$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17f8b609-4908-3fc3-8711-bfa967d1b2a4.roa File: 17f8b609-4908-3fc3-8711-bfa967d1b2a4.roa (raw, json) Hash identifier: VXInIhY+5jVyGUUvAYnY/G4hHIrWH+d0p5AxGDvJjhc= Subject key identifier: C5:8A:21:7B:28:1E:F6:B1:1F:FA:78:01:37:F7:A8:98:8A:EE:78:F2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C2479AAFC35215ED335DF80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17f8b609-4908-3fc3-8711-bfa967d1b2a4.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 141.158.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:79:aa:fc:35:21:5e:d3:35:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=a0c49d0e-a0c8-4a42-adf1-3c5d75e133c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cc:86:3f:24:37:2e:91:59:0a:ee:75:2d:a5: 7c:8f:2f:49:bf:ba:17:5c:a7:18:a0:47:6c:28:9d: d8:ee:2f:22:6c:bf:17:bf:82:fc:8b:be:25:a9:0d: bf:f5:c0:ab:f1:a5:6e:58:4d:55:2d:8e:fa:b9:9a: f7:ef:27:25:81:d6:32:41:fe:43:8f:77:0d:d2:97: 35:09:69:65:22:11:42:95:cc:ad:5e:7c:ca:77:e8: e1:3c:30:1c:8a:e7:a4:5c:a9:b4:44:ca:6b:e7:ae: 67:d7:fb:c5:89:f9:b0:e2:48:61:60:a9:ac:fa:94: af:9a:1d:8b:9d:1d:69:42:aa:ef:b9:25:dd:21:b8: 76:c9:87:fd:1a:2a:a5:9f:20:fe:d7:22:ba:37:d5: 45:05:34:53:0f:e2:92:73:dc:59:5d:13:41:6a:e6: cc:fe:f8:9f:15:32:af:34:80:1f:cf:24:34:5d:8e: 14:37:95:8b:51:5b:9e:b6:c8:52:65:d6:75:af:d0: 1d:36:02:ee:73:f1:0a:b3:dd:83:6c:32:b2:c2:36: 2d:98:a0:56:d9:0a:a2:d2:01:67:58:8a:e0:6f:e2: 58:1a:f0:00:c8:bc:1a:0f:2b:b7:06:49:a0:85:47: 0f:68:ff:98:f5:39:d3:8f:74:56:27:bb:2d:89:2d: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8A:21:7B:28:1E:F6:B1:1F:FA:78:01:37:F7:A8:98:8A:EE:78:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17f8b609-4908-3fc3-8711-bfa967d1b2a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.158.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c9:fe:3f:fb:00:1d:50:84:8a:72:1b:90:08:b1:60:15:6d: 55:d6:e3:80:16:df:f1:e8:bd:3f:48:07:e3:ea:7e:dc:2e:08: 73:4b:96:1c:97:db:84:0f:59:ec:59:24:45:95:c9:44:a7:3a: c6:8e:90:1b:53:b4:9b:2c:6d:55:d6:40:01:e5:47:44:cf:41: 15:2a:c9:43:19:29:c0:f2:2b:81:56:90:40:69:f2:9a:5e:4c: 24:0b:41:5e:ca:7e:f7:60:ba:cb:06:24:b4:64:61:14:86:9b: 6d:3e:93:8f:d7:bd:2b:2b:db:bf:c6:89:02:d6:d7:c7:05:f9: 00:04:0b:48:90:3b:ec:8d:f5:a2:cb:61:aa:8d:55:80:e9:11: 58:01:7c:01:08:2e:60:47:88:d8:30:fe:44:48:21:49:7c:43: 97:10:ad:0f:6e:41:98:7e:ec:bb:23:c0:0a:05:ed:42:a1:74: 08:f8:b0:6c:b0:bc:b1:59:61:dd:ae:42:c2:78:42:05:ab:1c: bb:59:3b:9d:b1:f0:5a:94:aa:d4:3b:ef:73:b2:95:8a:91:ab: d2:7a:e1:6e:51:c6:69:1c:c1:c4:96:86:a6:0d:5c:a8:99:a6: 0a:2e:ac:00:ef:05:b2:5e:9e:46:11:c5:28:c4:e8:5b:05:a1: dc:fe:da:df -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElcJHmq/DUhXtM134AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YTBjNDlkMGUtYTBjOC00YTQyLWFkZjEtM2M1ZDc1ZTEzM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsyGPyQ3LpFZCu51LaV8jy9Jv7oXXKcYoEds KJ3Y7i8ibL8Xv4L8i74lqQ2/9cCr8aVuWE1VLY76uZr37yclgdYyQf5Dj3cN0pc1 CWllIhFClcytXnzKd+jhPDAciuekXKm0RMpr565n1/vFifmw4khhYKms+pSvmh2L nR1pQqrvuSXdIbh2yYf9GiqlnyD+1yK6N9VFBTRTD+KSc9xZXRNBaubM/vifFTKv NIAfzyQ0XY4UN5WLUVuetshSZdZ1r9AdNgLuc/EKs92DbDKywjYtmKBW2Qqi0gFn WIrgb+JYGvAAyLwaDyu3BkmghUcPaP+Y9TnTj3RWJ7stiS1cQQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMWKIXsoHvaxH/p4ATf3qJiK7njyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTdmOGI2MDktNDkwOC0z ZmMzLTg3MTEtYmZhOTY3ZDFiMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjZ4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAmcn+P/sAHVCEinIbkAixYBVtVdbjgBbf8ei9P0gH4+p+3C4Ic0uWHJfb hA9Z7FkkRZXJRKc6xo6QG1O0myxtVdZAAeVHRM9BFSrJQxkpwPIrgVaQQGnyml5M JAtBXsp+92C6ywYktGRhFIabbT6Tj9e9Kyvbv8aJAtbXxwX5AAQLSJA77I31osth qo1VgOkRWAF8AQguYEeI2DD+REghSXxDlxCtD25BmH7suyPACgXtQqF0CPiwbLC8 sVlh3a5CwnhCBascu1k7nbHwWpSq1Dvvc7KVipGr0nrhblHGaRzBxJaGpg1cqJmm Ci6sAO8Fsl6eRhHFKMToWwWh3P7a3w== -----END CERTIFICATE-----Generated at Sun May 11 05:10:41 2025 by rpki-client