$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa File: bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa (raw, json) Hash identifier: pWjMv5LIe424Gvf92bVoZwL3hwzeRo97PQhY9GlVTnA= Subject key identifier: 8C:71:BC:58:69:B2:7C:90:AC:D2:5C:9F:AB:EB:E0:84:75:CF:A7:8C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A4AD591F2DD6386C2BDA74CC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 0 IP address blocks: 204.254.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:91:f2:dd:63:86:c2:bd:a7:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=752aed09-b2a1-446e-8053-2f20337f115c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:11:71:cf:5f:0c:f8:8d:49:36:4a:98:0d:53: 14:69:73:a0:19:20:0e:19:26:b8:c7:e9:9a:0b:05: 26:bc:a4:ea:82:a1:f3:01:5c:45:29:36:9b:26:91: 9b:44:bf:08:aa:2e:1a:32:dd:12:51:26:7b:77:e0: 5a:54:1c:c0:3c:06:8e:6e:8d:6b:fe:be:f4:38:40: ba:0b:98:e9:5d:d2:9f:9a:d6:ff:c3:a6:f8:8f:b1: 13:ec:ef:1b:4c:ee:4d:97:82:ba:ad:20:53:b8:7a: 55:f4:35:07:58:47:38:c4:3f:7d:d6:f7:6c:7b:b9: 3c:ab:75:21:2c:a7:6d:09:da:f4:e8:64:f4:02:fa: e2:ab:09:ee:3a:7e:36:e9:0e:10:a1:f8:0d:5f:b9: a7:0b:10:38:8b:10:9e:ca:e0:e4:9f:8e:cf:d7:3a: 55:20:5b:5e:01:21:a7:c3:a4:a3:60:d5:cc:e9:94: 6d:f5:5b:5d:8e:06:2f:09:0b:bc:63:18:b1:8a:31: ad:ea:f3:9f:bf:f0:b8:bd:48:92:06:39:4c:4a:26: 09:2a:43:4d:5e:9b:91:db:bd:53:3c:52:bd:4e:1c: a2:5f:fb:95:44:a3:1d:b7:fe:6a:0e:c6:6a:98:38: ca:ea:0b:9a:36:da:2d:fd:03:75:2c:90:1f:cf:83: 0f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:71:BC:58:69:B2:7C:90:AC:D2:5C:9F:AB:EB:E0:84:75:CF:A7:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 204.254.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:8b:d4:b8:7b:92:98:61:e5:0d:18:f9:64:a8:bc:07:3d:b3: 6e:15:60:1c:8e:e3:12:1c:26:30:83:66:19:9c:7d:57:dd:84: 4d:12:3a:2d:dc:c5:96:48:0d:6e:6b:5a:bc:ad:86:da:a7:a3: d6:8d:d3:97:82:8b:5a:aa:56:c2:de:c3:83:ba:21:40:9a:97: 51:52:14:bd:b4:ce:02:d7:a4:49:b5:af:de:d0:43:7d:50:da: 4a:12:23:9b:9b:0b:03:bc:65:b8:e9:80:74:5c:6c:d6:25:a1: de:f3:1a:2e:4d:e7:1b:71:81:3f:1c:96:6c:45:cc:0f:b2:5a: ee:c2:b2:bf:3a:79:b1:16:77:73:a8:1b:b8:62:5e:98:36:50: fd:5e:c1:3b:55:a5:14:63:55:de:f4:59:6e:b6:ce:d6:29:86: ba:b5:93:77:ca:b7:5b:55:78:aa:17:ea:1e:37:e0:af:d3:dd: fe:c3:7f:7a:6d:7b:eb:6e:8f:0a:0c:15:af:a0:84:95:a4:93: 5a:f8:f6:42:a9:0b:5e:b1:1d:f3:db:5c:05:d7:2c:ef:15:2e: e0:6a:68:9f:2c:99:75:dc:b0:40:fc:60:31:d9:bb:4e:e0:bf: b2:3f:f5:b4:93:2c:76:e6:f9:48:e4:9d:32:50:e3:92:b0:99: 2f:15:f3:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZHy3WOGwr2nTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk NzUyYWVkMDktYjJhMS00NDZlLTgwNTMtMmYyMDMzN2YxMTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRFxz18M+I1JNkqYDVMUaXOgGSAOGSa4x+ma CwUmvKTqgqHzAVxFKTabJpGbRL8Iqi4aMt0SUSZ7d+BaVBzAPAaObo1r/r70OEC6 C5jpXdKfmtb/w6b4j7ET7O8bTO5Nl4K6rSBTuHpV9DUHWEc4xD991vdse7k8q3Uh LKdtCdr06GT0AvriqwnuOn426Q4QofgNX7mnCxA4ixCeyuDkn47P1zpVIFteASGn w6SjYNXM6ZRt9VtdjgYvCQu8YxixijGt6vOfv/C4vUiSBjlMSiYJKkNNXpuR271T PFK9ThyiX/uVRKMdt/5qDsZqmDjK6guaNtot/QN1LJAfz4MPAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxxvFhpsnyQrNJcn6vr4IR1z6eMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmZmOGJlNzctMWNlNy0z NGNjLThkNTctNDRmYzZkM2E0MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzP54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmL1Lh7kphh5Q0Y+WSovAc9s24VYByO4xIcJjCDZhmcfVfdhE0SOi3c xZZIDW5rWrythtqno9aN05eCi1qqVsLew4O6IUCal1FSFL20zgLXpEm1r97QQ31Q 2koSI5ubCwO8ZbjpgHRcbNYlod7zGi5N5xtxgT8clmxFzA+yWu7Csr86ebEWd3Oo G7hiXpg2UP1ewTtVpRRjVd70WW62ztYphrq1k3fKt1tVeKoX6h434K/T3f7Df3pt e+tujwoMFa+ghJWkk1r49kKpC16xHfPbXAXXLO8VLuBqaJ8smXXcsED8YDHZu07g v7I/9bSTLHbm+UjknTJQ45KwmS8V88I= -----END CERTIFICATE-----Generated at Tue Jul 1 02:33:24 2025 by rpki-client