$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/090a9e7e-477d-38c1-92d8-844707ff32f9.roa File: 090a9e7e-477d-38c1-92d8-844707ff32f9.roa (raw, json) Hash identifier: 2L+MPVM+HzBa+kzSjXNV82Ov5lIzx6BVDXktHAxBLLI= Subject key identifier: AA:CE:A0:0E:07:0E:A9:C5:4B:37:C0:FC:E2:E6:09:5E:7C:AB:C3:96 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7AFEFB78BEC4471EA4B2C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/090a9e7e-477d-38c1-92d8-844707ff32f9.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 701 IP address blocks: 65.222.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:fe:fb:78:be:c4:47:1e:a4:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=68deac12-7993-49f9-857e-9aed486d2f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:88:c0:ff:c3:d1:3b:aa:75:fb:24:5b:8d: ae:6a:96:3e:91:1d:ab:9f:b5:b9:c2:46:0c:4c:4f: 1c:06:cc:2d:d9:95:52:e9:02:d5:cb:38:c5:9b:ef: 4d:a7:1a:e3:a6:f6:33:14:f4:15:b9:7c:69:a9:10: 1d:41:0b:cb:4f:c4:22:65:c2:68:d0:3c:8d:0f:c7: 26:89:da:7e:19:c1:94:73:df:f7:d1:8c:e9:d9:23: f5:8e:a6:cf:cc:85:18:b6:ca:e2:93:88:94:1a:92: 50:ee:8b:89:56:28:80:dd:56:3f:aa:a8:58:87:ed: 0e:91:16:4c:f4:a7:61:15:8b:88:48:41:bf:d7:54: 11:da:06:5d:50:1d:7f:0d:e9:5b:d7:0f:72:95:31: 64:e3:5c:d9:f3:d8:ee:5e:4f:44:90:61:b9:36:f1: 1d:a1:18:cc:ed:ce:7c:66:43:b2:5e:b5:33:ec:b1: 8f:de:69:32:57:1a:44:3a:68:af:26:12:3c:37:c2: 30:0d:c6:97:44:67:8b:c6:d4:d9:83:c5:b9:ec:08: 43:54:5d:6e:27:47:ea:fa:a3:80:26:e2:c9:f3:c3: 96:2a:7b:82:b8:92:a7:df:b1:7e:6b:5c:bd:af:c9: 9c:00:73:f8:ba:74:8c:24:97:7c:ab:5f:d1:0f:b2: be:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CE:A0:0E:07:0E:A9:C5:4B:37:C0:FC:E2:E6:09:5E:7C:AB:C3:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/090a9e7e-477d-38c1-92d8-844707ff32f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 65.222.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c5:21:5d:ea:86:96:b8:24:b4:f1:9b:69:c6:c0:df:46:3c: 21:f1:aa:e1:0f:dd:cd:a5:e7:0e:68:fe:5d:94:5a:49:21:6f: 31:aa:39:25:dc:53:8b:89:68:fa:bc:97:a0:ae:e9:d7:ed:7c: 7f:81:d7:da:f7:cf:69:c0:48:df:3f:ee:2f:29:01:7f:79:5f: b5:30:bc:71:9e:b2:e5:26:ea:b3:2a:a0:78:4f:3b:a0:4d:8c: 73:23:fb:2e:f5:a7:e9:cc:16:4c:e2:26:c3:af:a9:c3:44:2f: af:97:7e:9d:f0:c3:08:67:e7:7d:6e:c5:f8:1b:33:5d:a4:c3: 80:23:ab:69:1e:ca:59:17:1d:8a:39:e8:80:90:58:e1:d2:62: 70:1a:37:b2:e7:42:c7:3f:0e:42:ec:1b:e0:5b:19:e6:de:7d: d6:b3:b6:32:c3:a7:8d:6b:36:01:69:a8:77:01:02:12:7d:49: 6f:36:7b:68:a1:66:91:25:f4:cc:9c:8e:78:10:81:f4:ad:51: 9b:17:f2:5c:94:7a:80:12:2a:1f:6a:6c:40:b7:ed:f5:a3:4e: 15:79:ab:ef:d8:00:d6:c1:bb:0d:ed:b3:50:ea:3b:a1:d3:9f: 00:63:25:a2:ba:20:9f:f1:5f:c6:96:64:e4:25:b5:06:03:46: 48:c9:23:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ev77eL7ERx6kssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NjhkZWFjMTItNzk5My00OWY5LTg1N2UtOWFlZDQ4NmQyZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHaIwP/D0TuqdfskW42uapY+kR2rn7W5wkYM TE8cBswt2ZVS6QLVyzjFm+9NpxrjpvYzFPQVuXxpqRAdQQvLT8QiZcJo0DyND8cm idp+GcGUc9/30Yzp2SP1jqbPzIUYtsrik4iUGpJQ7ouJViiA3VY/qqhYh+0OkRZM 9KdhFYuISEG/11QR2gZdUB1/Delb1w9ylTFk41zZ89juXk9EkGG5NvEdoRjM7c58 ZkOyXrUz7LGP3mkyVxpEOmivJhI8N8IwDcaXRGeLxtTZg8W57AhDVF1uJ0fq+qOA JuLJ88OWKnuCuJKn37F+a1y9r8mcAHP4unSMJJd8q1/RD7K+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrOoA4HDqnFSzfA/OLmCV58q8OWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDkwYTllN2UtNDc3ZC0z OGMxLTkyZDgtODQ0NzA3ZmYzMmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQd5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnFIV3qhpa4JLTxm2nGwN9GPCHxquEP3c2l5w5o/l2UWkkhbzGqOSXc U4uJaPq8l6Cu6dftfH+B19r3z2nASN8/7i8pAX95X7UwvHGesuUm6rMqoHhPO6BN jHMj+y71p+nMFkziJsOvqcNEL6+Xfp3wwwhn531uxfgbM12kw4Ajq2keylkXHYo5 6ICQWOHSYnAaN7LnQsc/DkLsG+BbGebefdaztjLDp41rNgFpqHcBAhJ9SW82e2ih ZpEl9MycjngQgfStUZsX8lyUeoASKh9qbEC37fWjThV5q+/YANbBuw3ts1DqO6HT nwBjJaK6IJ/xX8aWZOQltQYDRkjJIyU= -----END CERTIFICATE-----Generated at Tue Jul 1 14:02:23 2025 by rpki-client