$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2bb7aa4-2b0d-3735-8607-f75c9d7d49a0.roa File: e2bb7aa4-2b0d-3735-8607-f75c9d7d49a0.roa (raw, json) Hash identifier: i5KHMkLUOP284x2whUYrwSuUAm38DhHWkEYaephOpMQ= Subject key identifier: 49:42:ED:71:AC:DB:1D:85:F9:5F:6A:2E:56:A3:A5:37:24:D5:33:6F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F1800A828A46E9B892203A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2bb7aa4-2b0d-3735-8607-f75c9d7d49a0.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 141.149.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:0a:82:8a:46:e9:b8:92:20:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=49e0215b-9721-4d30-b6d2-44bb76107fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:92:a2:87:36:b7:5b:8a:61:b8:d5:88:b5:ea: 4a:30:bd:c0:12:f0:2a:28:96:1e:c2:07:6a:3d:d5: a9:91:ad:8e:05:61:b0:42:52:40:36:c0:db:b4:77: 16:58:31:b7:cd:5e:8d:0c:4a:97:ed:3c:16:39:4f: 44:39:63:8e:5b:ca:79:19:71:7e:cd:04:e6:27:f5: 7e:dc:38:70:09:6e:3b:00:63:e2:15:09:52:3b:9c: a5:aa:7d:94:88:6d:c2:bb:7e:48:5f:a3:ca:36:2e: 67:09:7e:6a:71:79:ee:f4:26:75:fe:3e:b0:1c:65: da:75:2a:67:ea:68:e8:1a:df:80:9e:78:b8:48:4b: b4:0c:50:8d:b4:c8:8a:ff:98:aa:a1:11:ba:a5:e9: 74:3f:00:bc:10:e4:8c:93:45:26:d9:60:50:86:2c: 55:73:e5:f1:8a:18:51:3d:80:3c:3f:b1:e1:e1:04: 7b:23:aa:2b:08:86:8a:d4:73:d6:55:8f:a5:b4:80: c4:d9:ef:97:f9:9c:ad:20:14:1e:29:28:6f:de:ef: 82:d4:ed:e1:eb:45:8e:26:82:89:1d:b0:d5:d6:2d: 97:fd:ff:be:2f:e1:f7:2b:79:02:d7:61:14:87:ab: d7:6c:8b:c9:af:a3:da:49:64:96:9a:35:27:db:30: 8a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:42:ED:71:AC:DB:1D:85:F9:5F:6A:2E:56:A3:A5:37:24:D5:33:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2bb7aa4-2b0d-3735-8607-f75c9d7d49a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.149.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9a:5c:c0:de:bf:1f:97:a4:38:e8:94:f1:b8:fa:77:51:3f: 99:17:02:e9:d6:fb:2c:94:4b:8e:7b:57:a9:89:c2:24:05:d2: 3c:77:c8:ab:93:c6:9d:87:92:d8:2d:d3:95:fb:33:19:b0:09: a7:1d:52:2c:50:4a:77:bb:7e:27:28:6f:21:2c:48:9b:53:dc: 91:a7:9e:63:18:5d:3e:df:9b:00:4c:17:9e:53:ff:b6:73:42: 5a:ca:3d:01:28:45:90:ab:6f:68:71:b1:eb:f8:af:ee:16:7d: d3:9a:ea:4a:7d:d2:7e:85:43:1f:19:e6:db:a6:d4:21:ab:3b: ab:87:02:33:67:c5:77:f1:de:ab:75:3e:f2:fb:9c:70:27:0f: b3:5b:87:df:04:77:61:c7:7d:48:c8:41:6c:de:ea:29:18:30: 2c:fa:43:3f:01:8d:fa:14:13:66:10:b4:96:2c:6b:cb:ec:49: 05:aa:69:af:99:b6:af:88:cf:ad:30:7a:29:c7:0c:8e:e4:94: e5:c9:3a:93:6f:c4:34:2c:c9:20:eb:39:09:dc:f8:c9:bc:f2: e5:2c:cf:10:e1:49:b2:27:88:a4:0f:2e:bd:e4:5f:3e:51:d5: 33:12:00:42:5e:78:45:88:ee:c3:62:7d:59:43:32:3f:8b:d6: c2:5a:df:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAqCikbpuJIgOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NDllMDIxNWItOTcyMS00ZDMwLWI2ZDItNDRiYjc2MTA3ZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Kihza3W4phuNWItepKML3AEvAqKJYewgdq PdWpka2OBWGwQlJANsDbtHcWWDG3zV6NDEqX7TwWOU9EOWOOW8p5GXF+zQTmJ/V+ 3DhwCW47AGPiFQlSO5ylqn2UiG3Cu35IX6PKNi5nCX5qcXnu9CZ1/j6wHGXadSpn 6mjoGt+Anni4SEu0DFCNtMiK/5iqoRG6pel0PwC8EOSMk0Um2WBQhixVc+XxihhR PYA8P7Hh4QR7I6orCIaK1HPWVY+ltIDE2e+X+ZytIBQeKShv3u+C1O3h60WOJoKJ HbDV1i2X/f++L+H3K3kC12EUh6vXbIvJr6PaSWSWmjUn2zCKvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElC7XGs2x2F+V9qLlajpTck1TNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTJiYjdhYTQtMmIwZC0z NzM1LTg2MDctZjc1YzlkN2Q0OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjZXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOaXMDevx+XpDjolPG4+ndRP5kXAunW+yyUS457V6mJwiQF0jx3yKuT xp2Hktgt05X7MxmwCacdUixQSne7ficobyEsSJtT3JGnnmMYXT7fmwBMF55T/7Zz QlrKPQEoRZCrb2hxsev4r+4WfdOa6kp90n6FQx8Z5tum1CGrO6uHAjNnxXfx3qt1 PvL7nHAnD7Nbh98Ed2HHfUjIQWze6ikYMCz6Qz8BjfoUE2YQtJYsa8vsSQWqaa+Z tq+Iz60weinHDI7klOXJOpNvxDQsySDrOQnc+Mm88uUszxDhSbIniKQPLr3kXz5R 1TMSAEJeeEWI7sNifVlDMj+L1sJa3xg= -----END CERTIFICATE-----Generated at Tue Jul 1 16:12:55 2025 by rpki-client