$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ae60bd9-9438-3e91-a061-bb2de3c6e734.roa File: 8ae60bd9-9438-3e91-a061-bb2de3c6e734.roa (raw, json) Hash identifier: BRq4TsE5TLaHZ3EbjbJlZtT3SUe+w9FZlkNS641khRk= Subject key identifier: 24:58:EA:82:18:4A:39:6F:3A:A1:05:79:35:4D:6B:BB:77:9E:14:F0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B0D6D2297E8942D762E60 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ae60bd9-9438-3e91-a061-bb2de3c6e734.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 701 IP address blocks: 138.89.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:0d:6d:22:97:e8:94:2d:76:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=0cb794e1-fafd-4905-b98b-d3828c20f76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f3:a2:1e:cd:a7:cb:3b:0a:08:7f:fe:b9:df: 11:77:88:65:1e:f8:d5:4b:af:86:f9:8b:b3:8f:ae: 57:78:7b:54:60:de:8c:70:36:34:09:f6:e2:d5:69: 54:5e:e3:79:ce:fb:e4:07:37:38:88:d9:06:0d:6a: b2:52:36:a7:49:63:e7:9a:72:cd:90:44:43:76:35: 43:80:47:d5:2a:55:71:42:41:a6:22:c5:b9:98:ed: 65:8e:14:9e:b4:a7:3c:05:3d:e2:90:66:29:e3:2b: ee:02:02:fc:f5:24:44:a0:2e:cf:a1:a7:4d:39:31: da:19:e9:88:20:da:48:fd:40:1e:6f:7f:07:ab:9e: a2:7e:8a:1b:83:f6:24:f7:48:77:ed:37:f2:08:c3: 0d:77:ba:c7:81:74:30:2f:04:6f:96:bf:8e:ae:7e: 23:1e:4b:90:db:14:b4:db:53:c1:3c:99:82:e5:31: 53:b9:cf:9e:aa:3f:6c:67:4e:02:fa:e5:ef:ca:65: 06:01:59:ef:b5:d1:9e:ac:6b:35:4e:5f:6c:fb:db: 2d:dd:cd:f7:57:41:db:1d:59:74:64:c6:a8:40:69: 10:ac:11:d7:df:53:c5:86:14:dc:6b:69:42:6b:97: 05:10:e7:a3:17:ab:5b:c3:81:75:0c:52:3b:55:ef: cb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:58:EA:82:18:4A:39:6F:3A:A1:05:79:35:4D:6B:BB:77:9E:14:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ae60bd9-9438-3e91-a061-bb2de3c6e734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 138.89.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:3c:16:2b:b6:a5:60:13:60:14:91:c9:0d:12:91:e9:4c:ff: 02:68:e5:1a:a2:b9:60:77:be:3e:46:18:4f:7b:48:3c:85:c9: 8d:68:99:52:fd:64:1c:05:6d:1f:23:7e:d2:e3:43:c7:d5:b0: 95:37:7a:03:aa:e4:c6:e9:7f:70:a3:40:b1:90:a1:16:ab:48: 8e:d0:dc:07:9e:81:91:12:6e:fe:10:18:4e:88:7c:25:42:4f: c2:a4:2d:17:f9:3c:cf:eb:e9:b7:08:04:25:97:6d:b1:98:e4: d9:bf:36:c7:d6:d0:56:92:fe:69:9c:56:8c:84:bd:7a:f5:a6: fb:19:01:e8:b4:ca:e5:9a:71:1f:4a:9a:c8:2a:68:d9:74:0b: 09:82:d2:c4:51:e2:95:a3:65:d0:9e:72:db:9d:22:50:57:17: 54:d7:ad:b6:8f:3b:fe:c0:4c:69:59:89:2d:72:fa:e7:12:c6: 0c:e9:62:27:12:9f:43:ca:66:e9:10:c5:5e:33:d7:9c:10:2a: 79:2f:26:5f:d8:15:84:54:4a:43:f0:08:4c:b6:bb:53:10:26: ed:a2:1a:1c:24:0e:45:0f:a5:47:1a:ea:c4:9d:c5:7b:81:8e: 03:5b:f3:7d:c3:ef:04:47:37:dc:5c:a6:64:9b:0e:ba:43:4a: dc:1b:c1:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ew1tIpfolC12LmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MGNiNzk0ZTEtZmFmZC00OTA1LWI5OGItZDM4MjhjMjBmNzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPOiHs2nyzsKCH/+ud8Rd4hlHvjVS6+G+Yuz j65XeHtUYN6McDY0Cfbi1WlUXuN5zvvkBzc4iNkGDWqyUjanSWPnmnLNkERDdjVD gEfVKlVxQkGmIsW5mO1ljhSetKc8BT3ikGYp4yvuAgL89SREoC7PoadNOTHaGemI INpI/UAeb38Hq56ifoobg/Yk90h37TfyCMMNd7rHgXQwLwRvlr+Orn4jHkuQ2xS0 21PBPJmC5TFTuc+eqj9sZ04C+uXvymUGAVnvtdGerGs1Tl9s+9st3c33V0HbHVl0 ZMaoQGkQrBHX31PFhhTca2lCa5cFEOejF6tbw4F1DFI7Ve/LhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRY6oIYSjlvOqEFeTVNa7t3nhTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGFlNjBiZDktOTQzOC0z ZTkxLWEwNjEtYmIyZGUzYzZlNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGilnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE8Fiu2pWATYBSRyQ0SkelM/wJo5RqiuWB3vj5GGE97SDyFyY1omVL9 ZBwFbR8jftLjQ8fVsJU3egOq5Mbpf3CjQLGQoRarSI7Q3AeegZESbv4QGE6IfCVC T8KkLRf5PM/r6bcIBCWXbbGY5Nm/NsfW0FaS/mmcVoyEvXr1pvsZAei0yuWacR9K msgqaNl0CwmC0sRR4pWjZdCectudIlBXF1TXrbaPO/7ATGlZiS1y+ucSxgzpYicS n0PKZukQxV4z15wQKnkvJl/YFYRUSkPwCEy2u1MQJu2iGhwkDkUPpUca6sSdxXuB jgNb833D7wRHN9xcpmSbDrpDStwbwSs= -----END CERTIFICATE-----Generated at Tue Jul 1 13:34:18 2025 by rpki-client