$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35331e2e-b0e5-3e19-aacc-1dd54ba0be69.roa File: 35331e2e-b0e5-3e19-aacc-1dd54ba0be69.roa (raw, json) Hash identifier: YfISGxEL3cDiSlsD+rxrkP87WSu2xZbCTXEY+sTKIdc= Subject key identifier: D7:66:23:BE:CB:E3:A1:70:83:32:73:5E:66:A5:A2:E9:CE:5B:23:B8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA853A943D54094098EDAA00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35331e2e-b0e5-3e19-aacc-1dd54ba0be69.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 71.255.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:3a:94:3d:54:09:40:98:ed:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=9c103f5a-bda5-44e4-8ee2-818bfd2bf3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:62:be:d4:79:72:97:d1:b0:97:13:94:05:79: 6a:ba:10:66:96:06:e9:98:00:b2:8a:06:2c:3b:68: d2:ba:fd:74:81:0b:6b:b2:9d:bc:77:66:f5:ee:76: ae:5c:6c:03:85:89:40:53:98:ee:63:df:c5:61:79: 52:6c:fc:d4:c3:d9:29:d0:db:73:82:f9:9e:63:0a: d2:d1:c2:76:fd:e8:94:13:11:d9:e0:5c:0b:8a:47: c1:0a:3f:92:15:d5:25:1f:f4:03:6f:a4:c9:76:c2: 75:bf:37:0f:52:3a:f3:d3:c7:dc:88:da:3a:fb:ef: 38:8c:d6:7d:22:7c:2c:a4:fd:59:d2:7b:08:00:b8: ad:7d:9a:b5:d4:1c:8e:5d:2e:2d:18:ad:59:f2:97: 4c:f1:e8:1b:75:b4:91:f2:32:f1:83:d4:4d:73:7c: 17:63:1b:cf:c8:34:9e:5e:16:e9:79:e8:be:0c:8c: 2b:73:c6:f7:9b:90:64:97:dd:c9:59:5e:c1:48:ad: c1:29:b9:b6:9a:59:5e:a3:98:61:cb:74:53:21:4c: 7e:24:dd:ab:78:9d:49:25:47:5e:73:f1:ea:e9:48: 8a:ea:c4:30:6a:c2:e5:a4:e2:d8:b4:87:5a:1b:af: d5:be:b0:a8:1d:5f:51:94:0c:d6:40:0d:53:1a:8c: 96:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:66:23:BE:CB:E3:A1:70:83:32:73:5E:66:A5:A2:E9:CE:5B:23:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35331e2e-b0e5-3e19-aacc-1dd54ba0be69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.255.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:57:44:0c:7d:84:9b:18:39:27:ae:39:17:e2:60:97:24:94: 02:a6:77:00:66:d9:50:da:f1:cd:5f:06:92:d6:4b:04:91:47: 9c:bb:1f:b5:6d:ca:67:71:c3:2d:40:64:4d:8e:56:61:8a:ba: 92:8f:48:e6:42:1b:08:24:d3:3b:21:08:f2:40:98:b4:58:9c: a3:6c:74:71:0f:c1:f0:81:70:bf:f1:42:ed:67:9e:97:fb:aa: c4:18:2f:5e:ed:ae:92:44:5b:10:59:1d:38:d7:32:be:f3:97: ba:f2:da:7c:a2:db:0a:3f:30:20:9e:b1:80:e6:5a:df:b2:74: 81:6c:33:07:ca:e1:0f:84:13:f7:89:de:5a:1e:74:ee:14:61: 87:9a:3b:ab:9c:ae:01:28:73:2b:62:83:d0:dd:3b:d0:3f:9e: 58:96:8f:1c:c6:04:49:fa:f9:9a:54:4b:9c:ef:8d:4a:0c:a0: e8:e7:22:c1:cd:fa:c1:f3:72:e8:aa:4f:2c:76:9a:e0:dc:52: 4d:44:63:52:6d:ff:c3:27:78:5a:4d:d8:09:74:31:c8:a9:70: c5:df:31:5b:df:33:bf:6b:a8:93:cc:ff:2a:e8:c0:87:13:c7: 40:02:c4:90:eb:92:6b:5a:a5:a5:dd:d4:c1:d1:e6:ac:b1:81: e9:fd:1e:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTqUPVQJQJjtqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk OWMxMDNmNWEtYmRhNS00NGU0LThlZTItODE4YmZkMmJmM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mK+1Hlyl9GwlxOUBXlquhBmlgbpmACyigYs O2jSuv10gQtrsp28d2b17nauXGwDhYlAU5juY9/FYXlSbPzUw9kp0NtzgvmeYwrS 0cJ2/eiUExHZ4FwLikfBCj+SFdUlH/QDb6TJdsJ1vzcPUjrz08fciNo6++84jNZ9 InwspP1Z0nsIALitfZq11ByOXS4tGK1Z8pdM8egbdbSR8jLxg9RNc3wXYxvPyDSe Xhbpeei+DIwrc8b3m5Bkl93JWV7BSK3BKbm2mlleo5hhy3RTIUx+JN2reJ1JJUde c/Hq6UiK6sQwasLlpOLYtIdaG6/VvrCoHV9RlAzWQA1TGoyWSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdmI77L46FwgzJzXmalounOWyO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzUzMzFlMmUtYjBlNS0z ZTE5LWFhY2MtMWRkNTRiYTBiZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR/8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNXRAx9hJsYOSeuORfiYJcklAKmdwBm2VDa8c1fBpLWSwSRR5y7H7Vt ymdxwy1AZE2OVmGKupKPSOZCGwgk0zshCPJAmLRYnKNsdHEPwfCBcL/xQu1nnpf7 qsQYL17trpJEWxBZHTjXMr7zl7ry2nyi2wo/MCCesYDmWt+ydIFsMwfK4Q+EE/eJ 3loedO4UYYeaO6ucrgEocytig9DdO9A/nliWjxzGBEn6+ZpUS5zvjUoMoOjnIsHN +sHzcuiqTyx2muDcUk1EY1Jt/8MneFpN2Al0McipcMXfMVvfM79rqJPM/yrowIcT x0ACxJDrkmtapaXd1MHR5qyxgen9Hl0= -----END CERTIFICATE-----Generated at Mon Jun 30 19:08:47 2025 by rpki-client