$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bc990a4-69ff-3d19-a20d-a5b6859047d0.roa File: 4bc990a4-69ff-3d19-a20d-a5b6859047d0.roa (raw, json) Hash identifier: SoAXzfP1OezFSxxCfP4L/t0dl4fqxYkMmVJQg3PLLfU= Subject key identifier: 3B:BE:36:EA:CA:E8:7A:F5:62:42:95:58:79:DE:9C:BC:A9:F3:A6:45 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B004CB03944B2052EE680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bc990a4-69ff-3d19-a20d-a5b6859047d0.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 14717 IP address blocks: 208.231.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:00:4c:b0:39:44:b2:05:2e:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=663fb8e2-8b59-4156-8db5-235204942b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:00:4c:bf:51:ac:14:29:80:89:e0:d2:4e:5d: 2c:13:45:a0:7f:97:d5:ae:53:8d:63:aa:3c:2c:30: 36:fe:86:d2:74:c6:f7:b4:f9:44:8c:de:5d:a9:15: 4b:0d:ff:f2:a8:22:bf:05:9c:df:bd:3a:98:3d:e4: 6d:f5:6a:f3:97:29:24:9b:0f:6e:38:96:5f:ac:1d: da:50:f4:6a:41:cc:2d:0e:ee:f2:d4:8c:6c:72:61: 91:ba:fd:a9:61:4f:4f:4e:51:cd:a9:a8:dc:30:73: 43:fb:36:43:fd:43:c3:e7:d9:c1:b8:da:c5:3d:5f: 0c:7f:36:53:af:15:c1:d2:b5:6c:14:4c:2a:9d:86: 8b:f4:3b:ab:40:bb:05:a2:d9:11:1c:8c:82:15:e4: 90:9a:ff:34:23:2f:0d:bc:13:ce:a0:ed:a8:6d:34: 79:bb:2d:76:bd:8e:81:0a:f8:ce:f7:a9:d0:d2:0d: 2b:a6:3a:aa:4c:8f:15:8a:e8:ef:67:d9:6e:e2:1f: 4b:a5:7a:11:98:22:cc:05:03:83:ac:4c:62:55:58: 4b:7a:55:18:e9:bb:d9:05:22:e3:fb:4e:7e:fd:ad: 9f:12:07:5f:11:db:da:54:9e:07:bb:d0:c4:c2:64: b6:b4:c6:e8:09:d1:80:a7:03:04:63:70:02:c5:8e: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BE:36:EA:CA:E8:7A:F5:62:42:95:58:79:DE:9C:BC:A9:F3:A6:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bc990a4-69ff-3d19-a20d-a5b6859047d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.231.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c2:91:71:1b:2d:d5:74:22:ce:47:50:d5:07:b8:5a:97:90: ce:75:07:42:30:cc:2c:bd:6d:6b:b8:b3:25:62:e4:c6:55:91: c4:8a:e5:90:11:2b:b9:f9:cf:e7:69:32:99:16:4d:45:71:b7: c2:01:24:05:04:07:0e:3d:cb:fa:a5:22:de:e3:ef:2b:ab:6d: c2:ac:5e:77:e1:06:0e:a9:a2:12:45:16:b5:2a:5f:d0:4a:66: 7c:87:ac:c9:31:40:61:92:d7:f8:27:a1:88:b7:31:57:62:59: 92:90:55:54:86:66:47:a5:20:a5:08:8d:a1:8c:03:c1:c6:22: 11:19:ba:e5:6f:ef:a5:ca:74:65:64:7c:ef:4f:ac:82:3f:4d: 4b:1c:2c:87:9f:fd:14:e0:ac:be:77:ba:f5:52:b8:d6:48:af: e5:69:e1:0a:28:e9:0e:9b:0c:1f:28:f0:d7:40:b1:15:64:14: 36:4d:58:70:16:23:4a:f7:dc:30:cd:ec:3d:25:dd:e2:0a:01: c6:d8:6d:38:d0:c9:25:6b:b3:68:ee:08:e9:9c:bd:a2:fc:0d: 3c:fd:8a:44:71:09:5e:cf:82:bb:50:c1:19:5b:7a:4a:ae:5c: 9d:9c:2c:7a:79:1b:53:11:72:65:0f:f6:b0:b5:0d:dd:ac:cf: 82:0b:ed:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewBMsDlEsgUu5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NjYzZmI4ZTItOGI1OS00MTU2LThkYjUtMjM1MjA0OTQyYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QBMv1GsFCmAieDSTl0sE0Wgf5fVrlONY6o8 LDA2/obSdMb3tPlEjN5dqRVLDf/yqCK/BZzfvTqYPeRt9Wrzlykkmw9uOJZfrB3a UPRqQcwtDu7y1IxscmGRuv2pYU9PTlHNqajcMHND+zZD/UPD59nBuNrFPV8MfzZT rxXB0rVsFEwqnYaL9DurQLsFotkRHIyCFeSQmv80Iy8NvBPOoO2obTR5uy12vY6B CvjO96nQ0g0rpjqqTI8ViujvZ9lu4h9LpXoRmCLMBQODrExiVVhLelUY6bvZBSLj +05+/a2fEgdfEdvaVJ4Hu9DEwmS2tMboCdGApwMEY3ACxY5gmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDu+NurK6Hr1YkKVWHnenLyp86ZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGJjOTkwYTQtNjlmZi0z ZDE5LWEyMGQtYTViNjg1OTA0N2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0OdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfCkXEbLdV0Is5HUNUHuFqXkM51B0IwzCy9bWu4syVi5MZVkcSK5ZAR K7n5z+dpMpkWTUVxt8IBJAUEBw49y/qlIt7j7yurbcKsXnfhBg6pohJFFrUqX9BK ZnyHrMkxQGGS1/gnoYi3MVdiWZKQVVSGZkelIKUIjaGMA8HGIhEZuuVv76XKdGVk fO9PrII/TUscLIef/RTgrL53uvVSuNZIr+Vp4Qoo6Q6bDB8o8NdAsRVkFDZNWHAW I0r33DDN7D0l3eIKAcbYbTjQySVrs2juCOmcvaL8DTz9ikRxCV7PgrtQwRlbekqu XJ2cLHp5G1MRcmUP9rC1Dd2sz4IL7bs= -----END CERTIFICATE-----Generated at Tue Jul 1 03:43:23 2025 by rpki-client