$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa8794aa-575d-368e-8d1e-fd1f141bb911.roa File: aa8794aa-575d-368e-8d1e-fd1f141bb911.roa (raw, json) Hash identifier: LF27WsLCbu0xY8NYpKJWNwGxACbbiGnK5bjAUTKYMFY= Subject key identifier: 6B:82:E7:E4:DA:17:5C:20:E0:80:03:E3:CC:51:CF:ED:42:70:A4:88 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A00DADFD05767009B297D07C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa8794aa-575d-368e-8d1e-fd1f141bb911.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 6167 IP address blocks: 97.150.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:df:d0:57:67:00:9b:29:7d:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=a53947bb-6051-4836-9fa6-e08049de1fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:59:8c:a5:60:bb:78:0a:5c:56:51:70:58: 8e:c7:a4:3f:ea:33:ba:ed:62:45:a0:00:d9:20:56: f2:5c:ca:32:72:c5:4f:32:be:78:59:42:c7:ab:0b: e1:f5:5b:2a:b3:74:f9:b1:c7:10:f7:2c:b0:7a:b3: 60:c4:d3:fa:ee:af:c5:27:99:3d:44:cd:05:e8:6a: 57:15:1e:be:85:4e:2c:ea:bc:3c:b6:2b:37:fc:ac: 82:39:61:b3:e1:c7:eb:e8:46:b6:a8:f7:32:27:7a: c5:f1:f3:e9:92:08:54:22:c5:8f:17:e3:a0:4e:ae: c0:ff:c4:2b:06:62:18:a4:83:2f:9a:15:c1:db:58: c7:e8:98:26:5a:eb:ed:86:d6:26:9a:3a:3a:a8:72: b1:52:37:1c:09:1a:bf:fb:fe:ee:95:aa:8f:c8:4f: cf:4d:7d:d9:ee:2f:d6:4a:f8:69:aa:ea:94:7b:70: 53:c7:18:54:4e:74:26:f6:d7:54:34:41:b4:26:7f: f2:da:a0:39:08:c6:e7:cb:f8:55:a2:66:30:ac:c6: 24:71:18:0f:96:19:53:6c:1c:c2:26:63:39:84:ae: d9:9f:ac:17:48:f5:34:37:72:b0:5f:89:db:c4:d0: 63:23:2f:c7:ff:4e:00:0f:b4:95:3c:0c:97:13:1e: a9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:82:E7:E4:DA:17:5C:20:E0:80:03:E3:CC:51:CF:ED:42:70:A4:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa8794aa-575d-368e-8d1e-fd1f141bb911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.150.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:75:4b:45:02:72:3a:93:e3:9b:bd:46:cf:8f:10:c1:66:1f: 2b:10:10:6a:66:75:fc:4d:5b:7e:46:da:fe:18:06:5d:50:55: 49:64:b9:c1:48:6c:ec:fe:ec:52:81:86:be:47:98:24:6e:d5: 53:45:af:1e:5d:ce:89:f8:e3:d2:3f:02:5d:3d:ca:b9:41:8d: 4c:52:82:b7:f7:ea:4c:50:c8:e0:be:bd:1b:fe:d0:1a:58:dc: 12:8a:33:33:46:f8:28:95:ca:3f:61:34:62:f3:51:4a:5b:20: e9:bd:41:0a:09:13:f7:91:7e:33:1a:da:8d:bc:83:56:23:03: c5:6b:54:82:7e:37:da:ff:ed:10:ba:2e:91:b8:2b:02:b7:27: 2f:cc:e0:7d:da:89:b5:34:0e:fc:6d:6f:d1:0d:04:a9:d6:89: be:2c:a6:a8:c1:a2:82:17:19:9f:98:50:59:81:ab:66:e8:3d: 00:f4:4b:f0:5d:33:64:21:a0:a3:ea:63:d8:45:02:45:a8:f7: e9:63:0f:10:e8:7e:45:0f:56:50:8e:39:63:05:c3:d4:e5:d1: 0d:50:39:56:85:84:cc:26:41:a3:a3:19:61:fd:49:0b:b0:d9: 43:27:86:3f:ae:76:d0:da:24:a4:d5:ce:8b:c5:62:4d:3e:60: 03:48:df:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2t/QV2cAmyl9B8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk YTUzOTQ3YmItNjA1MS00ODM2LTlmYTYtZTA4MDQ5ZGUxZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskxZjKVgu3gKXFZRcFiOx6Q/6jO67WJFoADZ IFbyXMoycsVPMr54WULHqwvh9Vsqs3T5sccQ9yywerNgxNP67q/FJ5k9RM0F6GpX FR6+hU4s6rw8tis3/KyCOWGz4cfr6Ea2qPcyJ3rF8fPpkghUIsWPF+OgTq7A/8Qr BmIYpIMvmhXB21jH6JgmWuvthtYmmjo6qHKxUjccCRq/+/7ulaqPyE/PTX3Z7i/W SvhpquqUe3BTxxhUTnQm9tdUNEG0Jn/y2qA5CMbny/hVomYwrMYkcRgPlhlTbBzC JmM5hK7Zn6wXSPU0N3KwX4nbxNBjIy/H/04AD7SVPAyXEx6pIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuC5+TaF1wg4IAD48xRz+1CcKSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWE4Nzk0YWEtNTc1ZC0z NjhlLThkMWUtZmQxZjE0MWJiOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYZaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF1S0UCcjqT45u9Rs+PEMFmHysQEGpmdfxNW35G2v4YBl1QVUlkucFI bOz+7FKBhr5HmCRu1VNFrx5dzon449I/Al09yrlBjUxSgrf36kxQyOC+vRv+0BpY 3BKKMzNG+CiVyj9hNGLzUUpbIOm9QQoJE/eRfjMa2o28g1YjA8VrVIJ+N9r/7RC6 LpG4KwK3Jy/M4H3aibU0Dvxtb9ENBKnWib4spqjBooIXGZ+YUFmBq2boPQD0S/Bd M2QhoKPqY9hFAkWo9+ljDxDofkUPVlCOOWMFw9Tl0Q1QOVaFhMwmQaOjGWH9SQuw 2UMnhj+udtDaJKTVzovFYk0+YANI3z0= -----END CERTIFICATE-----Generated at Mon Jun 30 20:28:32 2025 by rpki-client