$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4235e110-b55f-32a5-abcd-41b0f3c1feb1.roa File: 4235e110-b55f-32a5-abcd-41b0f3c1feb1.roa (raw, json) Hash identifier: /2ftH2iWFMjZxHBaSWG5W7bB0k4rX0oy1Hg5RvcWIao= Subject key identifier: BA:63:F4:45:2E:1B:A8:49:F0:23:89:E1:55:BF:6E:CE:98:43:98:5F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F1800C51818D23ADEAF19900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4235e110-b55f-32a5-abcd-41b0f3c1feb1.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 173.71.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:0c:51:81:8d:23:ad:ea:f1:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=e1a2c374-a80c-43b0-a10d-56e9a44583d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c3:e3:a9:4b:9a:0e:09:34:12:1f:c6:30:f8: 06:3f:7e:0a:82:64:38:68:b3:a2:80:50:4b:6d:a0: 08:44:4f:c6:a9:ca:3c:d2:2f:50:6b:a6:04:8f:39: 12:67:65:23:37:07:1c:16:9f:c7:3b:84:c6:c5:d7: 36:46:d1:71:22:68:96:24:28:77:a7:7c:6c:7d:39: d1:9a:af:dd:c2:f8:66:e6:cc:a0:f8:91:28:f2:6a: 93:8e:db:15:c0:e0:44:b8:b1:2f:d9:96:eb:57:07: e7:6c:68:11:85:42:94:5c:1c:ae:d3:e7:d8:46:91: e4:da:c7:01:98:6a:6b:49:fc:d2:43:7a:26:5e:06: a6:8a:f0:c3:ee:75:95:85:3f:99:55:69:98:54:68: 65:ae:bb:f8:5a:51:d7:60:99:e9:c5:da:30:cf:f7: e4:7d:b2:54:ff:a6:2a:5d:71:65:42:47:c9:f4:11: 4b:26:54:24:d1:a4:28:7b:b0:8f:a0:ac:df:68:16: 50:a4:0f:0b:69:4c:8f:d6:54:8c:92:db:23:ef:d7: c5:6d:15:88:ea:e2:da:10:13:cc:ea:a8:33:4e:fa: b7:fd:59:19:59:28:3f:67:35:53:99:a2:70:a3:11: 1a:fb:81:95:ff:b7:a1:f9:7e:cb:d8:47:d0:b0:94: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:63:F4:45:2E:1B:A8:49:F0:23:89:E1:55:BF:6E:CE:98:43:98:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4235e110-b55f-32a5-abcd-41b0f3c1feb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.71.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:6f:41:83:8b:c5:a1:6c:27:0b:63:11:40:84:61:9f:e5:5b: a4:2e:9f:ae:c7:a1:c4:95:b2:c5:b7:55:c9:f0:c0:50:d3:24: 03:40:86:07:63:ad:33:54:89:be:f5:b6:00:bc:e2:2d:b9:c7: ad:2c:99:d3:58:c4:aa:09:bd:cf:7f:ef:cb:26:84:ab:7d:1a: 61:27:29:b4:33:72:d9:62:80:c3:97:05:ed:10:81:ef:80:74: bc:4f:7d:a5:24:65:59:77:c8:95:ad:43:58:19:7f:aa:12:e7: 59:54:f6:dc:1d:87:cf:86:04:fa:8f:20:83:15:6f:89:4a:ac: fb:08:c6:9f:3d:e8:2e:a0:99:e6:f8:f4:fe:72:cb:4b:00:66: 6a:02:83:bf:e7:5a:6f:ed:ae:91:fa:1d:96:9a:a3:03:c9:28: d1:6a:2e:0d:2d:26:cc:ca:b8:c5:0e:b0:94:20:3f:74:4a:96: 0b:fb:ac:50:92:79:5e:73:86:c4:b8:87:4c:0a:87:23:a0:96: b5:18:64:65:37:f7:89:7a:50:95:7d:bd:9c:cd:df:08:29:12: 50:cd:b9:7e:1f:dd:a4:9d:9d:83:c5:d5:24:50:4b:da:07:17: aa:62:5f:bb:8d:f9:e5:67:41:97:67:7c:fb:71:7a:31:82:e1: 12:6b:af:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAxRgY0jrerxmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZTFhMmMzNzQtYTgwYy00M2IwLWExMGQtNTZlOWE0NDU4M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8PjqUuaDgk0Eh/GMPgGP34KgmQ4aLOigFBL baAIRE/Gqco80i9Qa6YEjzkSZ2UjNwccFp/HO4TGxdc2RtFxImiWJCh3p3xsfTnR mq/dwvhm5syg+JEo8mqTjtsVwOBEuLEv2ZbrVwfnbGgRhUKUXByu0+fYRpHk2scB mGprSfzSQ3omXgamivDD7nWVhT+ZVWmYVGhlrrv4WlHXYJnpxdowz/fkfbJU/6Yq XXFlQkfJ9BFLJlQk0aQoe7CPoKzfaBZQpA8LaUyP1lSMktsj79fFbRWI6uLaEBPM 6qgzTvq3/VkZWSg/ZzVTmaJwoxEa+4GV/7eh+X7L2EfQsJRsEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpj9EUuG6hJ8COJ4VW/bs6YQ5hfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDIzNWUxMTAtYjU1Zi0z MmE1LWFiY2QtNDFiMGYzYzFmZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrUegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1vQYOLxaFsJwtjEUCEYZ/lW6Qun67HocSVssW3VcnwwFDTJANAhgdj rTNUib71tgC84i25x60smdNYxKoJvc9/78smhKt9GmEnKbQzctligMOXBe0Qge+A dLxPfaUkZVl3yJWtQ1gZf6oS51lU9twdh8+GBPqPIIMVb4lKrPsIxp896C6gmeb4 9P5yy0sAZmoCg7/nWm/trpH6HZaaowPJKNFqLg0tJszKuMUOsJQgP3RKlgv7rFCS eV5zhsS4h0wKhyOglrUYZGU394l6UJV9vZzN3wgpElDNuX4f3aSdnYPF1SRQS9oH F6piX7uN+eVnQZdnfPtxejGC4RJrrxA= -----END CERTIFICATE-----Generated at Tue Jul 1 00:25:35 2025 by rpki-client