$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/473c9c74-01e6-3a21-86fc-96a380120b5a.roa File: 473c9c74-01e6-3a21-86fc-96a380120b5a.roa (raw, json) Hash identifier: wUfNNbd1a6cAxiRw+hzjm1uOp9O3Z8DNKMcOii3e16A= Subject key identifier: E4:93:01:6E:BA:64:38:1C:0F:BD:3B:1C:32:1C:84:A6:4A:39:49:EC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849EEC3897E242AFFBC81137950 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/473c9c74-01e6-3a21-86fc-96a380120b5a.roa Signing time: Thu 22 May 2025 01:30:12 +0000 ROA not before: Thu 22 May 2025 01:30:12 +0000 ROA not after: Wed 20 Aug 2025 01:30:12 +0000 asID: 401742 IP address blocks: 64.71.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:c3:89:7e:24:2a:ff:bc:81:13:79:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 22 01:30:12 2025 GMT Not After : Aug 20 01:30:12 2025 GMT Subject: CN=5d7c3b3a-50ae-4d69-82ea-d5075d1e2887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dc:55:f3:fa:d6:1b:4b:a3:d9:6d:b9:dd:62: c3:f4:2c:77:46:bc:50:7a:08:38:73:ed:66:22:f4: d0:f5:9f:6e:dd:b2:aa:81:b6:b2:a1:c7:83:38:ae: 68:a9:ad:a7:0d:c3:3f:ed:2c:22:66:a0:7c:0f:41: 4f:07:3a:f7:9b:c0:e2:30:54:04:bf:c9:3b:72:94: 4b:3a:26:c8:79:fb:4f:6e:f8:df:a7:f2:fe:84:57: 50:43:d5:63:d0:80:ac:2e:71:0a:d9:47:04:56:a3: 0e:b9:95:f2:40:00:24:61:4e:97:93:99:a2:8d:a7: e2:4c:d5:77:12:6b:6e:33:18:ba:52:29:d1:1e:84: 02:74:dd:eb:63:fd:b3:d6:be:f2:1a:44:af:e3:96: 5b:f1:5f:60:90:bc:a9:68:f6:74:0f:57:a0:6f:cf: 4d:5b:b2:2e:08:69:4a:f6:d5:5a:8a:da:76:e5:bb: ee:df:96:29:9a:9f:3a:89:7f:66:f7:37:b2:55:ce: 2a:3e:2f:a1:a8:1f:28:7d:c9:4f:f3:10:11:bf:66: 2e:01:21:66:68:71:cd:d2:93:ff:14:44:4b:7c:99: 48:76:bc:07:a3:29:7e:74:88:aa:4c:4e:c4:d9:8a: 73:03:3a:de:ff:9d:45:93:82:ac:d1:78:a5:69:c0: d1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:93:01:6E:BA:64:38:1C:0F:BD:3B:1C:32:1C:84:A6:4A:39:49:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/473c9c74-01e6-3a21-86fc-96a380120b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:6f:b8:73:ee:f5:b1:8c:c6:1e:c6:23:69:62:62:8f:dc:cf: f4:76:57:da:94:c6:73:17:47:e5:54:69:ee:8f:33:15:a1:f2: b9:3d:d0:bf:5e:5b:86:f4:82:8f:6f:c3:da:48:cf:6d:73:6a: f3:a7:b1:20:a9:89:75:e8:4b:e7:04:10:6b:3d:c5:a1:db:78: 14:00:51:ad:6e:b2:40:5a:37:90:80:23:b4:a1:29:d2:4e:d8: 15:d6:d0:f5:9c:74:e8:85:89:18:c5:76:48:8e:f2:20:f4:c2: d5:84:16:03:67:77:6d:b6:47:3d:04:3a:c1:0c:9d:6e:a8:0d: bd:7f:7a:ac:32:2d:20:80:62:64:d4:e8:dc:e9:1c:f5:e5:b1: 51:61:c8:cc:8c:cf:fd:d7:6c:6b:58:20:57:b8:85:29:50:28: 5e:42:84:ea:32:fc:8e:d1:f4:6e:6a:f6:39:86:6f:eb:0f:e6: bf:36:6e:fb:1a:04:b8:2f:08:0d:2c:2b:c4:d9:0a:71:ff:41: 08:5f:ad:96:4f:21:46:df:b6:3c:1e:99:0c:5d:1c:0e:64:aa: a4:aa:0b:a6:fb:f2:08:92:81:2f:b4:46:d9:af:24:57:1e:e8: 54:bf:7d:5a:16:7b:c4:fc:50:ab:5e:8b:d2:ea:28:c1:75:73: 63:31:d2:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnuw4l+JCr/vIETeVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUyMjAxMzAxMloXDTI1MDgyMDAxMzAxMlowLzEtMCsGA1UEAxMk NWQ3YzNiM2EtNTBhZS00ZDY5LTgyZWEtZDUwNzVkMWUyODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtxV8/rWG0uj2W253WLD9Cx3RrxQegg4c+1m IvTQ9Z9u3bKqgbayoceDOK5oqa2nDcM/7SwiZqB8D0FPBzr3m8DiMFQEv8k7cpRL OibIeftPbvjfp/L+hFdQQ9Vj0ICsLnEK2UcEVqMOuZXyQAAkYU6Xk5mijafiTNV3 EmtuMxi6UinRHoQCdN3rY/2z1r7yGkSv45Zb8V9gkLypaPZ0D1egb89NW7IuCGlK 9tVaitp25bvu35Ypmp86iX9m9zeyVc4qPi+hqB8ofclP8xARv2YuASFmaHHN0pP/ FERLfJlIdrwHoyl+dIiqTE7E2YpzAzre/51Fk4Ks0XilacDRMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSTAW66ZDgcD707HDIchKZKOUnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDczYzljNzQtMDFlNi0z YTIxLTg2ZmMtOTZhMzgwMTIwYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEerMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxvuHPu9bGMxh7GI2liYo/cz/R2V9qUxnMXR+VUae6PMxWh8rk90L9e W4b0go9vw9pIz21zavOnsSCpiXXoS+cEEGs9xaHbeBQAUa1uskBaN5CAI7ShKdJO 2BXW0PWcdOiFiRjFdkiO8iD0wtWEFgNnd222Rz0EOsEMnW6oDb1/eqwyLSCAYmTU 6NzpHPXlsVFhyMyMz/3XbGtYIFe4hSlQKF5ChOoy/I7R9G5q9jmGb+sP5r82bvsa BLgvCA0sK8TZCnH/QQhfrZZPIUbftjwemQxdHA5kqqSqC6b78giSgS+0RtmvJFce 6FS/fVoWe8T8UKtei9LqKMF1c2Mx0v0= -----END CERTIFICATE-----Generated at Sun Jun 29 13:30:36 2025 by rpki-client