$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af3bb659-7a01-37b3-b142-ee9aff65c596.roa File: af3bb659-7a01-37b3-b142-ee9aff65c596.roa (raw, json) Hash identifier: Fuo/RsFejxTj21eoJIXJokQAYZHu+XNrh/8wRzfnwak= Subject key identifier: 22:B8:63:DE:A9:5A:B5:BC:8A:03:4F:D6:58:A4:1F:12:97:5E:FA:C2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CD34C35D94449977E4E98C40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af3bb659-7a01-37b3-b142-ee9aff65c596.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 208.213.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:c3:5d:94:44:99:77:e4:e9:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=b3f9cde9-abb1-4fe3-81c4-24edfd303a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:66:00:d6:b8:30:d3:0f:15:43:ff:f5:2f:40: 67:11:b9:b9:b7:d0:52:b0:cc:40:af:37:4f:34:2e: a6:2b:bd:21:91:a4:c4:8e:b9:d7:45:70:d6:a8:67: 5c:ce:14:9e:d4:58:6d:38:ad:08:8d:ce:fa:87:36: 68:84:53:75:6a:d4:26:c6:31:73:30:96:7f:28:4a: 61:5d:f6:e5:f1:a5:0d:c4:0e:5b:df:78:11:c8:f9: 95:e6:c8:53:34:5f:a0:30:77:17:a3:77:90:e1:ff: 68:3a:28:9a:ef:3f:fa:22:53:95:74:61:b1:8a:f6: 57:7c:eb:29:b2:a7:a0:f4:2c:58:2c:74:5b:e8:29: 51:aa:a8:a1:aa:a5:8c:36:0c:ec:80:e1:20:7e:8e: c4:a0:65:21:9b:c3:e1:0c:eb:e0:a8:c8:ad:a0:97: ad:a7:e6:ed:5b:d9:1a:f0:75:23:1e:79:ea:ab:3f: 0b:0a:43:0f:0b:7d:4f:a1:0d:a7:c0:e8:44:cc:37: cf:06:4f:43:04:82:f0:9c:00:a2:89:01:0b:b5:99: c4:1d:20:95:0a:2d:38:84:f5:b6:1a:6f:f9:f0:b8: ba:a6:cf:81:cf:16:3c:16:17:e5:51:b8:21:74:e6: d7:53:1e:99:95:1f:4b:50:ba:62:cf:c0:06:d7:aa: 87:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B8:63:DE:A9:5A:B5:BC:8A:03:4F:D6:58:A4:1F:12:97:5E:FA:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af3bb659-7a01-37b3-b142-ee9aff65c596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.213.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:db:67:55:9e:2a:f9:7d:e3:3e:ec:41:be:a7:96:48:3b:60: 6a:71:52:2f:6e:7c:f7:c9:e2:20:24:15:7f:4f:f2:1a:f8:cc: 18:a3:9e:1c:22:c0:2e:71:9b:d8:0b:20:69:c2:50:a4:b5:7d: 01:23:a0:45:9d:09:a2:79:f3:3a:7a:2c:64:89:c3:4f:04:31: 9a:75:9d:0e:6c:23:00:26:32:00:d1:5f:55:0d:61:d1:90:97: 65:57:56:3a:aa:a3:83:76:0a:87:22:1d:89:ad:7b:eb:53:28: 56:c3:6e:1f:4c:4a:11:2e:b2:97:0e:77:e6:86:45:dc:98:1b: 62:33:22:82:65:36:5d:62:23:74:5f:12:bc:80:14:82:3a:1e: c6:ca:90:a3:16:17:38:a7:16:56:84:c3:10:2d:1b:b6:0b:8a: 85:dd:bb:d3:0e:89:8c:6a:f3:7e:2e:41:5a:45:44:fa:af:b4: cd:f5:bc:3a:11:8d:08:66:1c:e1:d1:1c:8f:b6:d9:41:9a:61: 8c:05:3d:7a:6e:69:ee:b5:e5:45:09:dd:aa:90:00:c1:1a:4c: 43:4f:65:41:ce:3e:74:00:f6:a8:10:25:b0:26:df:9d:05:57: ae:6d:c5:30:eb:84:59:63:59:d8:d3:8a:6d:a8:89:e1:8c:f2: a8:8c:ac:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNMNdlESZd+TpjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk YjNmOWNkZTktYWJiMS00ZmUzLTgxYzQtMjRlZGZkMzAzYTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2YA1rgw0w8VQ//1L0BnEbm5t9BSsMxArzdP NC6mK70hkaTEjrnXRXDWqGdczhSe1FhtOK0Ijc76hzZohFN1atQmxjFzMJZ/KEph Xfbl8aUNxA5b33gRyPmV5shTNF+gMHcXo3eQ4f9oOiia7z/6IlOVdGGxivZXfOsp sqeg9CxYLHRb6ClRqqihqqWMNgzsgOEgfo7EoGUhm8PhDOvgqMitoJetp+btW9ka 8HUjHnnqqz8LCkMPC31PoQ2nwOhEzDfPBk9DBILwnACiiQELtZnEHSCVCi04hPW2 Gm/58Li6ps+BzxY8FhflUbghdObXUx6ZlR9LULpiz8AG16qHYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCK4Y96pWrW8igNP1likHxKXXvrCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWYzYmI2NTktN2EwMS0z N2IzLWIxNDItZWU5YWZmNjVjNTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjbZ1WeKvl94z7sQb6nlkg7YGpxUi9ufPfJ4iAkFX9P8hr4zBijnhwi wC5xm9gLIGnCUKS1fQEjoEWdCaJ58zp6LGSJw08EMZp1nQ5sIwAmMgDRX1UNYdGQ l2VXVjqqo4N2CociHYmte+tTKFbDbh9MShEuspcOd+aGRdyYG2IzIoJlNl1iI3Rf EryAFII6HsbKkKMWFzinFlaEwxAtG7YLioXdu9MOiYxq834uQVpFRPqvtM31vDoR jQhmHOHRHI+22UGaYYwFPXpuae615UUJ3aqQAMEaTENPZUHOPnQA9qgQJbAm350F V65txTDrhFljWdjTim2oieGM8qiMrNY= -----END CERTIFICATE-----Generated at Sun May 11 13:29:51 2025 by rpki-client