$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa File: f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa (raw, json) Hash identifier: Pyi0AeDL2OeE9J5qb03FlU7GBpUMo71WAggpKmA68/k= Subject key identifier: DB:8F:7B:90:65:EC:FD:CD:53:F9:AB:12:15:51:DC:68:82:D3:83:27 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849E225424C0407C31E21EBD078 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 701 IP address blocks: 216.3.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:42:4c:04:07:c3:1e:21:eb:d0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=46f5721e-6b83-4aa5-a173-05328ce38845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:6a:85:fa:bd:69:8b:bc:e3:94:ee:81:c0: cc:b6:18:e1:e1:a5:63:70:1b:c7:79:b6:0b:0e:22: fe:ae:ad:41:e6:cf:ec:08:55:e5:7f:2d:db:12:6f: 74:ff:fb:03:af:7e:9d:6e:68:b9:8a:95:1e:35:fb: a9:f3:07:d1:d4:7a:da:5f:4e:66:e7:fc:94:9b:51: bb:4f:a5:22:22:68:1b:69:60:ae:57:e3:53:e5:fe: e7:fc:91:8a:96:a2:6a:03:ea:8a:69:c4:24:80:84: f8:6c:13:33:74:f4:9b:94:99:aa:55:a8:ee:c7:51: f4:f8:16:0a:81:1c:96:ec:e1:95:c5:99:e1:ee:62: 33:f8:35:a9:35:76:88:c4:36:62:6e:99:0c:33:c6: 9a:e6:9c:2c:dd:c4:09:f2:57:ce:94:d9:67:8d:8f: 44:ee:e3:a3:d0:25:bc:f5:0b:e2:71:0e:a0:91:bb: df:7e:be:48:b0:98:36:f2:38:3a:6b:37:b0:c8:6b: f6:63:f8:f9:b7:37:da:c1:20:e6:1c:1a:61:3c:89: 4c:6d:d7:60:e2:7a:b3:56:48:93:c1:0c:e6:c2:e8: c2:5e:43:d5:0a:aa:db:c2:6e:85:4f:32:cb:3b:92: c7:07:39:c6:db:c3:f7:f7:67:af:1d:34:65:f9:95: cb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8F:7B:90:65:EC:FD:CD:53:F9:AB:12:15:51:DC:68:82:D3:83:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 216.3.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:17:54:48:c6:5a:96:4b:20:5d:6f:ec:58:a4:c5:50:f1:01: ac:4e:fa:07:ae:71:cc:98:aa:af:65:e7:ad:17:af:86:d0:e9: 18:76:d7:2b:39:b2:76:22:7e:6d:24:dc:8a:cd:26:61:5b:86: 74:2f:45:97:cd:76:ca:b4:fe:d4:e2:9f:1d:8f:6f:b2:66:f7: 65:50:f3:93:83:37:15:46:9b:56:ea:96:26:6b:9a:b5:37:17: 4e:de:17:a5:2e:0d:5b:4a:19:be:b6:65:94:63:33:cb:a1:57: 01:e8:42:16:ea:4d:83:0b:d8:dd:0f:d1:71:ef:6e:fa:4d:48: b8:66:49:f8:82:07:d4:ae:88:04:b1:a2:b4:60:0e:d5:80:40: af:93:88:4d:7a:1a:1c:82:bf:99:3c:97:eb:36:92:51:f7:d0: 0d:15:36:b3:bc:77:c4:1f:24:af:9c:7e:ba:0d:6e:3f:9a:68: 09:2c:4a:1b:0b:19:0e:e1:ea:08:29:2b:ae:b0:53:d7:c0:7b: c9:8c:f0:36:46:27:53:d0:81:c5:a7:97:20:c9:65:90:94:92: 3a:aa:d2:f6:88:08:c7:70:e9:0f:14:92:a9:90:45:fd:88:d1: 4a:68:47:41:72:a7:a4:a7:ae:39:9b:88:aa:60:9f:dc:6f:82: ae:12:95:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJUJMBAfDHiHr0HgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NDZmNTcyMWUtNmI4My00YWE1LWExNzMtMDUzMjhjZTM4ODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCVqhfq9aYu845TugcDMthjh4aVjcBvHebYL DiL+rq1B5s/sCFXlfy3bEm90//sDr36dbmi5ipUeNfup8wfR1HraX05m5/yUm1G7 T6UiImgbaWCuV+NT5f7n/JGKlqJqA+qKacQkgIT4bBMzdPSblJmqVajux1H0+BYK gRyW7OGVxZnh7mIz+DWpNXaIxDZibpkMM8aa5pws3cQJ8lfOlNlnjY9E7uOj0CW8 9QvicQ6gkbvffr5IsJg28jg6azewyGv2Y/j5tzfawSDmHBphPIlMbddg4nqzVkiT wQzmwujCXkPVCqrbwm6FTzLLO5LHBznG28P392evHTRl+ZXLkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuPe5Bl7P3NU/mrEhVR3GiC04MnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjA0ZjFlMjAtM2RiZC0z MTgxLTg3ZWEtNzhhYTQxZTYzZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AOZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUXVEjGWpZLIF1v7FikxVDxAaxO+geuccyYqq9l560Xr4bQ6Rh21ys5 snYifm0k3IrNJmFbhnQvRZfNdsq0/tTinx2Pb7Jm92VQ85ODNxVGm1bqliZrmrU3 F07eF6UuDVtKGb62ZZRjM8uhVwHoQhbqTYML2N0P0XHvbvpNSLhmSfiCB9SuiASx orRgDtWAQK+TiE16GhyCv5k8l+s2klH30A0VNrO8d8QfJK+cfroNbj+aaAksShsL GQ7h6ggpK66wU9fAe8mM8DZGJ1PQgcWnlyDJZZCUkjqq0vaICMdw6Q8UkqmQRf2I 0UpoR0Fyp6SnrjmbiKpgn9xvgq4SlcI= -----END CERTIFICATE-----Generated at Mon Jun 30 21:13:25 2025 by rpki-client