$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43827e1e-992f-3dea-b654-d70d6f2ba1c3.roa File: 43827e1e-992f-3dea-b654-d70d6f2ba1c3.roa (raw, json) Hash identifier: 1GgITRi0qSDj1z4IttaRuwNePalGDmUhjTwA5mJcYGY= Subject key identifier: 7B:17:E9:10:B1:17:E3:7D:BF:3C:BE:47:AB:BF:90:01:B9:D0:F3:44 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A00DAF0202566733926D05900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43827e1e-992f-3dea-b654-d70d6f2ba1c3.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 6167 IP address blocks: 97.187.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:f0:20:25:66:73:39:26:d0:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=26d2219f-c6a6-4d55-a51b-6da31771d20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2c:eb:0a:98:95:0a:63:0f:ff:ef:d9:02:2f: 28:89:16:ca:84:37:84:ba:8f:3b:ec:a3:89:79:b7: 11:7b:f5:18:44:2f:ca:fe:d6:73:fd:ec:b5:b9:a1: d1:66:f5:fd:de:6e:5d:e8:ab:ff:00:56:0e:5b:2d: 0d:26:01:6f:28:8a:fb:94:fd:75:43:cf:c5:2a:f0: 1a:1f:7a:7c:d9:99:d2:5d:dd:a1:7b:9e:c5:a3:8e: 18:df:05:8d:f7:22:ce:b2:d5:9c:5d:d9:81:5a:92: 45:48:67:ee:ed:9c:50:70:f5:9a:02:22:3a:bb:97: 94:1f:91:df:17:17:40:7c:17:d6:8d:6b:94:7a:af: 2e:58:fe:8c:61:89:8a:be:21:72:b7:ff:69:39:21: aa:b2:42:17:ad:dd:d8:e7:8b:14:68:15:7b:c5:07: cf:29:ff:5e:37:9a:3d:43:26:45:47:56:82:5c:21: 91:7a:0e:5e:63:08:1f:a3:b0:ce:c7:a3:7e:73:8c: e9:ee:c2:86:84:c1:ca:03:18:c1:a8:42:06:9e:c9: c2:f3:f2:cb:c5:d3:78:75:be:80:a0:31:f9:23:cf: b4:8c:11:e3:64:91:b7:5f:6d:3e:4e:36:3c:07:ce: 46:08:52:2f:b8:14:1d:b2:51:e3:e9:92:0c:8f:bd: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:17:E9:10:B1:17:E3:7D:BF:3C:BE:47:AB:BF:90:01:B9:D0:F3:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43827e1e-992f-3dea-b654-d70d6f2ba1c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.187.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:83:ec:07:c0:71:4e:d5:2e:c0:49:06:01:9c:d2:5e:3e:8d: c3:28:ee:31:17:d4:cf:d9:6c:1e:66:cd:b6:1b:89:4d:7a:73: 11:49:d0:e3:70:8e:7a:6d:df:07:a9:33:82:68:68:29:dc:f2: 39:1f:b9:0e:94:fb:b3:07:79:89:62:83:51:4b:cb:84:9c:a7: 65:43:d0:9f:8a:11:95:52:4d:47:84:49:60:25:25:fb:2f:8b: 3d:28:f3:d6:1d:90:1d:65:55:9d:74:53:c3:40:c0:6d:33:98: 0f:7d:e2:f2:89:82:a8:16:51:98:04:07:db:19:ec:58:58:49: 91:2d:7b:21:fe:23:50:6f:44:e8:7d:4d:f0:c4:b9:39:bb:27: 3d:3f:21:80:96:1b:9d:dc:1a:fa:f3:48:a3:da:cf:09:e8:bc: cc:f5:2c:fc:74:08:64:da:f2:cc:ac:50:e8:05:4e:22:19:a8: ba:44:68:9f:4b:21:31:f7:0b:a1:2e:db:de:67:09:0e:12:6b: 83:1c:1b:1c:01:3d:97:38:a3:ab:e0:f2:bc:a4:cc:5a:a5:74: 19:7e:b5:b7:fd:21:a2:a6:8e:c1:16:aa:0e:12:29:b0:cd:cf: 0b:e8:dc:91:bf:a4:a5:a1:3e:88:d8:63:10:60:3c:5a:43:03: 2e:cf:21:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2vAgJWZzOSbQWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk MjZkMjIxOWYtYzZhNi00ZDU1LWE1MWItNmRhMzE3NzFkMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjizrCpiVCmMP/+/ZAi8oiRbKhDeEuo877KOJ ebcRe/UYRC/K/tZz/ey1uaHRZvX93m5d6Kv/AFYOWy0NJgFvKIr7lP11Q8/FKvAa H3p82ZnSXd2he57Fo44Y3wWN9yLOstWcXdmBWpJFSGfu7ZxQcPWaAiI6u5eUH5Hf FxdAfBfWjWuUeq8uWP6MYYmKviFyt/9pOSGqskIXrd3Y54sUaBV7xQfPKf9eN5o9 QyZFR1aCXCGReg5eYwgfo7DOx6N+c4zp7sKGhMHKAxjBqEIGnsnC8/LLxdN4db6A oDH5I8+0jBHjZJG3X20+TjY8B85GCFIvuBQdslHj6ZIMj73g7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsX6RCxF+N9vzy+R6u/kAG50PNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDM4MjdlMWUtOTkyZi0z ZGVhLWI2NTQtZDcwZDZmMmJhMWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYbuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaD7AfAcU7VLsBJBgGc0l4+jcMo7jEX1M/ZbB5mzbYbiU16cxFJ0ONw jnpt3wepM4JoaCnc8jkfuQ6U+7MHeYlig1FLy4Scp2VD0J+KEZVSTUeESWAlJfsv iz0o89YdkB1lVZ10U8NAwG0zmA994vKJgqgWUZgEB9sZ7FhYSZEteyH+I1BvROh9 TfDEuTm7Jz0/IYCWG53cGvrzSKPazwnovMz1LPx0CGTa8sysUOgFTiIZqLpEaJ9L ITH3C6Eu295nCQ4Sa4McGxwBPZc4o6vg8rykzFqldBl+tbf9IaKmjsEWqg4SKbDN zwvo3JG/pKWhPojYYxBgPFpDAy7PIV8= -----END CERTIFICATE-----Generated at Mon Jun 30 14:48:33 2025 by rpki-client