$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4eb3fcc5-e437-39c1-8bca-f119ed80ff8e.roa File: 4eb3fcc5-e437-39c1-8bca-f119ed80ff8e.roa (raw, json) Hash identifier: ahigqT+w6jUZ6fkNNWUpUlKr/5WTNr3wdDWEZRIBtgM= Subject key identifier: DD:75:73:F0:2F:36:A5:18:41:B5:58:CE:86:6B:9E:4D:8E:F9:21:D5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7AFF604E117F9E76AB26C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4eb3fcc5-e437-39c1-8bca-f119ed80ff8e.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 14717 IP address blocks: 65.211.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:ff:60:4e:11:7f:9e:76:ab:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=1e0b18e3-8bcd-4436-892e-d04ac19cbc98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:13:de:c0:97:74:7b:4a:48:61:ab:33:12:56: 75:90:a2:23:cd:23:ee:e7:49:0f:a8:75:47:44:59: 76:40:7b:92:8c:8d:79:d5:7f:3a:76:9b:5c:b8:82: fc:ae:0b:15:0d:ae:9c:8a:97:05:97:21:3e:a9:ed: a6:84:ef:17:a0:c4:b5:f8:ac:b7:88:04:15:01:a9: 01:af:b4:64:13:38:24:c4:87:79:90:be:a8:81:6d: c5:51:6e:f7:84:7b:b0:ca:e4:0c:53:ad:c3:ef:be: ce:0d:77:81:1b:cf:d3:3c:fd:1f:c2:ca:ab:ba:8d: 32:4e:d3:7a:35:f6:f9:c4:3d:05:6c:2d:37:c1:b1: 37:ec:84:32:9a:4c:35:07:d5:7b:cb:db:98:f1:ba: cf:3e:86:fb:8a:6f:5f:6e:99:d2:6a:fd:6b:b6:88: 74:84:fe:2c:9f:61:44:9c:1b:7c:08:d2:9f:70:4a: db:25:6e:11:83:38:91:fc:19:fc:dc:52:72:73:1f: 31:eb:1b:29:aa:d8:dc:94:77:af:f4:35:70:ae:e4: 46:ec:cc:c6:ab:1a:52:55:ce:d7:bc:bd:da:85:08: 9d:51:14:2c:e0:2e:3f:48:8a:17:ca:70:61:18:bf: 18:8e:53:88:79:39:b8:84:1b:4c:47:ed:88:23:af: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:75:73:F0:2F:36:A5:18:41:B5:58:CE:86:6B:9E:4D:8E:F9:21:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4eb3fcc5-e437-39c1-8bca-f119ed80ff8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 65.211.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ae:ce:c9:cc:8b:bf:82:a3:37:71:e2:5c:4e:4a:18:61:8e: c2:64:ca:18:6d:18:b1:7c:3e:ab:52:e8:11:ee:06:e6:77:68: 7a:55:bd:fa:41:f0:fe:30:9c:4d:dd:79:46:21:bf:26:66:fa: e6:d1:71:8a:d2:a9:1f:02:b4:59:0a:ac:1f:9c:de:ab:e7:04: 69:ca:43:90:71:75:8d:ff:1e:c8:bb:5b:fb:3b:72:68:ab:8d: 6c:90:1b:06:8b:ff:16:01:b7:02:40:a0:52:d7:19:7b:82:e3: 65:5b:2c:d5:da:ab:ac:6a:50:a2:5d:2b:b6:8f:1b:e6:90:cc: b1:dc:2b:21:b9:fa:55:73:2f:c0:69:0f:84:d1:08:c3:a7:67: 42:4d:05:97:40:1f:62:8d:f1:62:07:b9:9f:65:89:98:8f:6f: cc:bd:f8:a7:6a:87:4f:53:05:c5:f0:2a:db:63:7f:32:76:f8: ba:a8:4b:69:d7:33:82:dc:c8:2d:0f:7d:cc:c8:eb:9a:08:dd: f2:8c:4f:5c:ab:a7:e2:8f:dc:b8:08:19:c7:f7:32:f6:09:8e: 4e:24:ed:d9:2a:49:f8:93:da:1c:c2:5e:f9:be:90:b1:83:28: 80:95:47:b3:34:a2:77:1e:a9:c0:1f:ed:b6:0b:03:8b:8b:e8: 28:b7:f0:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ev9gThF/nnarJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MWUwYjE4ZTMtOGJjZC00NDM2LTg5MmUtZDA0YWMxOWNiYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BPewJd0e0pIYaszElZ1kKIjzSPu50kPqHVH RFl2QHuSjI151X86dptcuIL8rgsVDa6cipcFlyE+qe2mhO8XoMS1+Ky3iAQVAakB r7RkEzgkxId5kL6ogW3FUW73hHuwyuQMU63D777ODXeBG8/TPP0fwsqruo0yTtN6 Nfb5xD0FbC03wbE37IQymkw1B9V7y9uY8brPPob7im9fbpnSav1rtoh0hP4sn2FE nBt8CNKfcErbJW4RgziR/Bn83FJycx8x6xspqtjclHev9DVwruRG7MzGqxpSVc7X vL3ahQidURQs4C4/SIoXynBhGL8YjlOIeTm4hBtMR+2II6+ZswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN11c/AvNqUYQbVYzoZrnk2O+SHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGViM2ZjYzUtZTQzNy0z OWMxLThiY2EtZjExOWVkODBmZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQdNUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyuzsnMi7+Cozdx4lxOShhhjsJkyhhtGLF8PqtS6BHuBuZ3aHpVvfpB 8P4wnE3deUYhvyZm+ubRcYrSqR8CtFkKrB+c3qvnBGnKQ5BxdY3/Hsi7W/s7cmir jWyQGwaL/xYBtwJAoFLXGXuC42VbLNXaq6xqUKJdK7aPG+aQzLHcKyG5+lVzL8Bp D4TRCMOnZ0JNBZdAH2KN8WIHuZ9liZiPb8y9+Kdqh09TBcXwKttjfzJ2+LqoS2nX M4LcyC0PfczI65oI3fKMT1yrp+KP3LgIGcf3MvYJjk4k7dkqSfiT2hzCXvm+kLGD KICVR7M0onceqcAf7bYLA4uL6Ci38DE= -----END CERTIFICATE-----Generated at Tue Jul 1 18:29:03 2025 by rpki-client