$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a358a7c-990d-3102-a452-644b23508594.roa File: 3a358a7c-990d-3102-a452-644b23508594.roa (raw, json) Hash identifier: IuPJLvG2K/qrbNDD7s/nJuyVIQQhW7+HHacCj3rNNJM= Subject key identifier: AC:A5:23:F3:77:E5:37:60:ED:B3:52:AA:33:65:45:23:BE:7C:83:41 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F1800333C94769FCBCCD9900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a358a7c-990d-3102-a452-644b23508594.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 71.244.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:03:33:c9:47:69:fc:bc:cd:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=08af0b9d-024e-4ad5-a8d4-644419d477f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:10:fe:bd:b4:fc:4d:96:ff:76:f6:2e:13: c9:59:bf:77:eb:7c:24:ef:ef:79:25:f7:37:10:2b: aa:2b:0a:d2:a0:5a:7a:cf:ef:e8:7c:58:d4:e2:c9: c7:2c:69:2d:e5:fe:37:0d:b1:b3:a4:a1:97:76:4a: 27:18:23:e5:ec:79:7d:9a:14:db:05:c1:ff:19:fe: 9f:b2:f8:69:29:f8:f6:b9:9d:f0:1d:c8:3d:1c:4f: 22:e1:15:18:35:6f:d7:92:9d:c2:13:2b:ff:8b:11: d4:ac:ef:4b:a2:85:21:0c:62:8d:f6:26:d6:1a:5a: c9:54:fb:c8:2e:5d:da:37:d5:75:a2:b8:a9:da:62: 65:db:cc:4e:d8:56:72:2e:27:08:cb:1c:ce:55:be: e1:63:ab:29:8b:73:f6:1f:0c:91:9a:50:b5:8a:9a: 6a:84:4f:82:86:06:3a:3a:22:8f:f4:ee:a2:e6:04: 64:e5:90:87:ee:6c:4b:ff:6d:17:88:0e:b9:c9:c3: e1:c9:78:c2:d7:1a:4a:0f:ba:6d:33:f7:de:75:3a: 88:3a:14:fe:8e:42:b2:b9:64:c7:23:d1:6c:13:98: 3c:0a:4b:09:54:0d:72:3e:de:f5:ff:69:f7:9b:b7: 66:45:06:f9:1f:a0:41:8e:1d:b9:08:a0:54:41:86: 37:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A5:23:F3:77:E5:37:60:ED:B3:52:AA:33:65:45:23:BE:7C:83:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a358a7c-990d-3102-a452-644b23508594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.244.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d5:66:06:74:80:9c:be:73:3c:d2:d9:36:4f:34:3f:c9:4b: 3e:36:fc:df:27:a9:a1:6c:2e:8d:f4:d9:c1:22:8d:c4:d6:20: a0:8b:fc:98:3b:c2:34:23:71:73:44:04:ed:a3:8f:d4:2f:37: e6:70:63:2a:3d:5d:68:ca:5a:93:0a:8a:30:55:17:41:e1:83: ed:f6:57:eb:7a:76:22:ac:8f:d7:a7:bb:3b:3b:80:fd:45:af: 7e:82:04:52:2c:81:f3:d1:ae:c4:0f:f7:ba:0e:47:8f:ea:30: 2c:cd:43:19:4c:a2:c0:c6:7a:78:9b:38:0a:fb:65:12:12:58: c1:de:d6:fa:3f:3e:42:b3:2e:7f:f6:48:74:2d:28:25:d9:6c: 7d:2e:85:55:24:c1:21:46:ac:17:4b:e1:f7:88:d2:36:70:aa: 27:21:64:56:90:1d:63:b9:67:c9:f8:76:d5:cb:b9:94:48:86: e3:b6:4b:31:ca:e2:8a:5c:a5:32:75:1b:87:e6:c8:38:c2:7c: de:1d:c7:be:e0:db:06:04:3a:e8:ec:c6:9d:df:19:4a:9e:a2: dc:e5:d5:a4:bd:1e:25:02:5b:ec:bb:4e:dd:81:b0:f1:52:ad: 6c:2e:68:1c:cf:4f:ff:22:df:f5:0c:dd:17:2c:fb:68:c9:8e: 76:7d:36:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAMzyUdp/LzNmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MDhhZjBiOWQtMDI0ZS00YWQ1LWE4ZDQtNjQ0NDE5ZDQ3N2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdMQ/r20/E2W/3b2LhPJWb9363wk7+95Jfc3 ECuqKwrSoFp6z+/ofFjU4snHLGkt5f43DbGzpKGXdkonGCPl7Hl9mhTbBcH/Gf6f svhpKfj2uZ3wHcg9HE8i4RUYNW/Xkp3CEyv/ixHUrO9LooUhDGKN9ibWGlrJVPvI Ll3aN9V1orip2mJl28xO2FZyLicIyxzOVb7hY6spi3P2HwyRmlC1ippqhE+ChgY6 OiKP9O6i5gRk5ZCH7mxL/20XiA65ycPhyXjC1xpKD7ptM/fedTqIOhT+jkKyuWTH I9FsE5g8CksJVA1yPt71/2n3m7dmRQb5H6BBjh25CKBUQYY3lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKylI/N35Tdg7bNSqjNlRSO+fINBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2EzNThhN2MtOTkwZC0z MTAyLWE0NTItNjQ0YjIzNTA4NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnVZgZ0gJy+czzS2TZPND/JSz42/N8nqaFsLo302cEijcTWIKCL/Jg7 wjQjcXNEBO2jj9QvN+ZwYyo9XWjKWpMKijBVF0Hhg+32V+t6diKsj9enuzs7gP1F r36CBFIsgfPRrsQP97oOR4/qMCzNQxlMosDGenibOAr7ZRISWMHe1vo/PkKzLn/2 SHQtKCXZbH0uhVUkwSFGrBdL4feI0jZwqichZFaQHWO5Z8n4dtXLuZRIhuO2SzHK 4opcpTJ1G4fmyDjCfN4dx77g2wYEOujsxp3fGUqeotzl1aS9HiUCW+y7Tt2BsPFS rWwuaBzPT/8i3/UM3Rcs+2jJjnZ9Np4= -----END CERTIFICATE-----Generated at Mon Jun 16 20:06:46 2025 by rpki-client