$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa File: aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa (raw, json) Hash identifier: VL/4HquTIWnnFfuf0ei+wrGMNzJeP3vjnr/raA1pQ3I= Subject key identifier: 21:73:85:93:A4:AB:E2:A5:2A:EB:86:59:DC:C8:6F:24:22:D0:A8:D3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F1800CC3E648C50AA41BD180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 173.59.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:0c:c3:e6:48:c5:0a:a4:1b:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=8db8e4dc-422a-434c-895f-e3d00a446275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:97:38:3e:80:e7:1f:49:03:72:c4:53:e3: 80:ab:78:ac:32:6e:de:5b:d9:5c:49:e9:95:1f:61: ad:18:8b:57:8b:a0:64:d3:70:09:bc:c1:c7:2e:90: 98:74:27:2d:b7:a9:47:dc:58:54:16:bb:bd:b6:c9: ed:4f:eb:cd:64:29:e1:50:d8:fa:70:b1:98:8a:34: 33:28:18:eb:ba:54:a8:84:c5:41:4f:6b:e2:d2:20: 4e:7b:5e:41:64:f6:a2:9c:45:52:82:2f:aa:7f:a9: 22:4a:1f:ec:69:c2:f7:26:5c:67:9f:87:ee:9d:03: 1a:de:80:24:a6:5e:3e:f2:6f:bb:da:12:07:0d:33: 66:94:b2:1d:33:36:1f:a2:53:aa:a5:81:86:29:a7: b3:38:fe:62:df:ed:d9:07:31:2c:13:77:e4:99:a8: a3:33:4c:1f:1f:64:e6:a5:0a:77:f9:48:55:be:d3: 82:8c:57:8a:c2:8b:67:14:25:38:fc:ee:c9:22:ed: a8:d2:bb:4e:c3:bc:fd:49:38:fc:4a:96:a6:b5:1a: ff:9f:f0:b9:1b:d3:4d:f4:a1:de:be:2a:5d:c6:4a: af:b2:c8:fe:83:8b:a9:14:cf:4d:e6:67:88:5f:78: bd:e1:cd:94:f0:64:3b:48:1b:65:a5:22:01:35:69: 18:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:73:85:93:A4:AB:E2:A5:2A:EB:86:59:DC:C8:6F:24:22:D0:A8:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.59.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f3:34:7f:82:e2:eb:d6:4d:d1:c4:59:eb:3a:a7:e5:d4:40: 85:7d:4b:8d:c3:e1:b6:8a:c2:3e:1c:05:03:1e:61:29:6e:e8: 82:61:36:0b:42:18:01:33:23:b1:94:54:6b:f7:8d:93:b9:d7: 93:a8:22:9d:1d:b4:87:ad:95:71:c8:01:ed:bf:4e:12:d2:3a: e9:c9:7e:c9:55:5a:ce:61:88:63:09:bb:d6:98:38:84:98:52: dd:44:8d:aa:51:e7:a2:dd:9d:76:dd:72:36:d7:3f:10:0c:83: 52:cd:0b:47:31:2f:00:8e:1c:46:b3:1d:9c:fe:bd:f5:f0:a4: ff:bc:13:39:02:d2:b9:8a:98:92:72:cc:8d:54:2e:fd:09:b4: 54:22:01:8b:15:08:95:85:75:fe:4e:d0:e7:98:75:90:6e:b8: 83:02:e5:95:f5:77:22:64:bf:43:48:1f:bf:77:33:a4:8f:d5: 50:fc:cf:d9:0e:f8:83:c6:43:56:b6:94:60:5c:5b:0f:50:80: 3a:a9:1d:2e:25:2e:c5:f9:93:90:17:bc:d6:5e:3c:79:e5:f0: 05:fd:13:f4:8d:9d:47:42:1b:33:72:25:0f:f4:0c:02:9f:29: 18:c8:23:54:eb:bf:37:07:ad:51:fb:bb:11:70:3d:ef:be:d1: 56:84:b3:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAzD5kjFCqQb0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk OGRiOGU0ZGMtNDIyYS00MzRjLTg5NWYtZTNkMDBhNDQ2Mjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN2XOD6A5x9JA3LEU+OAq3isMm7eW9lcSemV H2GtGItXi6Bk03AJvMHHLpCYdCctt6lH3FhUFru9tsntT+vNZCnhUNj6cLGYijQz KBjrulSohMVBT2vi0iBOe15BZPainEVSgi+qf6kiSh/sacL3Jlxnn4funQMa3oAk pl4+8m+72hIHDTNmlLIdMzYfolOqpYGGKaezOP5i3+3ZBzEsE3fkmaijM0wfH2Tm pQp3+UhVvtOCjFeKwotnFCU4/O7JIu2o0rtOw7z9STj8SpamtRr/n/C5G9NN9KHe vipdxkqvssj+g4upFM9N5meIX3i94c2U8GQ7SBtlpSIBNWkYnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFzhZOkq+KlKuuGWdzIbyQi0KjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWZmMmJmYjMtYzNkMC0z ZTAyLTkyYzgtNjM0NTFjZjc1NjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrTtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnzNH+C4uvWTdHEWes6p+XUQIV9S43D4baKwj4cBQMeYSlu6IJhNgtC GAEzI7GUVGv3jZO515OoIp0dtIetlXHIAe2/ThLSOunJfslVWs5hiGMJu9aYOISY Ut1EjapR56LdnXbdcjbXPxAMg1LNC0cxLwCOHEazHZz+vfXwpP+8EzkC0rmKmJJy zI1ULv0JtFQiAYsVCJWFdf5O0OeYdZBuuIMC5ZX1dyJkv0NIH793M6SP1VD8z9kO +IPGQ1a2lGBcWw9QgDqpHS4lLsX5k5AXvNZePHnl8AX9E/SNnUdCGzNyJQ/0DAKf KRjII1TrvzcHrVH7uxFwPe++0VaEs9Y= -----END CERTIFICATE-----Generated at Tue Jul 1 00:50:54 2025 by rpki-client