$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa87909-a301-3d3c-9840-757e7ba6f688.roa File: 3fa87909-a301-3d3c-9840-757e7ba6f688.roa (raw, json) Hash identifier: uqaYbqPGQ7sqtF14tOKoLs/A6wgWmfUoMTBHZdkPixI= Subject key identifier: ED:24:48:DD:ED:FC:9D:0C:D5:9B:12:F7:F7:C3:C0:EE:B2:2A:9F:F9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F18009B59FB5FF79B86F4C40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa87909-a301-3d3c-9840-757e7ba6f688.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 100.4.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:09:b5:9f:b5:ff:79:b8:6f:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=e3c45649-c907-4e49-ae75-12503166da9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:77:64:0c:37:a8:8b:9a:57:60:e7:b5:cf:a2: d0:b8:ff:9f:c8:bb:02:29:ff:7f:55:2e:28:f1:1e: ab:13:ed:f8:ea:57:b2:04:e6:4a:c8:a9:19:ec:64: 26:48:8b:fd:d2:2d:ea:4c:80:08:db:4b:47:57:6b: cf:b0:3f:ef:d6:5b:f3:38:e6:4c:1d:71:ba:03:dd: 2a:67:34:92:4f:63:28:84:4b:dc:02:e1:95:e4:9b: 9b:69:61:33:6e:2b:be:b9:f7:3d:fe:08:c0:9c:c6: 46:8e:37:92:5b:56:8a:33:bb:81:25:26:9a:c4:7d: 73:5c:19:0f:06:bc:f9:93:4d:9e:4d:00:8a:6f:05: ad:be:06:48:28:9f:4b:fb:1f:ac:22:a3:db:c3:4c: d4:19:65:52:88:a1:94:fa:d5:88:87:ac:a8:b4:fe: b3:4f:1e:4e:ab:a8:53:e9:a4:1f:6e:15:b5:52:c5: 32:4a:90:ca:fd:6f:05:ec:4d:df:9c:68:b8:84:a3: d8:b4:33:9e:46:5e:6a:ef:8e:6c:c3:78:24:1c:a6: 87:a3:e7:a3:b6:77:50:c3:6d:b2:c4:83:ab:b6:78: 46:53:9c:e2:3f:fc:2e:4b:c8:f1:3f:72:1c:c8:c2: 8b:7b:2a:13:66:40:27:e9:a0:23:7f:cb:96:11:f7: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:24:48:DD:ED:FC:9D:0C:D5:9B:12:F7:F7:C3:C0:EE:B2:2A:9F:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa87909-a301-3d3c-9840-757e7ba6f688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.4.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:24:c4:bb:1c:b6:c4:33:a2:b6:4a:a3:41:05:5e:89:5c:90: f4:82:01:da:74:39:23:57:60:96:f5:c5:73:52:e1:50:4b:c6: 36:30:98:e8:86:7b:cf:4a:48:55:cc:79:b3:82:e6:af:e1:13: 19:3e:8a:85:98:8e:cb:05:84:52:45:0b:c0:04:63:c6:a1:0d: 0e:cf:ec:fd:4c:4d:ec:60:06:22:77:62:91:8f:5a:d3:36:8b: 0b:8d:51:0f:d8:f2:c5:c8:5f:c8:64:08:4b:23:5f:65:0a:2d: 99:e7:ab:1d:3b:5f:9b:e8:0b:42:10:ea:f9:dd:3a:c0:81:60: 35:8e:4d:fa:a0:37:bb:b6:d8:3a:f8:eb:b2:22:d9:16:77:ae: 3f:62:28:a6:0d:44:69:24:a1:2a:b3:6e:32:92:db:b9:f5:dc: 87:b7:d2:34:d9:01:57:07:de:b7:80:34:93:4a:29:66:73:bf: dc:ce:96:92:cc:c1:21:08:ad:87:31:4e:d1:6e:1d:7d:1c:ae: 80:8e:b7:8c:53:3d:d2:3f:72:0a:32:0d:3e:a5:77:e9:c1:0d: cc:15:e0:9c:0c:f6:6a:08:56:bb:a4:d3:c2:a1:b0:2c:19:91: de:0e:07:ad:60:10:2f:11:ef:cc:db:72:7f:50:fc:fb:80:61: f0:a8:c8:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAm1n7X/ebhvTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZTNjNDU2NDktYzkwNy00ZTQ5LWFlNzUtMTI1MDMxNjZkYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhndkDDeoi5pXYOe1z6LQuP+fyLsCKf9/VS4o 8R6rE+346leyBOZKyKkZ7GQmSIv90i3qTIAI20tHV2vPsD/v1lvzOOZMHXG6A90q ZzSST2MohEvcAuGV5JubaWEzbiu+ufc9/gjAnMZGjjeSW1aKM7uBJSaaxH1zXBkP Brz5k02eTQCKbwWtvgZIKJ9L+x+sIqPbw0zUGWVSiKGU+tWIh6yotP6zTx5Oq6hT 6aQfbhW1UsUySpDK/W8F7E3fnGi4hKPYtDOeRl5q745sw3gkHKaHo+ejtndQw22y xIOrtnhGU5ziP/wuS8jxP3IcyMKLeyoTZkAn6aAjf8uWEfe+cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0kSN3t/J0M1ZsS9/fDwO6yKp/5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZhODc5MDktYTMwMS0z ZDNjLTk4NDAtNzU3ZTdiYTZmNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHZAQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAokxLsctsQzorZKo0EFXolckPSCAdp0OSNXYJb1xXNS4VBLxjYwmOiG e89KSFXMebOC5q/hExk+ioWYjssFhFJFC8AEY8ahDQ7P7P1MTexgBiJ3YpGPWtM2 iwuNUQ/Y8sXIX8hkCEsjX2UKLZnnqx07X5voC0IQ6vndOsCBYDWOTfqgN7u22Dr4 67Ii2RZ3rj9iKKYNRGkkoSqzbjKS27n13Ie30jTZAVcH3reANJNKKWZzv9zOlpLM wSEIrYcxTtFuHX0croCOt4xTPdI/cgoyDT6ld+nBDcwV4JwM9moIVruk08KhsCwZ kd4OB61gEC8R78zbcn9Q/PuAYfCoyN4= -----END CERTIFICATE-----Generated at Mon Jun 30 19:43:55 2025 by rpki-client