$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e636e9f-1a75-3eac-a0fa-14b5168280fc.roa File: 7e636e9f-1a75-3eac-a0fa-14b5168280fc.roa (raw, json) Hash identifier: QedDKBJpQC5a+mrVaR4mXwNif9iOI5fPTrrXYwjMvH4= Subject key identifier: 7F:CA:FA:A9:77:BA:D2:30:DA:54:48:66:41:3E:BF:13:C7:0A:27:B6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F17FD90634E48275B9FFD380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e636e9f-1a75-3eac-a0fa-14b5168280fc.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 70.109.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d9:06:34:e4:82:75:b9:ff:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=bc7f100b-5af7-4487-a8b5-35400e6debdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:97:46:64:24:96:2b:da:df:2f:c6:a7:18:f9: 6a:b7:4e:7a:ab:3f:15:d5:6a:86:ac:84:92:56:7b: 0c:e9:0d:b7:36:a5:85:1f:87:0a:5e:1e:fb:7b:0f: e6:74:bf:d6:06:59:57:3b:75:a0:22:19:04:84:ea: 0a:7d:97:06:3a:94:c5:df:0f:ce:8d:1f:0f:17:77: 2f:03:41:78:db:64:fc:76:4c:96:39:cb:9d:50:03: d3:72:6f:89:df:e4:51:ab:37:61:00:40:da:e7:e8: a8:f3:8f:85:9f:48:3b:b6:e2:08:45:6a:8d:ed:78: 48:57:6a:68:90:ed:56:82:ec:38:f8:8b:8e:41:b3: cf:7e:68:4b:26:ca:79:0a:6a:d3:4b:51:bd:a8:24: 10:81:30:e7:d7:85:ab:05:cf:8b:c3:3b:c5:04:2e: 1b:66:96:56:56:37:56:bd:ee:2e:da:ed:75:59:35: ef:0a:68:a7:99:c7:49:3f:b2:d7:a4:4f:00:d5:c0: a0:fd:1c:b5:88:66:ff:e1:b7:f3:23:09:10:31:cd: 17:20:b1:46:41:1c:d4:bf:88:56:b8:e4:ea:60:d5: 71:c1:e0:0f:ff:65:77:80:fd:09:4f:a7:29:23:44: be:00:b5:84:c4:bb:b5:8c:ea:56:85:44:b5:a3:c7: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CA:FA:A9:77:BA:D2:30:DA:54:48:66:41:3E:BF:13:C7:0A:27:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e636e9f-1a75-3eac-a0fa-14b5168280fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.109.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:2e:62:ee:a7:81:08:f7:15:05:76:b9:1a:a2:d3:df:ac:aa: f3:a4:1e:a9:ba:4d:ee:81:15:03:be:7c:3d:dd:e8:ca:44:2c: 10:b3:2e:b8:ee:8d:74:03:c2:47:00:de:40:55:15:e8:33:62: 5a:6b:8f:80:e0:dd:99:19:26:fe:94:09:dd:ed:b7:28:f9:e3: 0d:90:99:44:47:79:d4:e6:86:50:26:39:12:a1:c7:60:99:b9: f2:fa:8f:4f:a1:24:79:41:35:de:d5:30:9b:43:49:a4:7f:24: 37:52:b6:8a:65:e6:4e:88:45:68:4b:ea:ce:54:08:f6:f4:ec: 51:5b:89:71:b6:da:5e:44:36:41:9f:d4:da:2c:ce:70:3b:9f: 41:f7:c7:da:85:34:01:d3:4f:32:e8:30:2f:dc:51:3c:f2:1c: 74:f8:12:22:46:d7:22:cc:13:90:fb:46:06:32:7b:39:b7:52: b9:7f:68:80:5b:c7:68:85:c3:0b:b2:83:6f:c4:da:0e:a6:27: d8:85:ce:84:82:2a:35:e1:0f:8e:a3:49:00:3c:9a:90:da:0c: 5f:0b:76:69:55:28:a6:bf:30:b3:f7:56:57:a6:c3:74:3c:97: bf:7c:ab:1b:8e:2a:4c:19:7e:b3:8f:e1:ba:e5:78:68:ef:b2: 41:84:c5:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9kGNOSCdbn/04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk YmM3ZjEwMGItNWFmNy00NDg3LWE4YjUtMzU0MDBlNmRlYmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZdGZCSWK9rfL8anGPlqt056qz8V1WqGrISS VnsM6Q23NqWFH4cKXh77ew/mdL/WBllXO3WgIhkEhOoKfZcGOpTF3w/OjR8PF3cv A0F422T8dkyWOcudUAPTcm+J3+RRqzdhAEDa5+io84+Fn0g7tuIIRWqN7XhIV2po kO1Wguw4+IuOQbPPfmhLJsp5CmrTS1G9qCQQgTDn14WrBc+LwzvFBC4bZpZWVjdW ve4u2u11WTXvCminmcdJP7LXpE8A1cCg/Ry1iGb/4bfzIwkQMc0XILFGQRzUv4hW uOTqYNVxweAP/2V3gP0JT6cpI0S+ALWExLu1jOpWhUS1o8eeWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/K+ql3utIw2lRIZkE+vxPHCie2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2U2MzZlOWYtMWE3NS0z ZWFjLWEwZmEtMTRiNTE2ODI4MGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERm0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUuYu6ngQj3FQV2uRqi09+sqvOkHqm6Te6BFQO+fD3d6MpELBCzLrju jXQDwkcA3kBVFegzYlprj4Dg3ZkZJv6UCd3ttyj54w2QmURHedTmhlAmORKhx2CZ ufL6j0+hJHlBNd7VMJtDSaR/JDdStopl5k6IRWhL6s5UCPb07FFbiXG22l5ENkGf 1NosznA7n0H3x9qFNAHTTzLoMC/cUTzyHHT4EiJG1yLME5D7RgYyezm3Url/aIBb x2iFwwuyg2/E2g6mJ9iFzoSCKjXhD46jSQA8mpDaDF8LdmlVKKa/MLP3Vlemw3Q8 l798qxuOKkwZfrOP4brleGjvskGExSM= -----END CERTIFICATE-----Generated at Tue Jul 1 16:09:08 2025 by rpki-client