$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f45a9ee-6204-3231-bce5-44e354aab03f.roa File: 1f45a9ee-6204-3231-bce5-44e354aab03f.roa (raw, json) Hash identifier: JMhp849mN8C8yQ8Kxlch+PfYZcal80PMNospZIoxJH0= Subject key identifier: D3:D2:84:EC:6D:AD:3E:6A:DE:FE:E7:06:28:3D:47:39:50:DA:6E:EA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A39747C84E1E8892EF5521B40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f45a9ee-6204-3231-bce5-44e354aab03f.roa Signing time: Tue 17 Jun 2025 19:36:33 +0000 ROA not before: Tue 17 Jun 2025 19:36:33 +0000 ROA not after: Mon 15 Sep 2025 19:36:33 +0000 asID: 6167 IP address blocks: 97.236.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:74:7c:84:e1:e8:89:2e:f5:52:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 17 19:36:33 2025 GMT Not After : Sep 15 19:36:33 2025 GMT Subject: CN=0d423bd1-7256-4a40-8e48-1b1b3f1b778c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:21:2b:b4:92:f8:a6:d8:2f:ca:c6:21:f6: 39:e6:cc:1c:31:f7:a1:29:12:1b:89:e8:13:97:a8: db:0e:58:7f:3e:d0:5e:cd:4f:96:16:94:d3:5c:c5: ae:34:47:0f:80:10:ca:03:47:72:ea:19:71:0a:8b: 7c:7e:91:34:38:2f:13:63:61:6f:6e:17:cd:6c:b3: 6e:1c:91:4d:3a:33:80:76:13:69:f8:ca:05:74:d0: 3b:91:1d:3f:78:2a:d2:da:85:90:88:7c:53:1c:8f: 68:e1:f1:ef:0c:6d:e8:5f:8b:14:ca:1d:7a:f2:3c: 17:f4:63:36:fb:55:db:d2:27:63:93:32:81:b3:e4: b0:2d:bd:7f:24:b7:f3:e8:c0:ed:9d:54:22:c6:4e: 3a:50:35:1c:eb:c7:49:78:0b:67:de:7b:19:5e:5e: b7:8a:84:6e:99:f9:51:f2:c6:4d:87:c3:0a:b3:93: c6:44:5a:0c:d0:09:c1:86:04:79:ff:1e:eb:e9:b3: 80:ae:9f:c3:19:8e:ea:bb:e6:ef:ea:21:3c:50:22: fb:b6:04:32:cf:bb:40:06:a3:ea:e6:a1:3e:df:4f: 78:40:5d:e3:5e:fc:e8:f0:63:67:60:cb:da:e9:bc: 5e:7c:77:e2:00:8b:e7:79:8b:bb:48:ad:29:e6:e7: 71:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D2:84:EC:6D:AD:3E:6A:DE:FE:E7:06:28:3D:47:39:50:DA:6E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f45a9ee-6204-3231-bce5-44e354aab03f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.236.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:04:32:32:e8:36:59:4a:b4:53:d7:84:f2:3e:ad:15:cf:4c: da:6c:94:7b:b5:5d:d2:60:a5:e8:3b:02:f0:de:07:b7:68:e1: 88:16:27:0a:b8:11:76:f8:1f:33:2d:77:55:5f:74:12:36:a2: d8:9f:5f:63:61:32:86:86:76:64:10:1a:38:6e:c9:87:b6:4e: d7:9e:84:6c:cf:3f:ea:e4:99:bf:09:2e:1c:3e:58:f6:03:3c: 51:8e:4b:2a:34:59:10:7b:58:31:50:fc:b5:fc:52:7a:0e:bc: aa:2e:da:fd:bb:95:b7:cf:88:eb:b6:1c:74:16:60:6f:bc:ff: c1:03:43:bc:d7:75:54:a9:0e:cd:05:24:0e:cc:e2:90:91:ff: ca:1c:97:b8:fc:bf:bc:cd:9f:14:6e:a7:5d:9f:09:64:86:cb: 2e:e7:52:6f:c4:65:53:9c:14:f7:16:0b:e8:39:27:0e:a0:00: 3a:1a:82:4b:63:cf:9a:18:75:2b:60:52:b4:d3:11:98:08:2d: 96:03:3a:31:6a:ce:41:02:41:45:6b:37:d6:3f:07:41:af:14: 78:4b:78:67:36:a9:c6:bc:7b:cd:f6:45:e6:6d:ad:da:01:1e: 55:4b:86:7b:5a:09:fe:a2:4b:d7:bd:b8:aa:a3:74:ac:63:23: 0d:e3:e8:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5dHyE4eiJLvVSG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxNzE5MzYzM1oXDTI1MDkxNTE5MzYzM1owLzEtMCsGA1UEAxMk MGQ0MjNiZDEtNzI1Ni00YTQwLThlNDgtMWIxYjNmMWI3NzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx24hK7SS+KbYL8rGIfY55swcMfehKRIbiegT l6jbDlh/PtBezU+WFpTTXMWuNEcPgBDKA0dy6hlxCot8fpE0OC8TY2FvbhfNbLNu HJFNOjOAdhNp+MoFdNA7kR0/eCrS2oWQiHxTHI9o4fHvDG3oX4sUyh168jwX9GM2 +1Xb0idjkzKBs+SwLb1/JLfz6MDtnVQixk46UDUc68dJeAtn3nsZXl63ioRumflR 8sZNh8MKs5PGRFoM0AnBhgR5/x7r6bOArp/DGY7qu+bv6iE8UCL7tgQyz7tABqPq 5qE+3094QF3jXvzo8GNnYMva6bxefHfiAIvneYu7SK0p5udx0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPShOxtrT5q3v7nBig9RzlQ2m7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWY0NWE5ZWUtNjIwNC0z MjMxLWJjZTUtNDRlMzU0YWFiMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYeyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsEMjLoNllKtFPXhPI+rRXPTNpslHu1XdJgpeg7AvDeB7do4YgWJwq4 EXb4HzMtd1VfdBI2otifX2NhMoaGdmQQGjhuyYe2TteehGzPP+rkmb8JLhw+WPYD PFGOSyo0WRB7WDFQ/LX8UnoOvKou2v27lbfPiOu2HHQWYG+8/8EDQ7zXdVSpDs0F JA7M4pCR/8ocl7j8v7zNnxRup12fCWSGyy7nUm/EZVOcFPcWC+g5Jw6gADoagktj z5oYdStgUrTTEZgILZYDOjFqzkECQUVrN9Y/B0GvFHhLeGc2qca8e832ReZtrdoB HlVLhntaCf6iS9e9uKqjdKxjIw3j6Ds= -----END CERTIFICATE-----Generated at Tue Jul 1 00:28:59 2025 by rpki-client