$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22a1a08e-ade9-3ce0-8ecb-1cedcfcd8433.roa File: 22a1a08e-ade9-3ce0-8ecb-1cedcfcd8433.roa (raw, json) Hash identifier: xRyPBpz7k+4RZOTd8ofHYuZfFm1TbpjnU8QnqIHrzIU= Subject key identifier: E7:06:05:31:E6:3C:68:C5:5E:FD:8D:05:01:A1:A0:70:38:D6:BA:AC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F18007A7C66119DE482AE268 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22a1a08e-ade9-3ce0-8ecb-1cedcfcd8433.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 70.22.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:07:a7:c6:61:19:de:48:2a:e2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=3d06d87c-c304-414f-afc8-71fba1675e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6a:cf:d9:6b:49:7f:61:b8:55:ce:22:18:c6: 28:66:77:c9:60:f2:54:94:82:d1:1f:03:df:5a:e1: 29:d4:62:32:5d:3f:72:17:0f:35:47:df:ab:17:35: 54:6c:ad:4e:48:c8:23:1d:e7:28:94:bf:b7:80:5a: 53:03:c9:31:06:83:fe:4c:5d:e8:84:65:6c:d1:a7: 2d:5f:5d:f5:13:16:40:09:29:d6:ad:b7:ed:8d:46: 14:34:76:db:96:dc:ee:74:1f:20:84:02:ad:4c:48: a5:cd:77:f8:fa:09:fd:09:41:27:06:2c:80:97:43: 55:be:f9:cb:91:b0:a1:aa:f1:86:ac:c3:b0:15:f2: fd:fc:9c:35:3e:8e:ab:c2:92:88:0f:97:fe:ca:95: 98:1f:ca:bc:61:fc:20:ec:a3:a6:32:0d:b1:ad:6b: d0:d7:53:6a:95:38:d7:73:9d:90:de:16:0d:0c:d0: 1b:c9:f7:c3:95:b5:5a:6f:71:e7:da:fd:10:cf:a3: 7a:f9:75:53:4c:29:c6:00:99:d1:2b:fa:41:f3:60: d6:5a:5f:e4:3d:87:51:4e:57:83:90:17:5a:ab:e5: c1:94:77:c7:b7:84:c4:18:16:11:fe:af:6d:b8:b3: 6e:d6:b9:ea:bf:c4:18:17:90:f2:97:4c:5c:77:e1: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:06:05:31:E6:3C:68:C5:5E:FD:8D:05:01:A1:A0:70:38:D6:BA:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22a1a08e-ade9-3ce0-8ecb-1cedcfcd8433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.22.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:6a:19:57:77:d2:48:39:a7:d9:d5:d8:31:ff:e6:cc:e2:62: a2:6c:f8:7d:09:c4:f2:91:39:f6:15:b7:14:38:87:b2:52:cb: 82:06:31:98:15:95:dc:ed:29:b5:6e:9e:8d:e6:2c:68:18:70: d7:9f:c8:a3:57:83:7a:d8:52:73:76:45:71:a0:23:06:cd:9c: 20:f3:8b:45:70:e4:4b:76:d8:55:cf:a3:bb:a4:59:8f:1a:2b: 11:c1:b1:cf:8f:28:39:ae:c0:b5:63:13:44:4f:d2:4f:55:b9: fc:12:9c:0d:38:ec:e2:9c:bb:b0:bb:42:2b:fe:9a:c7:d1:fe: 51:ea:01:13:eb:18:21:a6:2b:a8:47:1c:3a:2f:ea:89:16:20: 79:3f:74:95:60:47:79:ba:22:59:36:5b:c6:21:04:93:7b:c3: 8a:5f:99:bb:d5:3d:09:48:c9:7f:db:58:5e:f9:b1:a5:ba:09: db:1a:74:1d:ae:49:ca:5e:13:91:3f:95:11:47:b2:93:6c:df: c5:ce:f1:df:01:1c:b4:89:8d:37:00:b9:a1:4e:16:63:83:a2: 84:e6:c5:29:93:cc:98:56:e9:2d:23:3a:73:ba:ca:43:90:ae: e4:ea:d0:4f:98:75:62:cb:de:1c:1a:05:2c:26:49:ec:be:2e: 67:bf:05:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAenxmEZ3kgq4mgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk M2QwNmQ4N2MtYzMwNC00MTRmLWFmYzgtNzFmYmExNjc1ZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWrP2WtJf2G4Vc4iGMYoZnfJYPJUlILRHwPf WuEp1GIyXT9yFw81R9+rFzVUbK1OSMgjHecolL+3gFpTA8kxBoP+TF3ohGVs0act X131ExZACSnWrbftjUYUNHbbltzudB8ghAKtTEilzXf4+gn9CUEnBiyAl0NVvvnL kbChqvGGrMOwFfL9/Jw1Po6rwpKID5f+ypWYH8q8Yfwg7KOmMg2xrWvQ11NqlTjX c52Q3hYNDNAbyffDlbVab3Hn2v0Qz6N6+XVTTCnGAJnRK/pB82DWWl/kPYdRTleD kBdaq+XBlHfHt4TEGBYR/q9tuLNu1rnqv8QYF5Dyl0xcd+FAtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcGBTHmPGjFXv2NBQGhoHA41rqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjJhMWEwOGUtYWRlOS0z Y2UwLThlY2ItMWNlZGNmY2Q4NDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9qGVd30kg5p9nV2DH/5sziYqJs+H0JxPKROfYVtxQ4h7JSy4IGMZgV ldztKbVuno3mLGgYcNefyKNXg3rYUnN2RXGgIwbNnCDzi0Vw5Et22FXPo7ukWY8a KxHBsc+PKDmuwLVjE0RP0k9VufwSnA047OKcu7C7Qiv+msfR/lHqARPrGCGmK6hH HDov6okWIHk/dJVgR3m6Ilk2W8YhBJN7w4pfmbvVPQlIyX/bWF75saW6CdsadB2u ScpeE5E/lRFHspNs38XO8d8BHLSJjTcAuaFOFmODooTmxSmTzJhW6S0jOnO6ykOQ ruTq0E+YdWLL3hwaBSwmSey+Lme/BcQ= -----END CERTIFICATE-----Generated at Tue Jul 1 13:09:11 2025 by rpki-client