$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a5b8e35-ea6a-3c09-b797-8bc3561cb2f3.roa File: 4a5b8e35-ea6a-3c09-b797-8bc3561cb2f3.roa (raw, json) Hash identifier: EdUfwKTXIpii42oTGSM8Dc7blVYbTat2wWTnXn3cxvQ= Subject key identifier: 3D:85:69:AB:E7:6D:B8:1B:22:D3:D7:60:44:BF:B6:06:12:B2:70:B6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA85299D7052DEB3CC68EEE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a5b8e35-ea6a-3c09-b797-8bc3561cb2f3.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 71.190.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:29:9d:70:52:de:b3:cc:68:ee:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=aca03786-e4c1-4a91-aa95-c8b36ac794c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:7f:ab:06:ba:a1:c4:6b:3e:3b:b1:6c:a7: e0:31:00:dc:13:b6:1d:58:ed:e2:4f:45:4a:40:34: f7:52:a9:5e:cf:d0:86:0a:31:4d:fe:f5:a6:b5:c4: 00:5c:53:f3:56:c0:4b:2a:78:58:42:98:a9:60:7e: 6a:73:e8:8e:a5:c8:90:1c:10:87:4f:a3:c2:3a:d0: 86:bc:60:26:4c:6e:24:db:be:fc:79:1a:8d:35:5f: 1f:84:1c:74:49:47:74:c8:67:f1:cd:40:02:78:65: 41:ed:f7:f9:86:49:8b:dd:4f:92:ea:48:b3:fc:b6: 6c:9e:7a:07:99:98:4f:fc:82:91:8a:00:72:54:a3: c5:31:62:1e:26:ba:6f:1b:ed:2c:32:29:58:72:c4: 11:78:43:05:25:79:ba:9b:bd:9d:33:c9:a0:f2:0b: 8a:89:fb:91:6e:e3:8e:0c:18:53:18:3f:49:ad:46: 1e:60:d6:23:49:e1:f3:c0:c3:ba:fa:22:2a:21:57: 2f:08:2a:b1:d6:eb:4b:98:e0:fa:75:dd:de:d9:44: 00:64:97:c5:58:15:0c:7e:6e:44:c0:a5:98:75:9c: c9:37:4d:d1:71:12:1d:f3:b2:5d:84:39:66:70:ce: 5a:70:04:07:5b:fd:98:56:7f:1b:e7:1c:23:c8:60: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:85:69:AB:E7:6D:B8:1B:22:D3:D7:60:44:BF:B6:06:12:B2:70:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a5b8e35-ea6a-3c09-b797-8bc3561cb2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.190.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d5:da:2c:39:3a:81:4b:66:73:c2:84:11:84:0c:8a:14:1e: e5:93:f3:a7:75:02:08:3d:c4:ab:c5:17:85:b1:c7:68:7a:12: 8f:90:6e:40:4f:58:58:9c:ac:42:1f:71:50:d1:77:7b:a7:59: ea:ce:00:7d:55:f1:92:29:c3:7b:51:91:02:b5:fc:89:41:33: ac:f5:47:30:c5:85:6d:8b:0e:9b:97:e3:49:63:8e:9b:33:6a: 11:f0:5b:20:e8:fa:0a:5b:cc:9c:5d:a1:7a:6d:47:32:54:d2: da:e0:24:4a:b7:0d:58:e3:39:cf:9a:b9:59:9b:83:06:cc:ec: ac:46:f2:0f:ac:ab:6a:5d:6b:fe:6c:48:02:6b:a6:bc:01:8f: 40:73:6f:ca:b5:c1:65:db:d2:19:55:25:0b:ae:27:e9:4a:eb: 2d:40:67:cd:b8:ff:91:93:48:cb:7d:e0:b8:85:c3:ad:eb:fa: 45:42:b1:93:84:c0:b9:ad:f0:15:7c:29:70:bf:29:00:d9:6b: 0e:64:32:47:6c:5a:d7:52:45:4e:66:97:d4:aa:ea:f2:57:0c: 72:93:b8:3c:54:95:f3:df:e9:82:96:81:51:dd:58:2d:99:b6: 04:fa:3c:31:d1:07:8e:c7:ef:5c:45:93:3f:66:5d:33:8d:95: fb:5a:34:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSmdcFLes8xo7uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk YWNhMDM3ODYtZTRjMS00YTkxLWFhOTUtYzhiMzZhYzc5NGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhV/qwa6ocRrPjuxbKfgMQDcE7YdWO3iT0VK QDT3Uqlez9CGCjFN/vWmtcQAXFPzVsBLKnhYQpipYH5qc+iOpciQHBCHT6PCOtCG vGAmTG4k2778eRqNNV8fhBx0SUd0yGfxzUACeGVB7ff5hkmL3U+S6kiz/LZsnnoH mZhP/IKRigByVKPFMWIeJrpvG+0sMilYcsQReEMFJXm6m72dM8mg8guKifuRbuOO DBhTGD9JrUYeYNYjSeHzwMO6+iIqIVcvCCqx1utLmOD6dd3e2UQAZJfFWBUMfm5E wKWYdZzJN03RcRId87JdhDlmcM5acAQHW/2YVn8b5xwjyGBcpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2FaavnbbgbItPXYES/tgYSsnC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGE1YjhlMzUtZWE2YS0z YzA5LWI3OTctOGJjMzU2MWNiMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR74AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXV2iw5OoFLZnPChBGEDIoUHuWT86d1Agg9xKvFF4Wxx2h6Eo+QbkBP WFicrEIfcVDRd3unWerOAH1V8ZIpw3tRkQK1/IlBM6z1RzDFhW2LDpuX40ljjpsz ahHwWyDo+gpbzJxdoXptRzJU0trgJEq3DVjjOc+auVmbgwbM7KxG8g+sq2pda/5s SAJrprwBj0Bzb8q1wWXb0hlVJQuuJ+lK6y1AZ824/5GTSMt94LiFw63r+kVCsZOE wLmt8BV8KXC/KQDZaw5kMkdsWtdSRU5ml9Sq6vJXDHKTuDxUlfPf6YKWgVHdWC2Z tgT6PDHRB47H71xFkz9mXTONlftaNH4= -----END CERTIFICATE-----Generated at Tue Jul 1 21:20:55 2025 by rpki-client