4gCBD4uKR27cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmQ7H34MpikOsrXzDc6dupbKdzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjlmNDVhNDktMjBhMi0z ZGYzLTgwMWEtNGQxNDg2Y2U0ZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjc/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEWjxZZ3yM9baGCPqTOYt9qg6y32JZsUElFI2Ka1hX5n6ngRSoAYtia qeaG6LRkXPwqQ++bwoYxJpxB2eBf0z37oTEL7CzPzbrJYm4Fnkty+GwhNA6Lroft OHWaHOG996G8BPrCGTFz4xutOoNtjc/9et6l2Jgy9S87U5CmZIv6oTN7N+bsBDLL cWN4lYvIj6ZJ0eRCpcT281IEsOkOAXxyKZJp3fHiJNjZlYfnPdiittF1D6fZvM2a edIHHlFPQ7JJEVn+s58/SEwB5/ouDI7NNiGDHSztI23qlp5mp0eNI50dobqUvEmu V1JOm+DTQkk3DSFN3TBuDjuGiFZbWDA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:20:23 2025 by rpki-client