$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e987752-7dfa-370d-8d07-2c04e2e6d2f3.roa File: 9e987752-7dfa-370d-8d07-2c04e2e6d2f3.roa (raw, json) Hash identifier: 3nxyjlBjRavwGh9VQdSplAtzTt7ZNk6skzUrGH2TMs0= Subject key identifier: 2F:B5:28:20:81:AA:F0:86:65:6E:A8:42:D6:E7:06:88:C0:4C:E6:B2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F1800AF8BFD81DA5665C7E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e987752-7dfa-370d-8d07-2c04e2e6d2f3.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 173.69.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:0a:f8:bf:d8:1d:a5:66:5c:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=41b598ad-0ad8-4131-8692-bfd5140eb460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:bf:e7:dc:cd:16:5e:3c:ea:02:79:dd:a2: 3c:dc:79:b5:ae:e2:93:b0:be:93:c9:07:4a:d2:8c: ad:96:4f:a3:20:2d:f8:cb:21:8d:1d:9d:a8:8b:66: 0e:c6:41:74:36:b1:40:71:34:f0:8c:18:25:b8:4d: 6f:c7:df:54:63:ef:1b:ea:a5:85:15:50:20:89:67: 80:77:0e:6e:1f:3a:75:aa:1a:f0:18:aa:15:e1:27: f4:fe:1a:1a:f9:70:a7:fa:a6:0b:28:2c:60:2a:22: 30:5f:06:0c:e6:be:1e:98:bf:5f:49:49:d0:d4:5f: 92:87:42:e2:ba:bd:4f:af:92:0d:95:d2:62:4d:5a: e7:79:1b:07:9d:4b:af:0b:37:3d:00:42:a6:49:36: ae:ca:9c:da:d5:a6:a5:00:c5:b7:44:75:15:8c:14: 95:56:45:64:fb:30:ea:5f:aa:28:a7:1e:e9:78:8d: 2f:2f:11:c7:c2:32:c2:57:43:df:42:4e:15:e7:13: 20:c3:9e:a4:e2:78:b6:92:44:13:5e:7f:86:67:96: d2:4d:cb:4e:67:b9:ee:38:e2:7b:f2:bb:7c:c3:e8: 3a:21:aa:c0:ed:f5:48:7a:49:c5:f9:79:50:2a:e4: c9:86:6d:20:43:d5:4f:a1:2a:42:28:72:e3:42:25: ea:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B5:28:20:81:AA:F0:86:65:6E:A8:42:D6:E7:06:88:C0:4C:E6:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e987752-7dfa-370d-8d07-2c04e2e6d2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.69.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:57:65:d5:52:b3:bd:63:d1:71:13:69:5e:6c:d0:7d:6f:44: 31:3b:cf:cc:51:0a:92:c4:93:37:fa:ac:36:7c:f0:94:51:de: ca:d4:98:db:e8:01:26:0d:54:d0:82:48:7c:3b:91:8b:89:c7: c1:bd:70:f0:ba:40:a8:e0:06:b3:5d:f2:b9:1b:d2:32:c3:96: c4:e2:8c:f3:0c:3a:ef:31:24:4d:7a:83:17:f0:a8:8c:9d:ec: dd:56:6e:0d:52:eb:b4:94:59:b2:28:73:fb:d7:d8:da:b9:bd: 19:52:c3:84:97:81:ee:28:6c:93:49:56:18:c6:9a:b2:92:7b: e4:3d:46:27:4e:41:37:75:40:f7:fc:93:9b:81:88:a1:d6:8a: 82:2f:f2:54:23:7c:30:f6:a3:8a:27:0f:9c:e5:67:1f:ab:c2: 85:fa:08:c5:6d:f3:6d:33:4a:88:23:55:bd:20:18:7e:0f:cd: 91:f4:81:88:e5:ad:4f:08:58:c1:2a:63:36:2c:2c:a4:0b:6d: c9:23:24:c3:8a:8f:de:e2:08:31:68:12:00:7d:77:73:e6:04: 7f:0c:42:f3:12:4e:e3:0a:20:af:23:9c:6c:b3:2e:7f:03:d4: 69:19:d8:04:0d:a5:59:32:63:a2:4b:f5:45:7e:b4:aa:ed:00: 22:82:01:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAr4v9gdpWZcfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NDFiNTk4YWQtMGFkOC00MTMxLTg2OTItYmZkNTE0MGViNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGK/59zNFl486gJ53aI83Hm1ruKTsL6TyQdK 0oytlk+jIC34yyGNHZ2oi2YOxkF0NrFAcTTwjBgluE1vx99UY+8b6qWFFVAgiWeA dw5uHzp1qhrwGKoV4Sf0/hoa+XCn+qYLKCxgKiIwXwYM5r4emL9fSUnQ1F+Sh0Li ur1Pr5INldJiTVrneRsHnUuvCzc9AEKmSTauypza1aalAMW3RHUVjBSVVkVk+zDq X6oopx7peI0vLxHHwjLCV0PfQk4V5xMgw56k4ni2kkQTXn+GZ5bSTctOZ7nuOOJ7 8rt8w+g6IarA7fVIeknF+XlQKuTJhm0gQ9VPoSpCKHLjQiXqwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+1KCCBqvCGZW6oQtbnBojATOayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWU5ODc3NTItN2RmYS0z NzBkLThkMDctMmMwNGUyZTZkMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErUVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxXZdVSs71j0XETaV5s0H1vRDE7z8xRCpLEkzf6rDZ88JRR3srUmNvo ASYNVNCCSHw7kYuJx8G9cPC6QKjgBrNd8rkb0jLDlsTijPMMOu8xJE16gxfwqIyd 7N1Wbg1S67SUWbIoc/vX2Nq5vRlSw4SXge4obJNJVhjGmrKSe+Q9RidOQTd1QPf8 k5uBiKHWioIv8lQjfDD2o4onD5zlZx+rwoX6CMVt820zSogjVb0gGH4PzZH0gYjl rU8IWMEqYzYsLKQLbckjJMOKj97iCDFoEgB9d3PmBH8MQvMSTuMKIK8jnGyzLn8D 1GkZ2AQNpVkyY6JL9UV+tKrtACKCAac= -----END CERTIFICATE-----Generated at Mon Jun 30 19:47:18 2025 by rpki-client