$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f7b891-db77-3c9b-8c94-762cea3fa41e.roa File: 14f7b891-db77-3c9b-8c94-762cea3fa41e.roa (raw, json) Hash identifier: hwIXbEoCMa+CXDEMPgYoHufeZgkpXUPUtplJpqj5cuE= Subject key identifier: E5:43:FA:5B:2F:07:5B:A0:A0:3F:31:85:14:55:FD:B6:0F:BD:79:74 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849E22546DE70400C4E7B9B79C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f7b891-db77-3c9b-8c94-762cea3fa41e.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 701 IP address blocks: 204.91.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:46:de:70:40:0c:4e:7b:9b:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=c5a6daec-65a0-4b91-8b91-e041ebe5a523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:e5:fe:d8:2a:8f:8b:25:d0:a9:ac:8b:8d: 52:2f:6b:35:d3:0d:9e:f1:61:a0:d6:7c:50:ba:0a: e7:46:26:13:e8:d3:e9:87:d4:19:56:c3:f1:c2:eb: 71:60:cd:7c:69:32:d5:79:aa:01:a5:b6:fb:a1:38: 82:3d:75:8b:6d:46:37:98:67:d7:c4:d7:5c:08:8b: c3:9f:cc:f3:b7:cf:e1:4b:ef:30:2c:09:80:94:b9: f0:e2:cf:aa:79:20:4d:bf:92:ab:f7:86:1d:cb:29: bc:1b:0f:ba:0e:66:84:79:39:33:e1:c6:be:d3:9b: 18:5a:b0:0f:cc:4f:83:81:aa:fc:7a:10:77:3b:d1: f7:e3:49:23:fb:ca:c4:f3:35:b1:64:4b:b8:07:f4: 73:e6:c3:e1:d6:ad:e8:0c:78:a1:6a:1e:92:20:52: 2d:65:b5:f5:55:3b:48:e4:ae:65:0d:0c:03:19:3b: b4:e4:2c:9a:c9:07:7a:a1:c5:9d:be:b2:ce:c6:6a: f7:04:d7:a4:1a:bf:38:5d:45:64:f3:9e:a5:4c:d4: a5:2f:35:fd:6b:28:1e:cc:4b:8a:3d:f0:e9:f3:2a: 40:75:02:e3:b1:ff:5b:69:78:2e:ef:12:89:c9:eb: 07:33:6f:57:dc:dd:f9:ed:94:12:22:23:00:38:bb: f0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:43:FA:5B:2F:07:5B:A0:A0:3F:31:85:14:55:FD:B6:0F:BD:79:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f7b891-db77-3c9b-8c94-762cea3fa41e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 204.91.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:30:f8:15:94:c6:97:07:47:1b:1e:10:9c:86:70:34:d6:3b: 45:ad:bb:6f:18:64:a4:95:29:62:fd:f9:4f:66:9b:bb:c4:b8: 06:bb:79:a5:30:44:46:ee:f5:e2:a9:ed:b1:28:7b:f5:5f:e2: 03:30:50:d5:f0:4d:64:e9:a6:10:0e:01:b1:2b:b8:51:39:ce: f5:09:9e:5c:78:66:53:f9:73:6c:73:c1:f8:47:d3:cb:c7:c4: ff:2b:a7:78:06:fb:f6:94:5a:5a:dd:b5:76:d4:93:3f:ab:e7: 47:3c:3d:bd:23:f6:53:f0:cd:3d:45:64:fb:46:f6:2d:98:a3: 9c:91:a8:52:fc:67:bd:ac:4e:7d:61:2f:04:f9:39:e0:af:ce: 57:4e:76:f4:0c:36:77:64:43:24:2c:d4:e6:39:75:87:2c:c5: 20:0e:cb:58:08:7a:4b:29:95:84:57:dd:c4:2c:cd:f3:7c:0b: f4:b1:b4:97:cc:95:40:ee:86:17:4a:83:3a:97:86:7f:3c:13: 55:5e:de:78:d7:23:da:f9:76:f9:c1:4c:4f:94:f4:a7:42:9c: f7:b5:e7:23:14:6e:56:db:13:9a:0b:70:b8:93:ae:34:37:37: 46:f8:3e:3b:9c:c4:b0:94:70:97:6c:6c:66:36:f3:ae:75:b1: c6:53:8f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJUbecEAMTnubecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk YzVhNmRhZWMtNjVhMC00YjkxLThiOTEtZTA0MWViZTVhNTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ/l/tgqj4sl0Kmsi41SL2s10w2e8WGg1nxQ ugrnRiYT6NPph9QZVsPxwutxYM18aTLVeaoBpbb7oTiCPXWLbUY3mGfXxNdcCIvD n8zzt8/hS+8wLAmAlLnw4s+qeSBNv5Kr94Ydyym8Gw+6DmaEeTkz4ca+05sYWrAP zE+Dgar8ehB3O9H340kj+8rE8zWxZEu4B/Rz5sPh1q3oDHihah6SIFItZbX1VTtI 5K5lDQwDGTu05CyayQd6ocWdvrLOxmr3BNekGr84XUVk856lTNSlLzX9aygezEuK PfDp8ypAdQLjsf9baXgu7xKJyesHM29X3N357ZQSIiMAOLvwywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVD+lsvB1ugoD8xhRRV/bYPvXl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTRmN2I4OTEtZGI3Ny0z YzliLThjOTQtNzYyY2VhM2ZhNDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFsRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEw+BWUxpcHRxseEJyGcDTWO0Wtu28YZKSVKWL9+U9mm7vEuAa7eaUw REbu9eKp7bEoe/Vf4gMwUNXwTWTpphAOAbEruFE5zvUJnlx4ZlP5c2xzwfhH08vH xP8rp3gG+/aUWlrdtXbUkz+r50c8Pb0j9lPwzT1FZPtG9i2Yo5yRqFL8Z72sTn1h LwT5OeCvzldOdvQMNndkQyQs1OY5dYcsxSAOy1gIeksplYRX3cQszfN8C/SxtJfM lUDuhhdKgzqXhn88E1Ve3njXI9r5dvnBTE+U9KdCnPe15yMUblbbE5oLcLiTrjQ3 N0b4PjucxLCUcJdsbGY28651scZTj/0= -----END CERTIFICATE-----Generated at Mon Jun 16 13:14:32 2025 by rpki-client