$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3735c1ed-4618-3053-b56a-1dd02ea22599.roa File: 3735c1ed-4618-3053-b56a-1dd02ea22599.roa (raw, json) Hash identifier: D2ToB71Bgqs6mfFwNGq+4zge1VgRcszqIEnGVFiSKKs= Subject key identifier: B6:8F:C0:88:FB:FA:4D:09:6D:52:EA:6F:0F:45:BF:77:15:EE:CF:68 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849B631E5359A36E27DC75031C8 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3735c1ed-4618-3053-b56a-1dd02ea22599.roa Signing time: Thu 01 May 2025 19:11:29 +0000 ROA not before: Thu 01 May 2025 19:11:29 +0000 ROA not after: Wed 30 Jul 2025 19:11:29 +0000 asID: 0 IP address blocks: 64.2.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:31:e5:35:9a:36:e2:7d:c7:50:31:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 1 19:11:29 2025 GMT Not After : Jul 30 19:11:29 2025 GMT Subject: CN=a6929781-e12a-4bbf-8b76-fcd9e7ef6453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8f:b9:8b:af:46:79:25:0f:4e:39:02:f6:4f: 3f:aa:87:0e:80:f5:28:24:88:08:e3:87:da:83:f4: e2:2d:23:1e:9f:f7:25:c9:06:b8:42:93:53:22:70: c7:42:a5:ec:9d:e7:51:35:a0:3c:35:fa:b3:a5:d0: 23:9d:94:c5:51:ec:c6:ca:f5:57:9c:0c:35:5c:c4: 6d:94:74:cf:53:03:a2:44:93:75:85:b0:a4:b9:02: be:51:2d:20:13:49:c9:65:2e:22:9d:0d:88:66:9a: a2:8b:b1:4d:3e:4f:0b:7f:ba:51:ab:ea:66:98:46: 23:7f:c8:29:c2:53:f6:b9:c6:3a:3a:b4:57:06:16: 6a:aa:f9:00:fa:2c:28:11:16:6e:d6:3e:c3:2a:e7: d7:49:0c:4e:76:e6:e4:6a:b8:d7:4d:a2:7a:e1:fc: e4:5e:33:89:8a:6f:7a:dd:f1:25:70:3d:0a:7c:43: 2d:b8:fe:fa:fe:9d:95:3d:6b:11:20:70:3b:1a:27: 01:22:37:4a:26:9a:99:f3:e6:f0:8d:2b:d2:4a:30: b3:33:0b:70:43:e3:f5:5a:e0:1d:91:8b:59:d1:8a: 35:26:35:bd:0d:0c:65:f3:08:5d:ad:0c:b4:9f:e7: 63:b0:54:05:70:3a:f3:0e:d0:4c:24:ce:e1:3f:bf: bf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8F:C0:88:FB:FA:4D:09:6D:52:EA:6F:0F:45:BF:77:15:EE:CF:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3735c1ed-4618-3053-b56a-1dd02ea22599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 64.2.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:a3:ee:a5:80:0f:2e:ad:40:93:ab:09:d7:1e:be:d4:46:94: 26:aa:ef:b2:36:25:66:d8:6f:d4:fd:73:c2:29:02:e9:e0:7a: 63:26:a5:8e:45:5d:f4:b5:9c:8d:9c:89:0d:d4:30:f0:fe:13: 2e:c7:32:ab:b4:7f:6f:20:32:cd:a6:76:4b:9f:5d:9c:b1:cf: e0:8e:ec:e7:6a:8b:51:98:2b:ca:af:01:68:64:50:ce:2a:51: d8:ee:00:5c:a8:48:55:45:04:cb:06:54:b1:0d:a9:d5:18:fb: 87:f1:5c:24:26:67:71:25:3a:55:b5:5b:95:dd:47:1c:db:45: 7b:74:3c:3a:77:8f:ea:cb:d8:bb:25:bd:2a:ea:ef:5b:8a:d2: b0:12:ce:47:6b:34:28:98:f6:59:7a:ac:c8:24:69:72:33:28: 25:8b:7c:29:e9:70:a5:ea:33:55:6a:5a:84:be:82:78:59:d8: 37:64:1c:77:19:98:60:55:56:ca:2c:fc:bc:1e:e3:89:08:50: 78:b2:39:d3:9f:25:9a:a8:3a:71:cf:3e:d0:21:7a:dc:70:2d: 3e:ed:d1:3c:c0:54:25:94:f3:31:ea:89:d0:81:7f:aa:7b:b9: 97:83:8f:17:8a:dc:0c:e3:26:f6:c8:b8:0d:ac:07:72:1a:e3: 83:dd:a8:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm2MeU1mjbifcdQMcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwMTE5MTEyOVoXDTI1MDczMDE5MTEyOVowLzEtMCsGA1UEAxMk YTY5Mjk3ODEtZTEyYS00YmJmLThiNzYtZmNkOWU3ZWY2NDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY+5i69GeSUPTjkC9k8/qocOgPUoJIgI44fa g/TiLSMen/clyQa4QpNTInDHQqXsnedRNaA8NfqzpdAjnZTFUezGyvVXnAw1XMRt lHTPUwOiRJN1hbCkuQK+US0gE0nJZS4inQ2IZpqii7FNPk8Lf7pRq+pmmEYjf8gp wlP2ucY6OrRXBhZqqvkA+iwoERZu1j7DKufXSQxOdubkarjXTaJ64fzkXjOJim96 3fElcD0KfEMtuP76/p2VPWsRIHA7GicBIjdKJpqZ8+bwjSvSSjCzMwtwQ+P1WuAd kYtZ0Yo1JjW9DQxl8whdrQy0n+djsFQFcDrzDtBMJM7hP7+/XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaPwIj7+k0JbVLqbw9Fv3cV7s9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzczNWMxZWQtNDYxOC0z MDUzLWI1NmEtMWRkMDJlYTIyNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+j7qWADy6tQJOrCdcevtRGlCaq77I2JWbYb9T9c8IpAungemMmpY5F XfS1nI2ciQ3UMPD+Ey7HMqu0f28gMs2mdkufXZyxz+CO7Odqi1GYK8qvAWhkUM4q UdjuAFyoSFVFBMsGVLENqdUY+4fxXCQmZ3ElOlW1W5XdRxzbRXt0PDp3j+rL2Lsl vSrq71uK0rASzkdrNCiY9ll6rMgkaXIzKCWLfCnpcKXqM1VqWoS+gnhZ2DdkHHcZ mGBVVsos/Lwe44kIUHiyOdOfJZqoOnHPPtAhetxwLT7t0TzAVCWU8zHqidCBf6p7 uZeDjxeK3AzjJvbIuA2sB3Ia44PdqEg= -----END CERTIFICATE-----Generated at Tue May 13 04:36:13 2025 by rpki-client