$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36e416e4-6e22-3138-957a-981ea05e6fb0.roa File: 36e416e4-6e22-3138-957a-981ea05e6fb0.roa (raw, json) Hash identifier: TMmj7faaLwjI6UGT/HfFySqd/0+xYbHV02CiqYkBQik= Subject key identifier: F7:23:DC:31:75:95:9F:A2:AB:77:93:EB:10:E2:47:A1:04:9A:17:AE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CD34C2C4B47D56ABB5426CC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36e416e4-6e22-3138-957a-981ea05e6fb0.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 208.213.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:c2:c4:b4:7d:56:ab:b5:42:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=468b3217-731e-4dc1-b1f2-4c9957704b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:74:1b:17:f0:07:d8:d1:dc:cf:4d:90:64: fa:51:11:c7:2c:b8:fb:01:92:95:f5:72:31:2f:69: ca:61:dc:12:7c:41:fd:7b:ab:70:dd:fb:8d:2e:cb: 67:d0:4d:0e:47:1a:2d:1a:42:80:20:1e:1b:97:5a: ce:f3:01:48:ce:8d:3e:42:bb:12:e1:0e:8a:46:19: ee:62:57:77:96:19:3d:1b:37:6b:07:f3:72:c7:82: ee:5c:df:32:34:d9:17:1c:ae:8f:2a:71:f1:02:0b: 9c:80:f4:bb:70:9c:61:d9:80:41:df:da:28:ff:47: 3a:f8:c9:06:ae:bb:ab:39:af:42:bc:5a:54:8f:6f: 8b:2a:87:82:cb:e5:af:fc:c7:db:89:93:de:8e:06: c3:92:8d:a6:c6:5e:7c:93:08:ab:f8:f2:83:05:a7: 78:8b:32:e1:f1:2b:e4:c9:b9:40:43:50:56:2c:78: 34:c5:72:2e:42:5f:14:43:71:ce:06:85:8e:88:4d: 3a:42:b6:c4:17:8c:c7:c2:9c:ce:16:e6:03:74:6f: 1b:96:e8:90:ab:a3:75:15:37:62:53:f4:a0:29:4b: c4:b1:40:0e:68:38:93:20:ba:fb:64:61:d0:ca:47: bf:f2:b6:ad:f1:fc:6c:70:c1:15:1f:56:c8:0d:f6: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:23:DC:31:75:95:9F:A2:AB:77:93:EB:10:E2:47:A1:04:9A:17:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36e416e4-6e22-3138-957a-981ea05e6fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.213.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:20:1c:2b:4d:09:b7:9e:23:26:13:4b:0a:48:90:77:85:52: b5:a5:93:de:c6:ab:57:2f:be:d4:c2:0d:7d:af:7b:24:a0:eb: 31:be:5f:53:52:eb:f3:24:b5:a3:95:fa:cf:b0:29:6c:91:b4: 31:34:4c:48:ff:bd:68:00:c2:ac:33:5f:b6:77:12:7e:96:1f: 39:a9:e5:61:bf:bf:cb:93:87:0a:ff:43:26:2c:ad:9c:16:bc: db:51:73:0b:de:40:4f:33:65:49:ae:3a:9b:73:2d:c2:a2:00: f5:1e:fb:68:13:79:31:cd:f6:39:85:da:4d:2d:57:2c:a3:20: f3:ae:34:8d:1b:d8:8c:da:62:58:65:8c:81:67:4e:84:6b:58: 8a:5c:52:ef:8a:0b:0e:c7:0c:c1:74:e7:22:67:a9:84:e0:b3: ba:e3:ed:bf:3d:07:56:59:78:8e:57:cd:5b:99:c1:62:9e:ef: cf:0e:a0:da:98:5e:90:24:bd:b2:ba:f3:b3:2b:6e:fd:08:42: fe:cc:01:12:08:0c:01:a4:67:68:1c:4c:db:ce:ee:c4:b2:aa: bb:b1:98:b2:15:80:8a:38:d1:31:26:98:04:52:c6:96:e8:4a: 77:90:3e:b0:3c:2b:f3:95:ac:2b:f6:a4:c7:3b:46:49:3b:dc: 98:f2:eb:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNMLEtH1Wq7VCbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk NDY4YjMyMTctNzMxZS00ZGMxLWIxZjItNGM5OTU3NzA0YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+p0GxfwB9jR3M9NkGT6URHHLLj7AZKV9XIx L2nKYdwSfEH9e6tw3fuNLstn0E0ORxotGkKAIB4bl1rO8wFIzo0+QrsS4Q6KRhnu Yld3lhk9GzdrB/Nyx4LuXN8yNNkXHK6PKnHxAgucgPS7cJxh2YBB39oo/0c6+MkG rrurOa9CvFpUj2+LKoeCy+Wv/MfbiZPejgbDko2mxl58kwir+PKDBad4izLh8Svk yblAQ1BWLHg0xXIuQl8UQ3HOBoWOiE06QrbEF4zHwpzOFuYDdG8bluiQq6N1FTdi U/SgKUvEsUAOaDiTILr7ZGHQyke/8rat8fxscMEVH1bIDfYIMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcj3DF1lZ+iq3eT6xDiR6EEmheuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzZlNDE2ZTQtNmUyMi0z MTM4LTk1N2EtOTgxZWEwNWU2ZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NWyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8gHCtNCbeeIyYTSwpIkHeFUrWlk97Gq1cvvtTCDX2veySg6zG+X1NS 6/MktaOV+s+wKWyRtDE0TEj/vWgAwqwzX7Z3En6WHzmp5WG/v8uThwr/QyYsrZwW vNtRcwveQE8zZUmuOptzLcKiAPUe+2gTeTHN9jmF2k0tVyyjIPOuNI0b2IzaYlhl jIFnToRrWIpcUu+KCw7HDMF05yJnqYTgs7rj7b89B1ZZeI5XzVuZwWKe788OoNqY XpAkvbK687Mrbv0IQv7MARIIDAGkZ2gcTNvO7sSyqruxmLIVgIo40TEmmARSxpbo SneQPrA8K/OVrCv2pMc7Rkk73Jjy6z8= -----END CERTIFICATE-----Generated at Sat Jun 14 06:39:41 2025 by rpki-client