$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7656f8a7-a994-3a95-afd5-0fc5036e84a2.roa File: 7656f8a7-a994-3a95-afd5-0fc5036e84a2.roa (raw, json) Hash identifier: ggSqGMlNBd0yXsfP7EUv9vQL3PAloGFbivVPH7cRDsk= Subject key identifier: E0:BB:D4:93:08:92:73:5B:A7:CB:B8:FC:12:46:4C:FD:5F:19:C3:C5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584921843578A95E198EDFB68420 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7656f8a7-a994-3a95-afd5-0fc5036e84a2.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 141.207.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:35:78:a9:5e:19:8e:df:b6:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=8bac8dcc-316d-40a9-af9d-a21ebfeb8fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:14:72:4c:8f:7b:81:c7:a9:4e:41:07:16: 93:02:e7:b4:e4:d5:ed:f0:68:c2:b6:d0:41:53:70: d9:96:ae:d8:6e:1d:b4:62:5d:a3:ed:60:4f:e8:95: 21:c0:35:0f:c9:0e:d8:9d:b2:36:3c:5b:03:91:0f: e7:eb:26:37:0e:05:47:4a:7b:a0:6f:a4:b2:2b:35: 69:19:46:6d:19:8e:e4:39:11:2b:8a:76:d0:37:54: 6a:e4:c8:a5:42:df:d5:00:aa:27:9f:2a:2b:96:40: ae:ce:9c:06:7d:d9:ae:9b:e9:37:b1:a9:1b:f1:cb: e0:09:21:17:a2:cd:ab:15:e3:ab:c8:a7:67:b4:79: cc:08:d1:dc:40:7d:d6:f7:ae:03:11:e8:bc:1f:2e: 11:50:63:55:fa:88:9b:90:fa:63:25:f1:8e:19:0e: fb:8f:29:a7:f3:1b:7b:1e:fb:e9:65:ea:86:ad:09: 81:b7:61:76:af:fb:11:5e:6f:66:23:d0:1b:bc:da: 21:d9:4b:be:e7:e6:a5:e4:6f:d5:30:9d:c9:0f:07: b1:32:39:84:9f:59:ec:58:aa:7b:a3:e5:45:a1:ad: 4a:72:6f:cf:ca:1a:71:a9:ae:41:98:48:f1:ab:28: ef:c1:29:9e:c4:4e:62:a4:66:c0:00:0f:66:fb:2d: f2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BB:D4:93:08:92:73:5B:A7:CB:B8:FC:12:46:4C:FD:5F:19:C3:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7656f8a7-a994-3a95-afd5-0fc5036e84a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.207.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ab:cd:80:5d:6c:93:87:86:37:d7:3f:46:86:8b:22:8a:14: 9e:38:b3:e5:a8:f4:78:00:6c:f7:90:ab:66:fa:7d:58:39:60: 56:79:81:81:5c:4b:72:02:37:4f:8f:b1:db:92:d8:11:05:c1: 19:d4:d4:f6:9b:ec:da:0a:ca:e3:8e:ea:5b:49:64:76:9a:1c: 9e:fd:b4:5c:fe:d3:f3:50:18:57:b2:37:0b:93:b5:cc:c6:f9: 5b:bb:ee:6f:03:a6:bc:b1:d1:9f:da:99:58:83:e6:c0:f1:1f: 0c:5f:d9:ac:ac:e4:74:7e:99:90:ef:b7:54:b2:4e:0f:9c:88: 95:18:bf:ee:0e:05:92:95:8b:2d:f0:e6:e0:8f:d8:ea:ff:44: f2:56:e4:67:a9:78:60:58:29:aa:0d:ad:b3:a0:c0:42:6c:ea: 47:b8:16:a4:f1:96:f5:fc:9d:a8:76:61:eb:9c:f6:b3:27:7c: 1b:67:93:08:04:3b:ea:7b:c3:4c:c7:99:b7:88:06:ae:c6:87: 80:e0:67:35:78:52:4f:47:18:33:cd:97:5a:a2:6f:cd:6d:49: 02:79:f5:5a:d3:a9:92:91:bb:39:53:b2:59:db:4e:01:e7:6b: b3:c7:5a:46:7b:6e:98:0a:2e:66:2f:c8:b6:7f:76:7e:26:2a: 74:9f:70:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhDV4qV4Zjt+2hCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk OGJhYzhkY2MtMzE2ZC00MGE5LWFmOWQtYTIxZWJmZWI4ZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHgUckyPe4HHqU5BBxaTAue05NXt8GjCttBB U3DZlq7Ybh20Yl2j7WBP6JUhwDUPyQ7YnbI2PFsDkQ/n6yY3DgVHSnugb6SyKzVp GUZtGY7kORErinbQN1Rq5MilQt/VAKonnyorlkCuzpwGfdmum+k3sakb8cvgCSEX os2rFeOryKdntHnMCNHcQH3W964DEei8Hy4RUGNV+oibkPpjJfGOGQ77jymn8xt7 HvvpZeqGrQmBt2F2r/sRXm9mI9AbvNoh2Uu+5+al5G/VMJ3JDwexMjmEn1nsWKp7 o+VFoa1Kcm/Pyhpxqa5BmEjxqyjvwSmexE5ipGbAAA9m+y3y9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC71JMIknNbp8u4/BJGTP1fGcPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzY1NmY4YTctYTk5NC0z YTk1LWFmZDUtMGZjNTAzNmU4NGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjc+WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKrzYBdbJOHhjfXP0aGiyKKFJ44s+Wo9HgAbPeQq2b6fVg5YFZ5gYFc S3ICN0+PsduS2BEFwRnU1Pab7NoKyuOO6ltJZHaaHJ79tFz+0/NQGFeyNwuTtczG +Vu77m8Dpryx0Z/amViD5sDxHwxf2ays5HR+mZDvt1SyTg+ciJUYv+4OBZKViy3w 5uCP2Or/RPJW5GepeGBYKaoNrbOgwEJs6ke4FqTxlvX8nah2Yeuc9rMnfBtnkwgE O+p7w0zHmbeIBq7Gh4DgZzV4Uk9HGDPNl1qib81tSQJ59VrTqZKRuzlTslnbTgHn a7PHWkZ7bpgKLmYvyLZ/dn4mKnSfcF4= -----END CERTIFICATE-----Generated at Sun May 11 01:44:38 2025 by rpki-client