$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9ea7529-04e9-3e20-88b1-c1bfb6cc01f6.roa File: d9ea7529-04e9-3e20-88b1-c1bfb6cc01f6.roa (raw, json) Hash identifier: lc7naoWtAZMkmAdh3cWeMkjOIIMqTmbRsaOa5QxILiU= Subject key identifier: D1:97:CC:03:F0:77:43:D6:E7:DC:6D:16:2C:C6:90:D7:CE:DE:83:71 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7AFF957532A9DEECB2B680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9ea7529-04e9-3e20-88b1-c1bfb6cc01f6.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 14717 IP address blocks: 208.246.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:ff:95:75:32:a9:de:ec:b2:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=bbcdf3c3-b447-475a-bbb2-85b75d6a3d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:05:cb:b2:2a:79:d0:b5:6a:e7:9f:ec:d9:2a: 1d:83:c0:56:48:00:cb:df:47:e4:e5:1e:6c:b5:a7: 01:bb:69:ba:14:07:08:1c:18:7c:9a:2c:e5:16:5c: 32:93:2f:93:2b:c6:b7:20:8e:02:50:60:d5:12:a4: f6:14:d4:c0:09:9a:5c:02:af:36:29:25:c2:9a:c6: 7c:e2:31:14:27:53:8b:4c:3a:4a:a8:11:b2:ef:20: 86:ea:f6:9b:ba:4d:02:35:cb:97:ea:0a:ee:f6:a8: 6d:d6:cc:15:ac:d6:a8:0a:32:a1:df:58:00:68:eb: c6:f2:f7:c2:1e:1c:78:3e:06:5e:82:ff:f8:96:e0: 0f:67:2d:6f:2c:6f:e1:9e:eb:b9:ad:d4:52:91:0d: 70:55:ad:0e:19:bb:93:31:2b:6c:3e:2c:83:85:1e: cf:a9:a2:b6:74:30:dc:32:04:c3:37:28:30:c6:6d: 96:74:e8:2e:b9:31:fe:21:40:a4:3b:47:0b:4b:8c: 4f:c5:47:e8:19:4b:da:1f:b6:c6:f4:b8:ad:a1:54: d4:3d:56:91:e9:d8:70:28:e0:33:f4:9a:4b:eb:d8: a8:18:50:35:23:16:b7:19:00:bd:c0:e4:d8:dc:6b: 89:20:51:1d:41:87:30:3e:18:b0:df:3c:6d:5a:16: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:97:CC:03:F0:77:43:D6:E7:DC:6D:16:2C:C6:90:D7:CE:DE:83:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9ea7529-04e9-3e20-88b1-c1bfb6cc01f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.246.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:87:5f:77:86:b3:7b:14:40:96:6b:c3:3d:78:5a:80:a9:12: 4f:47:44:5b:df:b3:9f:32:b9:d0:80:9e:7c:7b:de:9c:d6:7d: 10:74:07:e8:6a:02:79:e4:17:a9:83:7f:7a:43:1f:73:a1:1f: 59:89:57:38:a5:19:ea:b0:f2:6f:e8:42:57:7d:6d:79:7b:6c: b6:9d:b2:0c:e5:bc:9f:82:0d:42:01:26:50:7c:42:f8:4a:c3: 22:41:a7:04:3f:75:95:c1:f9:6c:2e:cc:50:c1:5d:7d:c0:f3: a9:03:aa:7a:45:c7:c2:8c:95:64:24:0b:56:75:a9:7b:7b:3a: 73:a2:9e:30:ce:1e:1d:c4:37:03:35:ef:2d:a8:0b:29:7c:fc: 6c:e8:e3:54:98:21:cc:59:fb:88:52:53:94:db:2e:06:ae:f3: 85:40:c5:51:ec:58:76:79:de:8d:37:a4:33:0d:97:5a:cb:fc: 7a:dc:c6:1d:73:d9:5a:d4:38:27:03:ca:5a:98:7b:7d:bb:85: 4c:3c:c0:07:1f:8b:49:7d:24:df:5f:30:42:9a:09:47:8c:70: 13:e2:67:ac:67:08:04:22:3a:0a:f5:e6:df:f3:91:47:94:17: b7:25:65:2f:20:49:ff:5d:8c:9d:d4:da:9b:1a:8b:c2:11:86: 0b:d2:56:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ev+VdTKp3uyytoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YmJjZGYzYzMtYjQ0Ny00NzVhLWJiYjItODViNzVkNmEzZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAXLsip50LVq55/s2Sodg8BWSADL30fk5R5s tacBu2m6FAcIHBh8mizlFlwyky+TK8a3II4CUGDVEqT2FNTACZpcAq82KSXCmsZ8 4jEUJ1OLTDpKqBGy7yCG6vabuk0CNcuX6gru9qht1swVrNaoCjKh31gAaOvG8vfC Hhx4PgZegv/4luAPZy1vLG/hnuu5rdRSkQ1wVa0OGbuTMStsPiyDhR7PqaK2dDDc MgTDNygwxm2WdOguuTH+IUCkO0cLS4xPxUfoGUvaH7bG9LitoVTUPVaR6dhwKOAz 9JpL69ioGFA1Ixa3GQC9wOTY3GuJIFEdQYcwPhiw3zxtWhbpYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGXzAPwd0PW59xtFizGkNfO3oNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDllYTc1MjktMDRlOS0z ZTIwLTg4YjEtYzFiZmI2Y2MwMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0PYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKHX3eGs3sUQJZrwz14WoCpEk9HRFvfs58yudCAnnx73pzWfRB0B+hq AnnkF6mDf3pDH3OhH1mJVzilGeqw8m/oQld9bXl7bLadsgzlvJ+CDUIBJlB8QvhK wyJBpwQ/dZXB+WwuzFDBXX3A86kDqnpFx8KMlWQkC1Z1qXt7OnOinjDOHh3ENwM1 7y2oCyl8/Gzo41SYIcxZ+4hSU5TbLgau84VAxVHsWHZ53o03pDMNl1rL/Hrcxh1z 2VrUOCcDylqYe327hUw8wAcfi0l9JN9fMEKaCUeMcBPiZ6xnCAQiOgr15t/zkUeU F7clZS8gSf9djJ3U2psai8IRhgvSVi8= -----END CERTIFICATE-----Generated at Tue Jul 1 00:48:54 2025 by rpki-client