$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c8c920b-c526-3c5f-9275-8f041f85fd59.roa File: 3c8c920b-c526-3c5f-9275-8f041f85fd59.roa (raw, json) Hash identifier: ji9MSpCptXDEOvUsVnfO8v3GMzaW1qjuWZungMZKpnY= Subject key identifier: 1E:24:1E:23:5F:33:94:6A:A7:3F:DB:2D:0A:61:06:FE:FE:B2:69:4F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B0AE6F90253ABF78B8D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c8c920b-c526-3c5f-9275-8f041f85fd59.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 701 IP address blocks: 70.106.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:0a:e6:f9:02:53:ab:f7:8b:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=9553eabb-b90a-4f35-890a-6de887d87dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:47:28:14:b9:f7:ff:3e:ee:0a:6d:46:7c:2d: 93:fa:81:e8:37:31:26:dd:a1:a6:4b:b5:68:e8:74: 3c:57:79:30:61:25:a6:0f:16:5e:04:c9:4f:1b:1c: 52:4b:ab:09:e7:76:01:70:31:bb:4c:ad:22:a8:94: 96:a9:0b:eb:01:b5:bc:a7:0c:8d:18:05:ce:dd:bc: cc:ad:48:cb:98:51:2f:8c:14:79:19:04:30:7e:00: ca:81:c0:0a:90:e0:d2:ff:c3:54:e6:65:10:34:a8: f3:15:87:f7:87:12:6c:d6:bb:2b:cd:4b:6b:00:dc: 45:8b:74:3a:50:a6:40:75:65:d6:7d:cf:eb:af:5e: ca:b6:3c:ea:e6:12:0d:35:52:a1:97:7d:eb:f5:cf: f9:cb:84:ff:13:7c:9b:89:67:14:df:8c:4e:00:83: b1:aa:21:c3:78:8c:df:ca:96:b3:d0:63:55:dc:c8: 86:d8:f6:db:a1:8f:97:4b:dc:af:b2:85:9e:7f:3c: 40:3d:6f:b1:3b:3e:e5:11:4c:cf:b3:3e:77:b5:01: 93:88:31:ee:fc:fc:b6:3f:99:50:a8:be:fb:bc:f0: f6:be:16:c1:90:dc:ed:3f:8f:4f:80:31:c1:7e:51: 11:05:82:0d:88:26:26:8a:83:b2:4e:83:82:6a:c6: ec:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:24:1E:23:5F:33:94:6A:A7:3F:DB:2D:0A:61:06:FE:FE:B2:69:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c8c920b-c526-3c5f-9275-8f041f85fd59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.106.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:cf:66:0c:c3:63:51:dc:6d:38:df:91:c9:b9:c7:12:f0:aa: 93:31:63:e0:e9:cc:0b:bb:cd:71:d7:23:0d:fa:f1:2b:cd:96: 10:b6:52:4f:89:a7:ec:f4:db:15:57:1b:68:71:35:40:df:41: d7:9c:e1:52:8f:7d:b4:66:fd:db:7d:29:32:7e:51:b0:e9:08: 87:cb:7a:1d:86:3a:8a:34:b3:bc:75:e0:d2:64:33:3c:e9:41: 9b:f0:a7:c4:2b:36:d7:b3:5c:91:7c:11:59:17:b5:40:83:49: fa:21:e1:33:a6:d1:b0:9a:78:a5:c1:9d:99:c9:45:ad:8a:5a: cd:47:2d:df:e4:3a:3d:e1:4c:e0:a8:e0:3b:4d:4e:36:09:92: f1:a1:7f:48:8f:dd:8e:cc:35:b5:9e:87:e0:f5:aa:38:b4:bf: 64:b1:5c:6d:e3:6b:ca:df:bb:ed:c0:71:e0:3d:87:98:8d:9a: 3b:26:98:7b:29:ae:2c:a2:ea:c4:eb:38:d2:6e:0b:27:36:0d: e9:7b:08:7b:e7:80:66:7b:ee:cd:a7:0c:40:2b:92:06:2f:5c: 69:a7:dc:34:e0:0e:25:e0:03:6c:5f:ad:fd:f0:13:14:10:db: 6e:09:6a:32:35:8c:2a:c9:b7:75:23:d7:85:a3:31:80:92:a6: bd:4b:b3:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewrm+QJTq/eLjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk OTU1M2VhYmItYjkwYS00ZjM1LTg5MGEtNmRlODg3ZDg3ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkcoFLn3/z7uCm1GfC2T+oHoNzEm3aGmS7Vo 6HQ8V3kwYSWmDxZeBMlPGxxSS6sJ53YBcDG7TK0iqJSWqQvrAbW8pwyNGAXO3bzM rUjLmFEvjBR5GQQwfgDKgcAKkODS/8NU5mUQNKjzFYf3hxJs1rsrzUtrANxFi3Q6 UKZAdWXWfc/rr17Ktjzq5hINNVKhl33r9c/5y4T/E3ybiWcU34xOAIOxqiHDeIzf ypaz0GNV3MiG2PbboY+XS9yvsoWefzxAPW+xOz7lEUzPsz53tQGTiDHu/Py2P5lQ qL77vPD2vhbBkNztP49PgDHBflERBYINiCYmioOyToOCasbsAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4kHiNfM5Rqpz/bLQphBv7+smlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2M4YzkyMGItYzUyNi0z YzVmLTkyNzUtOGYwNDFmODVmZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARmoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPPZgzDY1HcbTjfkcm5xxLwqpMxY+DpzAu7zXHXIw368SvNlhC2Uk+J p+z02xVXG2hxNUDfQdec4VKPfbRm/dt9KTJ+UbDpCIfLeh2GOoo0s7x14NJkMzzp QZvwp8QrNtezXJF8EVkXtUCDSfoh4TOm0bCaeKXBnZnJRa2KWs1HLd/kOj3hTOCo 4DtNTjYJkvGhf0iP3Y7MNbWeh+D1qji0v2SxXG3ja8rfu+3AceA9h5iNmjsmmHsp riyi6sTrONJuCyc2Del7CHvngGZ77s2nDEArkgYvXGmn3DTgDiXgA2xfrf3wExQQ 224JajI1jCrJt3Uj14WjMYCSpr1Lsws= -----END CERTIFICATE-----Generated at Tue Jul 1 21:44:59 2025 by rpki-client