$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ac5ec2e-a74b-3007-a0d7-37a634bf1338.roa File: 4ac5ec2e-a74b-3007-a0d7-37a634bf1338.roa (raw, json) Hash identifier: Gh0NhMVmqGBIACcHuI5sbTc7OvvpkdVhoQGFZ6eDtCc= Subject key identifier: 69:94:E9:4B:B6:38:13:01:24:B5:7B:7C:B7:96:C1:DC:2C:D0:2D:51 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA852881667DA0E6D8C8AF00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ac5ec2e-a74b-3007-a0d7-37a634bf1338.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 70.18.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:28:81:66:7d:a0:e6:d8:c8:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=d9268b80-d411-4ace-bcb8-43a42e7833ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:13:00:75:47:4e:89:1c:07:8c:f2:9e:84:d1: 4f:4c:b7:b4:8f:cf:e8:18:69:57:c5:17:7b:0e:53: c9:a7:3a:b8:71:a0:cc:e3:ab:c9:b2:25:80:68:06: a2:e4:cf:b0:9b:5e:c1:5c:48:1c:0a:78:8e:a3:6c: ea:c2:8d:a0:fc:9e:b2:2a:6f:4d:70:37:87:e0:5f: cb:66:1c:33:7a:aa:a1:2b:51:9c:61:73:26:05:75: 61:71:68:1c:0c:85:0a:ca:a8:37:00:75:d2:4b:7e: ee:b4:cd:5e:31:7a:2d:2d:28:76:9e:49:0c:86:3d: 20:97:68:06:96:5c:fb:85:0d:1d:88:89:7e:d1:86: 85:a6:f3:b4:1f:83:8a:ea:b0:a1:9b:59:ae:0f:f4: 0a:96:67:a0:2c:b9:52:03:ff:fe:6b:33:02:e6:29: 20:b0:b9:66:e0:03:97:ba:19:2b:82:b9:70:61:f0: 4a:0e:18:78:7c:ee:27:6a:4a:14:bc:77:8f:41:77: 1d:30:f2:c1:31:d5:f6:8c:ca:93:62:2e:75:37:50: b2:cb:d4:7b:36:8c:d2:11:ec:da:12:29:42:1f:b1: 73:95:a9:46:79:cf:b0:46:e7:6e:13:b4:2f:73:ed: 00:15:8f:21:96:58:88:ae:77:f3:c8:e9:a4:37:14: 3e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:94:E9:4B:B6:38:13:01:24:B5:7B:7C:B7:96:C1:DC:2C:D0:2D:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ac5ec2e-a74b-3007-a0d7-37a634bf1338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.18.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:6b:88:d8:93:a6:43:e1:6c:dd:54:6b:b7:4a:9d:f1:5e:50: 66:6c:9d:98:6f:48:a9:ce:fa:f4:6d:50:59:fc:fd:34:25:e1: ae:fc:92:c9:06:b6:c2:90:e8:2f:3d:de:7a:07:b6:99:62:3f: 10:82:a2:fd:21:cb:90:8d:83:1c:cb:da:1e:b1:1c:aa:47:61: 61:a4:da:ee:f7:f2:9d:87:20:6c:cf:77:a8:18:ac:06:e0:45: 43:c1:d9:e8:b5:ba:12:00:51:71:a9:0e:92:e8:a3:82:2f:f5: 6f:07:8c:ce:d2:8a:2c:09:37:46:d7:81:a3:7a:bb:15:55:e5: c9:9e:0a:d3:8b:1f:6b:c9:ce:24:9f:1e:ff:aa:d9:67:dd:d4: 85:34:81:60:ed:c6:d8:8b:1e:00:f9:4f:4e:50:3e:61:ed:3b: a0:9c:b9:6b:d5:17:a7:17:50:89:bc:0d:bd:ac:0e:11:72:bb: e8:f3:eb:82:f3:f3:e8:86:7a:7c:cc:57:72:d8:b8:fa:c6:3d: 95:97:0f:e9:d4:6d:b9:40:3f:b8:ee:15:c1:2d:b4:27:9b:1d: 79:bb:5c:d9:87:a6:78:df:86:99:bb:a4:ea:55:60:16:81:1d: e6:02:25:b8:84:bc:c6:96:16:94:df:34:a5:19:b4:42:aa:24: b1:d4:85:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSiBZn2g5tjIrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZDkyNjhiODAtZDQxMS00YWNlLWJjYjgtNDNhNDJlNzgzM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RMAdUdOiRwHjPKehNFPTLe0j8/oGGlXxRd7 DlPJpzq4caDM46vJsiWAaAai5M+wm17BXEgcCniOo2zqwo2g/J6yKm9NcDeH4F/L ZhwzeqqhK1GcYXMmBXVhcWgcDIUKyqg3AHXSS37utM1eMXotLSh2nkkMhj0gl2gG llz7hQ0diIl+0YaFpvO0H4OK6rChm1muD/QKlmegLLlSA//+azMC5ikgsLlm4AOX uhkrgrlwYfBKDhh4fO4nakoUvHePQXcdMPLBMdX2jMqTYi51N1Cyy9R7NozSEeza EilCH7FzlalGec+wRuduE7Qvc+0AFY8hlliIrnfzyOmkNxQ+4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmU6Uu2OBMBJLV7fLeWwdws0C1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGFjNWVjMmUtYTc0Yi0z MDA3LWEwZDctMzdhNjM0YmYxMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRhIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxriNiTpkPhbN1Ua7dKnfFeUGZsnZhvSKnO+vRtUFn8/TQl4a78kskG tsKQ6C893noHtpliPxCCov0hy5CNgxzL2h6xHKpHYWGk2u738p2HIGzPd6gYrAbg RUPB2ei1uhIAUXGpDpLoo4Iv9W8HjM7SiiwJN0bXgaN6uxVV5cmeCtOLH2vJziSf Hv+q2Wfd1IU0gWDtxtiLHgD5T05QPmHtO6CcuWvVF6cXUIm8Db2sDhFyu+jz64Lz 8+iGenzMV3LYuPrGPZWXD+nUbblAP7juFcEttCebHXm7XNmHpnjfhpm7pOpVYBaB HeYCJbiEvMaWFpTfNKUZtEKqJLHUhWo= -----END CERTIFICATE-----Generated at Mon Jun 30 19:11:04 2025 by rpki-client