$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7eb50c1-51ee-3f97-a222-a3759e921552.roa File: c7eb50c1-51ee-3f97-a222-a3759e921552.roa (raw, json) Hash identifier: 42K1ziIPpyLspRlKZ4EDcu0DVQ/nP2/kVYnctBxV1TE= Subject key identifier: 14:00:0F:5C:1B:D4:65:2A:7A:5B:A5:0F:B0:F4:E3:89:09:25:A7:82 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA853A76FA626BF81D3E2380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7eb50c1-51ee-3f97-a222-a3759e921552.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 71.240.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:3a:76:fa:62:6b:f8:1d:3e:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=24b40e2d-7e00-44e5-b492-51b615b6da40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:a2:10:85:86:94:bd:00:86:05:c3:a1:26: ce:2f:7d:c0:11:95:68:ad:93:53:7c:56:92:03:ba: a8:28:6e:76:65:6d:4d:ed:c9:2d:24:2a:50:51:31: 1c:a5:ad:be:90:c9:5c:14:ac:e8:ec:90:97:8c:a0: f9:38:f5:00:af:dd:b4:d8:e0:43:26:b0:14:97:df: 94:87:a4:1e:82:db:ca:31:4b:ad:5e:97:66:80:5f: 43:e2:4f:2a:ee:59:5d:30:c4:a0:6b:8b:b7:7c:7f: 85:7c:a0:88:26:a4:a9:cc:37:58:85:76:82:65:7f: 60:50:c8:28:7b:8e:82:c4:31:79:09:90:e1:c6:b0: 85:32:97:7c:61:4a:b3:d2:57:db:de:48:f7:d1:e1: 20:dd:16:36:68:fe:ac:b5:f3:5f:68:10:c1:33:bc: 2b:95:d3:59:f4:0b:03:a9:ab:48:64:78:46:fb:75: ce:b9:98:62:21:91:c9:39:85:b1:10:2c:e9:18:25: 91:d1:fd:de:2f:08:a4:67:82:ba:51:35:95:57:41: d2:c6:81:ee:64:e7:99:18:52:93:c4:9c:55:f6:1c: bd:0a:64:ba:8e:6b:fd:7d:ac:cc:34:d8:6b:e0:61: 3c:42:21:9e:ce:f5:d6:a9:13:25:0a:46:b9:b4:90: 8e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:00:0F:5C:1B:D4:65:2A:7A:5B:A5:0F:B0:F4:E3:89:09:25:A7:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7eb50c1-51ee-3f97-a222-a3759e921552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.240.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a5:69:48:ad:2d:7a:a2:79:18:45:19:c0:4f:12:a0:05:ed: ef:74:b1:cc:36:51:37:d1:fc:6d:a2:b1:da:cb:52:7b:24:9d: cc:dd:45:5b:89:02:ea:15:95:12:e5:97:e6:1a:eb:49:ee:49: 0d:8f:f4:9e:15:be:3d:24:db:9c:6d:b2:ae:d5:b0:62:e7:c2: 52:6e:d4:c2:f1:a8:70:e9:73:5a:80:ae:59:a2:1d:f1:14:df: 27:cd:1c:66:97:ce:61:c8:11:2b:b9:73:a6:2a:95:37:e8:a6: 94:8e:01:a8:fc:c8:fe:60:8f:59:8c:8e:70:84:b6:2c:1b:70: 7a:ff:38:14:5a:2a:24:f9:fd:00:e1:eb:3c:ba:34:9b:6b:c5: 44:2e:b2:c7:a0:4e:52:74:43:99:81:e5:75:06:7a:58:f4:f6: 37:2c:6d:8d:e6:1a:f3:49:4a:33:e1:c3:b2:2a:5e:94:a2:36: 60:0a:4c:c4:4d:a7:31:4b:c1:29:02:6d:c0:c6:56:ca:30:d5: 92:c5:7e:32:49:aa:2c:b4:21:a8:9c:ee:64:c9:e6:ad:3d:86: 0d:d2:06:59:91:d0:89:be:04:9d:cd:80:38:6a:1c:3f:c0:90: 6b:12:dc:94:58:c6:ad:84:20:a1:30:69:a2:e3:44:81:fb:22: 78:9a:f1:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTp2+mJr+B0+I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk MjRiNDBlMmQtN2UwMC00NGU1LWI0OTItNTFiNjE1YjZkYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreyiEIWGlL0AhgXDoSbOL33AEZVorZNTfFaS A7qoKG52ZW1N7cktJCpQUTEcpa2+kMlcFKzo7JCXjKD5OPUAr9202OBDJrAUl9+U h6QegtvKMUutXpdmgF9D4k8q7lldMMSga4u3fH+FfKCIJqSpzDdYhXaCZX9gUMgo e46CxDF5CZDhxrCFMpd8YUqz0lfb3kj30eEg3RY2aP6stfNfaBDBM7wrldNZ9AsD qatIZHhG+3XOuZhiIZHJOYWxECzpGCWR0f3eLwikZ4K6UTWVV0HSxoHuZOeZGFKT xJxV9hy9CmS6jmv9fazMNNhr4GE8QiGezvXWqRMlCka5tJCOaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQAD1wb1GUqelulD7D044kJJaeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzdlYjUwYzEtNTFlZS0z Zjk3LWEyMjItYTM3NTllOTIxNTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR/CAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6laUitLXqieRhFGcBPEqAF7e90scw2UTfR/G2isdrLUnsknczdRVuJ AuoVlRLll+Ya60nuSQ2P9J4Vvj0k25xtsq7VsGLnwlJu1MLxqHDpc1qArlmiHfEU 3yfNHGaXzmHIESu5c6YqlTfoppSOAaj8yP5gj1mMjnCEtiwbcHr/OBRaKiT5/QDh 6zy6NJtrxUQussegTlJ0Q5mB5XUGelj09jcsbY3mGvNJSjPhw7IqXpSiNmAKTMRN pzFLwSkCbcDGVsow1ZLFfjJJqiy0Iaic7mTJ5q09hg3SBlmR0Im+BJ3NgDhqHD/A kGsS3JRYxq2EIKEwaaLjRIH7Inia8YQ= -----END CERTIFICATE-----Generated at Tue Jul 1 07:02:55 2025 by rpki-client