$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa File: 0f9a93b5-1896-3553-add4-16df12179fd0.roa (raw, json) Hash identifier: rFHbGspeMlic1mtQwTD5FatO/zxdRgVwZAF/JUrrx5o= Subject key identifier: B3:E9:05:2B:62:23:A1:F3:FF:AA:69:4D:79:68:EB:D9:80:97:8D:27 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CD34C4DBBEF0C29E6A36EFB0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 208.214.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:c4:db:be:f0:c2:9e:6a:36:ef:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=b60c10de-94ae-4646-8f76-03e6aec22d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:0e:a5:c1:d9:e4:7d:86:24:5a:b8:d6:1d: 5c:79:70:d5:b6:99:5c:d9:39:8d:81:f9:a8:9c:df: 95:af:92:9d:24:b9:1a:a5:bd:02:89:3d:ab:fb:ba: a9:6d:95:af:5d:e8:2c:5d:7c:28:f6:c0:a7:43:cd: 47:39:05:35:ea:f2:ce:36:19:ae:70:59:ef:9c:bc: ea:1c:0c:97:b1:1c:c9:a1:92:da:37:a7:77:3f:3a: eb:4c:21:e1:d7:81:bb:82:5e:0c:87:c2:ce:56:64: 75:59:9b:4a:dd:aa:d3:d6:ec:c8:47:89:bd:4e:22: dc:d5:96:e7:39:61:2b:0b:4e:45:68:c6:fe:df:3a: 8a:61:96:79:63:d9:4d:fb:52:9f:58:32:93:2b:4b: e0:f6:70:da:67:87:59:bf:1e:95:b4:5c:e4:08:ed: c6:bf:88:aa:18:36:15:33:7a:d0:52:c1:7a:23:4b: a9:ff:95:b1:4f:6b:b1:72:17:50:bb:d3:ca:a5:f1: 8e:f1:60:41:fb:47:ed:67:fb:ef:7c:b9:b9:f1:12: 0a:a6:b5:ba:6c:5e:99:bc:bf:a4:fb:4b:f0:39:36: d8:ec:fc:e6:17:dd:49:aa:f6:53:96:2a:fd:9c:48: 55:82:90:e7:0b:0c:70:fe:e3:3c:f4:c8:b2:99:e1: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E9:05:2B:62:23:A1:F3:FF:AA:69:4D:79:68:EB:D9:80:97:8D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.214.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e1:f1:3b:2b:7a:27:ad:ea:0f:5e:6d:98:16:e8:9b:ab:b5: 32:92:fd:d6:7b:ca:b9:6c:65:9d:8f:46:17:0f:4b:cd:8f:63: 1e:d7:60:96:5a:14:71:5a:21:5a:18:ea:88:69:f1:e0:f5:be: 41:6b:d1:e9:a0:4e:55:ad:31:ac:57:46:8d:5d:d9:bb:3d:e9: bb:83:bb:d6:ea:69:11:a1:bf:76:98:7a:5e:f9:3b:b6:d1:50: 49:24:df:46:f2:93:32:19:39:d5:76:31:27:5a:dc:7f:f5:5a: 79:d3:4c:9a:c5:a3:d5:c2:c9:ce:8f:d8:40:c9:c8:4b:2d:93: 00:e4:2f:5e:99:be:3f:2b:ba:82:7c:73:e6:43:95:b1:e1:c8: 38:3d:d9:f6:72:32:9c:10:ea:87:0c:c0:e2:b0:eb:57:64:5a: 19:c8:a5:84:ab:71:84:0c:04:b2:1b:77:63:02:e2:bc:26:57: 3a:98:a4:e4:44:21:b4:35:24:ee:29:fd:49:4e:0e:8c:d8:69: 04:55:fe:91:f8:e7:bf:63:b7:7a:2c:4c:11:3e:0f:00:d3:0f: d0:b9:17:c0:7e:0c:63:cb:c7:bf:bb:dd:ed:7a:14:a5:b2:ce: 75:a1:7e:30:fe:02:c0:4e:5f:ed:4b:5b:5e:0f:88:b2:00:0a: 9f:aa:a9:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNMTbvvDCnmo277AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk YjYwYzEwZGUtOTRhZS00NjQ2LThmNzYtMDNlNmFlYzIyZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1AOpcHZ5H2GJFq41h1ceXDVtplc2TmNgfmo nN+Vr5KdJLkapb0CiT2r+7qpbZWvXegsXXwo9sCnQ81HOQU16vLONhmucFnvnLzq HAyXsRzJoZLaN6d3PzrrTCHh14G7gl4Mh8LOVmR1WZtK3arT1uzIR4m9TiLc1Zbn OWErC05FaMb+3zqKYZZ5Y9lN+1KfWDKTK0vg9nDaZ4dZvx6VtFzkCO3Gv4iqGDYV M3rQUsF6I0up/5WxT2uxchdQu9PKpfGO8WBB+0ftZ/vvfLm58RIKprW6bF6ZvL+k +0vwOTbY7PzmF91JqvZTlir9nEhVgpDnCwxw/uM89MiymeFHQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPpBStiI6Hz/6ppTXlo69mAl40nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGY5YTkzYjUtMTg5Ni0z NTUzLWFkZDQtMTZkZjEyMTc5ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXh8Tsreiet6g9ebZgW6JurtTKS/dZ7yrlsZZ2PRhcPS82PYx7XYJZa FHFaIVoY6ohp8eD1vkFr0emgTlWtMaxXRo1d2bs96buDu9bqaRGhv3aYel75O7bR UEkk30bykzIZOdV2MSda3H/1WnnTTJrFo9XCyc6P2EDJyEstkwDkL16Zvj8ruoJ8 c+ZDlbHhyDg92fZyMpwQ6ocMwOKw61dkWhnIpYSrcYQMBLIbd2MC4rwmVzqYpORE IbQ1JO4p/UlODozYaQRV/pH4579jt3osTBE+DwDTD9C5F8B+DGPLx7+73e16FKWy znWhfjD+AsBOX+1LW14PiLIACp+qqZE= -----END CERTIFICATE-----Generated at Sun May 11 09:08:34 2025 by rpki-client