$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/113b908c-48a6-3148-8305-9a4a872712d4.roa File: 113b908c-48a6-3148-8305-9a4a872712d4.roa (raw, json) Hash identifier: aOJj9uS3GZ1Dlkh3YxwCpYttXYq+EWHonAJWOLw8/A8= Subject key identifier: DE:29:B3:E2:EA:7A:50:30:94:EB:A4:4C:80:17:B3:E0:ED:93:C6:48 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA8538AF9D16531AC5B18000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/113b908c-48a6-3148-8305-9a4a872712d4.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 70.20.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:38:af:9d:16:53:1a:c5:b1:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=d05fbcd7-0e7c-4644-87d5-3c33445012c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:f7:3b:8e:c1:d8:c0:66:51:82:d3:16:8b: 53:b9:65:08:ca:c5:c8:8d:92:5b:37:09:ee:69:8a: a6:63:d2:fc:d7:4e:2e:ca:c0:56:df:c1:82:4e:d8: 60:3b:26:d7:97:de:03:10:21:47:d8:4c:83:f2:2c: 14:da:a3:64:3a:31:fc:83:71:05:0d:e6:fa:09:11: 1d:d8:e1:74:1c:7e:f6:a9:48:fb:14:93:16:1b:00: 74:29:93:95:ef:76:66:2f:25:54:80:a9:10:ea:f5: 2e:ab:3b:ed:6f:0b:8b:32:fa:e3:2b:f4:da:08:79: 5e:8f:96:ac:bc:c6:c1:cb:62:10:ec:d9:1c:b0:52: bf:ab:a8:eb:4c:40:f1:92:7e:64:79:23:29:2f:e8: cc:eb:eb:54:c7:34:9a:c7:df:67:0a:e5:a8:79:fd: e6:33:c7:5f:a7:cb:18:bb:0e:b1:f9:59:08:94:34: a2:4f:4b:48:4e:dd:83:ca:a3:d7:18:e2:9b:2a:fa: d3:03:76:27:01:03:83:57:5c:aa:84:fd:70:73:df: 57:d7:14:0a:6d:7e:89:4d:84:4f:e2:ef:bf:46:3b: b3:37:06:f3:f5:7e:05:e6:d4:53:02:fb:98:81:f5: 95:77:3a:e0:92:bf:57:f1:7c:24:dd:b6:d3:49:5b: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:29:B3:E2:EA:7A:50:30:94:EB:A4:4C:80:17:B3:E0:ED:93:C6:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/113b908c-48a6-3148-8305-9a4a872712d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.20.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:7c:41:d2:50:59:95:51:8e:ce:93:27:52:03:46:f6:9a:81: d6:fb:c9:a4:df:5a:60:93:a8:b6:0e:21:9c:0a:24:d9:74:2c: 0d:66:2c:0a:ff:10:d7:1f:5a:06:09:ac:ce:63:2a:c3:e1:0c: e7:44:4a:03:06:a8:8d:ce:79:40:a7:cc:1e:9b:cc:2c:0e:4f: 63:c6:7a:cd:38:d2:83:6f:fa:bd:3c:e3:58:5b:03:2d:6b:a7: df:cb:3a:57:d5:ac:af:ff:c9:fa:fd:0b:ee:bf:79:f2:36:55: 91:ec:be:b4:f3:7d:24:bb:4c:fe:66:f1:63:42:06:2e:b7:71: ac:12:d9:92:4d:fe:d6:9f:13:9b:9b:2b:69:0c:d9:af:55:a4: 87:a4:0d:50:af:cf:37:05:26:d2:75:23:66:1d:c2:1a:de:f9: 32:35:a5:f5:36:6b:fb:45:5a:37:78:21:99:46:17:f5:af:51: 97:73:bd:bd:78:29:17:27:24:a8:f8:b6:51:1b:3b:02:fa:06: 45:5b:e3:87:dd:fd:dc:60:bd:30:90:58:04:fa:fd:fe:62:06: e6:03:fb:b2:57:d5:21:85:e8:11:f4:c1:64:ad:15:f2:e1:a4: c5:07:ae:23:9e:43:b6:33:16:48:56:21:1a:9c:ed:6b:ea:12: e2:7d:77:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTivnRZTGsWxgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZDA1ZmJjZDctMGU3Yy00NjQ0LTg3ZDUtM2MzMzQ0NTAxMmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw/3O47B2MBmUYLTFotTuWUIysXIjZJbNwnu aYqmY9L8104uysBW38GCTthgOybXl94DECFH2EyD8iwU2qNkOjH8g3EFDeb6CREd 2OF0HH72qUj7FJMWGwB0KZOV73ZmLyVUgKkQ6vUuqzvtbwuLMvrjK/TaCHlej5as vMbBy2IQ7NkcsFK/q6jrTEDxkn5keSMpL+jM6+tUxzSax99nCuWoef3mM8dfp8sY uw6x+VkIlDSiT0tITt2DyqPXGOKbKvrTA3YnAQODV1yqhP1wc99X1xQKbX6JTYRP 4u+/RjuzNwbz9X4F5tRTAvuYgfWVdzrgkr9X8Xwk3bbTSVuXuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4ps+LqelAwlOukTIAXs+Dtk8ZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTEzYjkwOGMtNDhhNi0z MTQ4LTgzMDUtOWE0YTg3MjcxMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERhQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt8QdJQWZVRjs6TJ1IDRvaagdb7yaTfWmCTqLYOIZwKJNl0LA1mLAr/ ENcfWgYJrM5jKsPhDOdESgMGqI3OeUCnzB6bzCwOT2PGes040oNv+r0841hbAy1r p9/LOlfVrK//yfr9C+6/efI2VZHsvrTzfSS7TP5m8WNCBi63cawS2ZJN/tafE5ub K2kM2a9VpIekDVCvzzcFJtJ1I2Ydwhre+TI1pfU2a/tFWjd4IZlGF/WvUZdzvb14 KRcnJKj4tlEbOwL6BkVb44fd/dxgvTCQWAT6/f5iBuYD+7JX1SGF6BH0wWStFfLh pMUHriOeQ7YzFkhWIRqc7WvqEuJ9d1c= -----END CERTIFICATE-----Generated at Mon Jun 16 14:53:14 2025 by rpki-client