$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c162e3cc-ebac-30eb-a479-04090b221e04.roa File: c162e3cc-ebac-30eb-a479-04090b221e04.roa (raw, json) Hash identifier: gas+6B5dvgJnMQ3oSfmRIi94k8/Eq4ebKDH1EyANkIw= Subject key identifier: 03:27:75:71:13:11:DC:08:AC:41:04:D6:3D:EB:CB:70:34:F0:B6:E7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA85267B26B0005FDAB02440 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c162e3cc-ebac-30eb-a479-04090b221e04.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 71.188.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:26:7b:26:b0:00:5f:da:b0:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=a4235555-e9c9-4687-b608-b5c39f17cd52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f4:06:12:d6:d4:d7:0f:52:88:b0:e1:6e:a8: fe:0b:35:66:8a:55:b5:4a:16:56:99:7d:21:56:4a: 0f:f5:98:16:49:7a:59:3d:58:d6:6d:63:72:07:30: be:af:04:80:23:bd:69:56:64:ea:6b:82:09:57:22: b3:2c:48:ff:03:52:73:4d:4d:c4:ab:44:05:fb:01: 1a:eb:6f:28:1c:41:38:72:bf:e1:e4:ab:0b:f8:9e: fa:76:8c:56:03:bb:97:43:b7:39:c9:fb:42:5d:76: 81:45:b1:b1:b8:7a:59:a2:f9:ee:6d:32:f5:69:3b: 94:ff:5a:d7:cb:bf:8c:27:af:c0:d5:a3:e6:c8:a0: a7:68:4f:8d:08:d7:1c:d5:93:ec:24:71:08:a6:c3: 6c:11:c7:24:c4:f1:2f:dd:c0:8b:23:da:af:15:c1: d0:aa:f6:eb:42:b2:92:99:14:52:59:d7:ca:6e:c5: 53:d8:c7:78:10:09:a0:fa:17:f5:20:de:10:8f:00: f1:a6:23:06:41:70:65:45:30:89:6d:10:60:84:c3: a5:42:7e:14:e7:21:2a:29:93:d5:07:96:14:b6:ed: ec:44:a4:05:13:0e:10:0b:4b:87:3e:33:e7:6f:af: a1:d3:2e:bb:84:a5:5a:17:dd:22:94:28:8f:2c:4c: f7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:27:75:71:13:11:DC:08:AC:41:04:D6:3D:EB:CB:70:34:F0:B6:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c162e3cc-ebac-30eb-a479-04090b221e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.188.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:35:59:ae:31:11:e4:ce:f0:66:09:ae:42:fe:ee:d7:01:35: 57:8a:70:3d:b0:9b:16:cc:3c:1a:97:9a:f1:c0:29:9d:d4:d2: f3:60:3b:91:cf:e7:b9:3d:b5:37:7f:51:4b:5e:0e:7e:08:64: 02:8f:27:f7:4b:f2:5c:bd:9e:9c:11:0a:27:5f:36:64:1b:3a: b8:f1:bb:46:c4:35:4f:e5:2f:61:5f:bd:86:dd:48:8f:b8:43: 22:5c:72:36:89:0d:be:2e:81:60:60:9d:63:4b:11:4f:66:35: 3e:d8:55:4f:8d:85:66:c4:77:66:04:ba:cb:49:1d:3a:ee:34: ae:5e:d9:27:19:c6:c1:23:77:3f:08:87:1d:0c:2e:7c:1e:ac: a1:3b:88:df:cc:29:23:2f:86:7e:b2:d2:9f:86:50:ba:7d:a1: 16:bc:36:52:7c:e9:f0:72:ee:a9:f6:6a:06:49:0a:b4:eb:46: 96:d1:1c:81:d1:ab:3c:e2:b0:38:d9:2d:9e:56:50:90:b2:75: 36:51:bd:45:b1:ac:1a:b6:b8:99:09:e4:21:8c:f6:b9:39:e5: 9a:e2:86:88:5b:45:4b:09:01:9f:96:45:17:9b:fa:27:bd:9b: f8:b4:18:c2:6e:83:57:8e:82:44:71:d5:04:31:b4:33:4d:da: 0e:cc:6b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSZ7JrAAX9qwJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk YTQyMzU1NTUtZTljOS00Njg3LWI2MDgtYjVjMzlmMTdjZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPQGEtbU1w9SiLDhbqj+CzVmilW1ShZWmX0h VkoP9ZgWSXpZPVjWbWNyBzC+rwSAI71pVmTqa4IJVyKzLEj/A1JzTU3Eq0QF+wEa 628oHEE4cr/h5KsL+J76doxWA7uXQ7c5yftCXXaBRbGxuHpZovnubTL1aTuU/1rX y7+MJ6/A1aPmyKCnaE+NCNcc1ZPsJHEIpsNsEcckxPEv3cCLI9qvFcHQqvbrQrKS mRRSWdfKbsVT2Md4EAmg+hf1IN4QjwDxpiMGQXBlRTCJbRBghMOlQn4U5yEqKZPV B5YUtu3sRKQFEw4QC0uHPjPnb6+h0y67hKVaF90ilCiPLEz3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMndXETEdwIrEEE1j3ry3A08LbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzE2MmUzY2MtZWJhYy0z MGViLWE0NzktMDQwOTBiMjIxZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER7zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY1Wa4xEeTO8GYJrkL+7tcBNVeKcD2wmxbMPBqXmvHAKZ3U0vNgO5HP 57k9tTd/UUteDn4IZAKPJ/dL8ly9npwRCidfNmQbOrjxu0bENU/lL2FfvYbdSI+4 QyJccjaJDb4ugWBgnWNLEU9mNT7YVU+NhWbEd2YEustJHTruNK5e2ScZxsEjdz8I hx0MLnwerKE7iN/MKSMvhn6y0p+GULp9oRa8NlJ86fBy7qn2agZJCrTrRpbRHIHR qzzisDjZLZ5WUJCydTZRvUWxrBq2uJkJ5CGM9rk55ZrihohbRUsJAZ+WRReb+ie9 m/i0GMJug1eOgkRx1QQxtDNN2g7Ma2E= -----END CERTIFICATE-----Generated at Tue Jul 1 01:09:46 2025 by rpki-client