$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df14a04e-a1e3-362b-b83e-8c94b7a663a6.roa File: df14a04e-a1e3-362b-b83e-8c94b7a663a6.roa (raw, json) Hash identifier: mFVXdVqaCcuNk1C7LkNITRrTnSKg0DkX8T06l44Hz/E= Subject key identifier: DF:B0:BF:2D:A0:E0:97:D5:3C:BD:F6:4F:B5:22:5C:F4:7B:A4:2E:32 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A43DB2A11C3F79466DF72AC00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df14a04e-a1e3-362b-b83e-8c94b7a663a6.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 6167 IP address blocks: 75.241.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:2a:11:c3:f7:94:66:df:72:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=e0dd0d1c-1c0b-41ec-8f67-abae7f5c9c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6d:5a:59:ea:a9:03:50:fe:4b:d1:a4:df:e1: 29:b9:4c:ec:41:18:a7:ce:b6:a5:47:d8:7b:60:f0: 1d:f1:29:2c:3c:3f:71:c8:90:d8:64:91:93:3e:c4: 26:74:9b:29:6f:a6:fb:eb:43:18:a6:f3:1e:36:d1: 29:99:89:75:5b:e2:08:e7:8c:fa:e0:da:e1:0a:c9: 76:31:69:55:d1:9c:3b:b3:2c:90:cd:f9:22:60:14: 10:4a:cb:ae:51:2d:b2:ee:33:d5:d5:95:4e:3d:17: 6e:78:34:8e:6f:2b:cf:71:8a:38:f0:41:ef:5c:01: 42:56:4a:d5:2a:78:3a:2d:6f:1c:4c:4d:a4:b3:11: 96:5f:cf:d1:e7:06:96:68:ce:a4:8a:b3:50:c6:32: de:65:23:5e:3e:af:32:b8:bd:47:80:8a:c7:60:a6: 32:a0:b9:3d:1f:b9:b1:bc:cc:c1:e4:5e:7d:f5:f8: fa:60:e3:f1:3a:61:85:2e:04:cd:dc:f0:88:05:71: 0b:b4:a3:ef:a2:e3:72:e2:e7:bf:5b:21:83:06:d7: 63:12:28:4e:f5:26:69:a3:99:f0:06:07:91:11:c5: 02:30:f6:ac:3e:9d:75:49:6e:5e:1a:2a:06:1a:9a: 02:f0:61:ff:01:17:b0:98:8c:fa:4d:6b:23:bb:a6: 10:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B0:BF:2D:A0:E0:97:D5:3C:BD:F6:4F:B5:22:5C:F4:7B:A4:2E:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df14a04e-a1e3-362b-b83e-8c94b7a663a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 75.241.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:65:46:14:68:22:47:d6:1e:21:28:65:d3:1b:45:95:85:ff: 36:6e:82:46:b1:ae:04:95:87:76:eb:b2:7f:3d:fa:b4:56:2b: 4a:a1:d5:ec:69:37:c7:83:9a:1b:f1:04:08:1f:bd:1d:c2:5d: af:f2:3b:b3:c9:31:91:ae:15:e8:2e:9a:a1:d1:b7:40:44:68: c2:22:cf:f7:e4:6d:2a:8d:23:5f:48:45:00:44:4f:16:93:f1: 89:46:33:12:ae:08:c9:7b:05:de:c6:1a:c1:aa:39:74:7b:dd: 20:c8:e9:f5:33:f4:0a:69:72:e8:c2:6d:ac:20:1a:cb:ca:67: 11:c2:6c:b6:e7:87:75:a1:19:db:28:d7:8b:7a:4a:75:b1:84: b2:96:2f:ca:b0:5a:b7:39:1e:ad:1f:93:b5:dd:ed:28:f2:a1: 21:80:2d:81:38:5d:95:32:9a:d4:46:2f:81:00:2d:e3:a7:a7: 0a:a4:5a:76:1f:8c:2b:66:37:4c:a0:5e:5f:ea:c3:0e:d5:f7: 10:97:84:b1:95:ca:b1:ed:30:bb:0d:e0:21:4f:6d:85:fa:ec: 48:08:6d:5a:12:3b:2e:47:9e:85:27:b2:2b:85:97:67:6a:cf: 14:c1:ce:8e:2c:0c:d3:4e:93:a3:06:6a:b6:4f:5f:07:69:99: 12:25:b0:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2yoRw/eUZt9yrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZTBkZDBkMWMtMWMwYi00MWVjLThmNjctYWJhZTdmNWM5YzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW1aWeqpA1D+S9Gk3+EpuUzsQRinzralR9h7 YPAd8SksPD9xyJDYZJGTPsQmdJspb6b760MYpvMeNtEpmYl1W+II54z64NrhCsl2 MWlV0Zw7syyQzfkiYBQQSsuuUS2y7jPV1ZVOPRdueDSObyvPcYo48EHvXAFCVkrV Kng6LW8cTE2ksxGWX8/R5waWaM6kirNQxjLeZSNePq8yuL1HgIrHYKYyoLk9H7mx vMzB5F599fj6YOPxOmGFLgTN3PCIBXELtKPvouNy4ue/WyGDBtdjEihO9SZpo5nw BgeREcUCMPasPp11SW5eGioGGpoC8GH/ARewmIz6TWsju6YQEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+wvy2g4JfVPL32T7UiXPR7pC4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGYxNGEwNGUtYTFlMy0z NjJiLWI4M2UtOGM5NGI3YTY2M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS/H4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxlRhRoIkfWHiEoZdMbRZWF/zZugkaxrgSVh3brsn89+rRWK0qh1exp N8eDmhvxBAgfvR3CXa/yO7PJMZGuFegumqHRt0BEaMIiz/fkbSqNI19IRQBETxaT 8YlGMxKuCMl7Bd7GGsGqOXR73SDI6fUz9AppcujCbawgGsvKZxHCbLbnh3WhGdso 14t6SnWxhLKWL8qwWrc5Hq0fk7Xd7SjyoSGALYE4XZUymtRGL4EALeOnpwqkWnYf jCtmN0ygXl/qww7V9xCXhLGVyrHtMLsN4CFPbYX67EgIbVoSOy5HnoUnsiuFl2dq zxTBzo4sDNNOk6MGarZPXwdpmRIlsKk= -----END CERTIFICATE-----Generated at Mon Jun 30 13:33:28 2025 by rpki-client