$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa File: b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa (raw, json) Hash identifier: I50C4LYa6Z+77x4bXu8QAssgTMmh9vUkZF9vt7RBofc= Subject key identifier: BC:92:55:9B:D1:D3:D0:E9:7B:9E:A3:56:46:DE:95:64:BB:CC:CC:FC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F17FE293122100821E334AC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 173.66.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:e2:93:12:21:00:82:1e:33:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=b05f1dff-af32-407c-b1ba-9e95091900af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:d2:55:05:70:36:81:ae:72:f3:9e:f3:72: d0:59:58:e6:c4:dc:5b:91:df:1c:cb:a3:be:d1:a5: 6d:81:f6:68:be:af:e7:18:75:02:47:be:8a:df:00: ee:2d:be:a1:fa:58:02:f6:4e:d0:e1:e4:03:94:ca: e8:1e:a9:4f:a1:a6:d5:4b:14:df:ef:d8:de:1c:4d: 6c:f1:a8:da:d7:71:78:d5:a3:d4:79:f5:6e:74:1c: 01:5b:ac:21:45:cf:6b:db:56:d6:07:37:c3:e1:a6: 28:6c:c5:26:e5:9d:b2:10:c4:09:94:8b:80:2b:17: 88:ea:8f:3c:9c:ee:19:15:56:16:b5:7a:3b:3f:28: 52:7b:a4:1c:34:56:79:79:ad:65:37:99:51:82:2b: 0b:86:a7:ee:dd:ff:6a:50:5e:2a:4e:bb:ba:4c:e4: a8:1b:17:29:d2:f6:54:bc:02:56:59:fa:ca:3f:3c: e0:e5:86:00:fa:a1:87:6f:1d:65:e6:28:74:25:0a: ec:67:b7:ce:50:8b:a9:65:39:5b:a0:3b:9a:95:cb: 12:85:0e:79:93:52:c8:c2:bb:71:a7:5e:44:6e:69: b1:77:4e:e8:06:ef:ad:e5:1a:76:90:44:f0:0f:70: 60:da:05:c5:a0:ec:73:01:9d:04:7a:40:a0:ff:33: 0b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:92:55:9B:D1:D3:D0:E9:7B:9E:A3:56:46:DE:95:64:BB:CC:CC:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e0:a4:0c:c8:00:ea:55:8e:2d:99:19:a2:2b:1a:fb:08:bc: 83:88:e7:ec:82:6e:cc:de:ad:b3:5c:3e:03:03:81:01:d0:a3: ca:fa:b5:4e:ec:6a:6b:1d:f4:72:29:94:2f:b3:6e:89:47:ca: 78:d4:96:c9:58:eb:fc:8c:9b:8f:29:6d:71:80:c4:8a:43:6e: 46:12:8d:dd:c2:c7:8e:60:d7:a1:c7:08:4a:7d:fd:05:32:14: 8d:bf:86:ef:cb:59:df:c0:53:54:48:e3:c6:0f:9a:84:84:11: 2b:72:20:62:c0:20:99:19:f5:e7:5f:72:a5:49:f0:f1:f2:6a: 3d:ad:e0:88:f6:ac:12:23:90:70:81:f6:48:04:11:b7:e2:4f: f0:60:4f:4c:2e:a8:22:0a:36:99:d9:76:3d:63:d1:44:c9:f1: ed:f4:b2:15:1e:30:9a:81:d0:3c:d7:bd:43:8b:da:78:87:16: 33:3e:d4:72:8b:3c:c1:e7:94:a6:2c:c2:49:bf:75:bb:75:05: 96:d2:8f:6b:3b:3e:43:76:d7:3c:d5:29:96:00:49:da:69:90: 45:c9:10:81:87:ea:ab:c7:69:e0:c9:d4:86:99:66:e2:a7:03: c3:c0:79:76:4c:eb:42:9d:01:9c:45:f4:47:8d:b2:dd:94:3f: 24:f4:ab:2a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnxf+KTEiEAgh4zSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk YjA1ZjFkZmYtYWYzMi00MDdjLWIxYmEtOWU5NTA5MTkwMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol/SVQVwNoGucvOe83LQWVjmxNxbkd8cy6O+ 0aVtgfZovq/nGHUCR76K3wDuLb6h+lgC9k7Q4eQDlMroHqlPoabVSxTf79jeHE1s 8aja13F41aPUefVudBwBW6whRc9r21bWBzfD4aYobMUm5Z2yEMQJlIuAKxeI6o88 nO4ZFVYWtXo7PyhSe6QcNFZ5ea1lN5lRgisLhqfu3f9qUF4qTru6TOSoGxcp0vZU vAJWWfrKPzzg5YYA+qGHbx1l5ih0JQrsZ7fOUIupZTlboDualcsShQ55k1LIwrtx p15Ebmmxd07oBu+t5Rp2kETwD3Bg2gXFoOxzAZ0EekCg/zML7wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLySVZvR09Dpe56jVkbelWS7zMz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjU5Yzc3MjEtZDlkZC0z ZmEzLWI2NTQtZmIzY2NmOGU2OWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArUIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAA+CkDMgA6lWOLZkZoisa+wi8g4jn7IJuzN6ts1w+AwOBAdCjyvq1Tuxq ax30cimUL7NuiUfKeNSWyVjr/IybjyltcYDEikNuRhKN3cLHjmDXoccISn39BTIU jb+G78tZ38BTVEjjxg+ahIQRK3IgYsAgmRn1519ypUnw8fJqPa3giPasEiOQcIH2 SAQRt+JP8GBPTC6oIgo2mdl2PWPRRMnx7fSyFR4wmoHQPNe9Q4vaeIcWMz7Ucos8 weeUpizCSb91u3UFltKPazs+Q3bXPNUplgBJ2mmQRckQgYfqq8dp4MnUhplm4qcD w8B5dkzrQp0BnEX0R42y3ZQ/JPSrKg== -----END CERTIFICATE-----Generated at Mon Jun 30 19:45:24 2025 by rpki-client