$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa File: 2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa (raw, json) Hash identifier: TZHvNylPhm9I4AfVMsCLtDjFzt5nMmGWbrUgoRqnETk= Subject key identifier: 5F:AB:19:F2:79:1E:7B:10:05:A2:F9:A4:4B:D0:F7:AD:96:CC:A1:93 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584A00DABC74DE425D6FAD6D6C80 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 21928 IP address blocks: 168.73.0.0/16 maxlen: 24 170.206.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:bc:74:de:42:5d:6f:ad:6d:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=fa1c2d38-9495-4bb8-997c-b873f49c562b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1f:d0:36:ab:0b:10:af:86:bc:c1:8f:18:69: 91:d7:ce:c7:b2:1a:f6:d5:5a:f0:3e:49:dd:0e:75: e1:7d:14:19:ba:1c:17:e9:b4:8e:ea:50:da:c1:ad: e7:68:82:f2:7c:32:25:fa:c7:06:28:3d:ef:4a:fd: 62:61:d4:d8:9e:a0:4f:53:3f:5e:af:f2:8c:f2:05: 82:df:6e:76:da:2a:e0:5c:9a:ae:78:ad:79:dc:83: 31:40:d7:06:15:2c:73:ac:68:77:f7:af:32:53:76: 56:92:6f:eb:40:31:a6:ad:61:8f:07:3d:3d:aa:fb: a7:a6:8f:44:04:4b:27:d5:31:ca:5b:dd:a6:d8:68: b0:b6:48:ba:ae:0d:49:de:1b:48:b4:41:cf:13:10: 11:ee:dd:a7:2a:78:74:82:05:d8:4a:6e:d1:6d:9a: e3:2e:66:ff:19:93:b2:4f:d2:b4:a1:6b:9e:ff:4a: 0b:ed:1e:7c:68:f0:4c:c5:58:3b:3a:26:fd:bc:bc: 73:41:91:d7:e8:8c:1d:dc:0c:da:b8:c0:e9:85:9e: 35:db:2f:44:3e:b1:a5:a2:5f:12:4e:5d:d3:70:7e: e0:cd:b6:60:0a:ff:df:25:0a:ce:fe:6b:2d:4d:ff: a7:d3:84:48:0a:f4:be:38:3b:23:06:fa:93:1e:d0: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AB:19:F2:79:1E:7B:10:05:A2:F9:A4:4B:D0:F7:AD:96:CC:A1:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 168.73.0.0/16 170.206.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:11:6d:8d:8b:3d:4d:62:6a:3d:0a:53:b0:01:3a:be:63:c3: 99:1b:0b:c3:2e:18:f1:25:00:97:63:b3:62:68:61:0f:6c:40: 53:a7:35:3f:80:32:23:36:fb:3b:65:3c:bd:3d:0a:4a:24:45: 0e:ef:c5:09:07:01:43:b9:b4:c7:12:b5:dd:53:0b:a3:5e:3a: 1b:ea:2e:c9:d6:27:9e:e1:a1:2b:a7:33:ec:2d:3e:18:63:5d: 93:fe:d0:b3:76:74:44:81:4c:22:16:bc:b4:9f:dc:ee:dc:85: 60:15:b7:49:e9:2f:29:cd:66:bb:3f:0d:94:b7:8f:d4:dd:67: 5e:4e:bd:33:b2:0d:38:c0:42:f0:3a:de:a1:aa:a2:14:ce:b1: 5f:8c:99:d4:ec:86:26:85:53:f1:2f:b9:88:6e:c9:68:8c:7d: 60:63:22:c2:e2:33:77:87:17:3c:b4:42:09:5b:99:53:ff:6c: db:fb:b6:22:17:e2:41:23:90:4f:df:19:13:44:dc:bb:77:94: 37:8c:83:b8:43:9e:07:ac:80:cb:4b:b0:4e:ec:2b:e1:ff:28: e1:61:e7:fe:03:74:2c:4f:c7:0a:0b:d5:c4:10:cf:71:17:27: 61:d0:73:e4:f3:da:19:04:ee:31:ab:72:fc:f6:59:e9:03:9e: f1:a3:9f:0b -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEoA2rx03kJdb61tbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZmExYzJkMzgtOTQ5NS00YmI4LTk5N2MtYjg3M2Y0OWM1NjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B/QNqsLEK+GvMGPGGmR187Hshr21VrwPknd DnXhfRQZuhwX6bSO6lDawa3naILyfDIl+scGKD3vSv1iYdTYnqBPUz9er/KM8gWC 32522irgXJqueK153IMxQNcGFSxzrGh3968yU3ZWkm/rQDGmrWGPBz09qvunpo9E BEsn1THKW92m2Giwtki6rg1J3htItEHPExAR7t2nKnh0ggXYSm7RbZrjLmb/GZOy T9K0oWue/0oL7R58aPBMxVg7Oib9vLxzQZHX6Iwd3AzauMDphZ412y9EPrGlol8S Tl3TcH7gzbZgCv/fJQrO/mstTf+n04RICvS+ODsjBvqTHtAB1QIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFF+rGfJ5HnsQBaL5pEvQ962WzKGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvMjk5MGU4YzgtMjNhZC0z ZmUyLWE0YzYtZGU3MDcyYzFmYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAqEkDAwCq zjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQABEW2Niz1NYmo9ClOwATq+Y8OZGwvDLhjxJQCXY7NiaGEPbEBT pzU/gDIjNvs7ZTy9PQpKJEUO78UJBwFDubTHErXdUwujXjob6i7J1iee4aErpzPs LT4YY12T/tCzdnREgUwiFry0n9zu3IVgFbdJ6S8pzWa7Pw2Ut4/U3WdeTr0zsg04 wELwOt6hqqIUzrFfjJnU7IYmhVPxL7mIbslojH1gYyLC4jN3hxc8tEIJW5lT/2zb +7YiF+JBI5BP3xkTRNy7d5Q3jIO4Q54HrIDLS7BO7Cvh/yjhYef+A3QsT8cKC9XE EM9xFydh0HPk89oZBO4xq3L89lnpA57xo58L -----END CERTIFICATE-----Generated at Sun Jun 15 17:50:19 2025 by rpki-client