$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b18f878c-fe6b-3fa0-b914-a283ef1c8d2c.roa File: b18f878c-fe6b-3fa0-b914-a283ef1c8d2c.roa (raw, json) Hash identifier: RG1u7fVsiHIqCIVz6JqYyyruHiqCJSazaswjts4VXGc= Subject key identifier: F2:18:C2:1E:2A:60:99:3B:18:07:57:DD:86:6C:C0:0E:3E:B3:24:00 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B425247F3408508DACD60 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b18f878c-fe6b-3fa0-b914-a283ef1c8d2c.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 0 IP address blocks: 209.97.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:42:52:47:f3:40:85:08:da:cd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=596bdb02-9245-475f-b86b-a750fec3c8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:19:19:ce:2d:47:61:97:73:fe:99:d6:64: 40:78:c1:19:8a:66:d3:4e:19:72:bb:79:f1:45:d1: da:8c:cc:f6:9c:e9:c0:b8:8b:a1:22:37:80:61:f0: dd:f6:ca:73:bd:b3:0e:78:b0:e1:ab:1f:a4:de:e7: 16:84:89:ef:8d:b9:82:e7:04:11:72:f9:78:5b:bc: 76:86:d2:ad:0a:80:ab:d4:1a:ae:9f:d5:01:7d:7a: 8a:4f:44:da:d7:4e:98:76:b2:fb:1c:ec:4e:7e:03: 50:11:72:68:78:aa:4b:d8:d1:42:ab:76:75:65:f6: c9:f5:a4:a0:30:aa:db:c3:91:b2:f5:e8:a5:06:88: 9e:5c:1e:99:24:a7:7f:6b:b0:98:c5:ee:16:8c:9a: a1:35:74:13:c2:b6:9b:19:66:fe:f1:53:c7:ed:09: 69:06:29:9d:d4:e7:a1:a2:8b:b8:45:64:be:cc:f2: 3a:25:8b:1d:37:cd:38:bc:74:67:ff:eb:bf:06:12: d8:f5:b0:b0:5c:4e:c1:33:03:97:57:1c:a0:e0:6e: 68:dc:60:c3:8f:ba:fc:19:5b:c9:51:53:87:f4:63: be:81:4f:c3:ec:ee:2a:a8:0e:d6:43:93:23:6b:6f: 95:30:73:0d:fc:ea:5a:38:12:28:12:0f:4e:4a:82: d1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:18:C2:1E:2A:60:99:3B:18:07:57:DD:86:6C:C0:0E:3E:B3:24:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b18f878c-fe6b-3fa0-b914-a283ef1c8d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.97.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:21:38:20:36:c0:c9:87:51:d5:d2:01:db:d6:db:e1:16:2e: e1:c0:c1:cb:07:59:b7:e2:1f:9b:d5:be:67:ff:13:45:53:16: 01:a8:d8:b3:b2:82:1d:8a:65:cf:98:0d:76:06:a4:81:d5:be: 73:b4:a9:77:1d:41:b3:af:c5:7c:bd:d6:55:f6:5d:7f:96:1b: 18:53:86:db:f6:90:37:da:e1:f6:99:01:f0:81:63:96:80:58: 04:51:35:c8:91:ee:74:6f:42:26:0b:4d:47:24:b0:30:f2:e0: 2f:ee:09:ad:72:36:92:ac:43:91:8b:c2:57:6c:dc:d1:8c:17: d1:1c:39:f9:bc:31:5c:49:cc:c9:c0:54:c3:9c:b0:85:98:e4: 1c:52:6b:dd:78:76:23:f5:a3:7a:a6:d5:71:14:d8:82:0a:19: 2a:a7:8b:fc:f1:c6:ea:4d:9a:bc:72:e3:97:eb:30:27:3a:29: 32:dd:bf:37:6e:8d:93:80:d4:09:24:6e:02:60:87:23:d9:98: 21:fd:29:20:b7:2f:3c:3e:57:62:ce:be:cd:fc:69:dd:e7:96: 71:ca:1c:16:fe:b7:b5:b4:26:82:07:68:38:3d:49:cf:5c:f4: 25:fc:04:78:fd:c4:a3:f6:e5:a9:ee:b8:ec:36:28:c3:d9:fb: 9e:59:47:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7e0JSR/NAhQjazWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NTk2YmRiMDItOTI0NS00NzVmLWI4NmItYTc1MGZlYzNjOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgAZGc4tR2GXc/6Z1mRAeMEZimbTThlyu3nx RdHajMz2nOnAuIuhIjeAYfDd9spzvbMOeLDhqx+k3ucWhInvjbmC5wQRcvl4W7x2 htKtCoCr1Bqun9UBfXqKT0Ta106YdrL7HOxOfgNQEXJoeKpL2NFCq3Z1ZfbJ9aSg MKrbw5Gy9eilBoieXB6ZJKd/a7CYxe4WjJqhNXQTwrabGWb+8VPH7QlpBimd1Oeh oou4RWS+zPI6JYsdN804vHRn/+u/BhLY9bCwXE7BMwOXVxyg4G5o3GDDj7r8GVvJ UVOH9GO+gU/D7O4qqA7WQ5Mja2+VMHMN/OpaOBIoEg9OSoLRjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIYwh4qYJk7GAdX3YZswA4+syQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjE4Zjg3OGMtZmU2Yi0z ZmEwLWI5MTQtYTI4M2VmMWM4ZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0WFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUhOCA2wMmHUdXSAdvW2+EWLuHAwcsHWbfiH5vVvmf/E0VTFgGo2LOy gh2KZc+YDXYGpIHVvnO0qXcdQbOvxXy91lX2XX+WGxhThtv2kDfa4faZAfCBY5aA WARRNciR7nRvQiYLTUcksDDy4C/uCa1yNpKsQ5GLwlds3NGMF9EcOfm8MVxJzMnA VMOcsIWY5BxSa914diP1o3qm1XEU2IIKGSqni/zxxupNmrxy45frMCc6KTLdvzdu jZOA1AkkbgJghyPZmCH9KSC3Lzw+V2LOvs38ad3nlnHKHBb+t7W0JoIHaDg9Sc9c 9CX8BHj9xKP25anuuOw2KMPZ+55ZR/0= -----END CERTIFICATE-----Generated at Sun Jun 29 10:59:57 2025 by rpki-client