$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6857ebbd-2001-3ebb-b8bb-9eb0f2332a48.roa File: 6857ebbd-2001-3ebb-b8bb-9eb0f2332a48.roa (raw, json) Hash identifier: RMqZpQaRrf2VM1uzPSRNW4McSAtxQ6E0KFfjI8AHrKM= Subject key identifier: 96:70:A1:D7:1A:B3:C4:03:7A:A4:F4:46:7D:98:D2:6F:BB:36:50:9B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F18007C484587E527D94F520 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6857ebbd-2001-3ebb-b8bb-9eb0f2332a48.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 70.22.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:07:c4:84:58:7e:52:7d:94:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=c36e1e1e-5177-4d96-bbbe-db171162291f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e6:f6:0d:7f:c0:96:fa:02:2b:0a:4f:52:56: ae:fa:d0:7b:73:38:6c:4b:07:da:ef:5d:96:49:f3: 17:42:d6:90:37:de:a0:00:65:57:bb:a6:5e:37:ed: 8b:7b:2f:38:70:92:06:cb:c2:59:85:eb:6e:dc:94: 6d:c4:b6:7a:9c:fb:3e:4c:1b:73:47:26:eb:ff:1e: 8e:12:7c:d9:7b:de:44:b1:e7:1c:fb:3f:5c:cb:48: 13:38:7c:0d:72:85:32:94:03:de:bc:18:6b:02:8d: 26:5c:a3:84:9b:81:2d:28:1f:94:00:43:60:d0:b3: da:4d:0f:f2:16:29:5e:16:75:97:4d:10:15:f9:4b: a0:9d:e5:1d:9f:6e:58:50:7d:cd:7c:32:6e:3b:b6: c3:88:0e:3f:56:6b:0e:c4:86:77:f8:a5:b9:31:30: 0e:d3:8b:43:d7:75:17:88:50:dd:3a:9c:98:d3:ef: 15:fa:b3:c1:66:d3:3e:ed:dc:e0:9a:1e:3a:06:db: b4:9d:db:2a:22:eb:d3:6f:b8:09:b7:bf:63:24:4e: c3:0a:f2:23:96:ee:bf:60:88:7b:a5:1a:ae:06:e8: cb:45:fb:06:93:31:0b:84:09:15:a0:f2:8e:be:39: 49:7e:3f:4f:d3:21:0e:79:59:c8:66:0d:d5:f7:5b: d3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:70:A1:D7:1A:B3:C4:03:7A:A4:F4:46:7D:98:D2:6F:BB:36:50:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6857ebbd-2001-3ebb-b8bb-9eb0f2332a48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.22.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:51:ae:e9:4c:55:bd:e6:45:24:c3:64:3b:fd:c7:c2:35:3f: 2c:f9:c9:7f:84:5d:16:37:fc:6a:b1:d5:6d:d0:e5:a8:a7:79: c9:70:28:f1:b9:58:cd:ad:a5:b9:e4:e8:4c:05:f7:7e:94:85: 58:d1:40:f9:2a:c6:c2:f3:47:7e:a3:7c:77:07:16:87:19:4f: 58:7b:d7:5a:3a:8b:47:e0:69:fe:bf:9b:20:3c:b2:0c:11:82: fc:39:bc:2c:d3:a1:c1:7d:b3:7a:1d:a8:41:c1:39:b2:c0:42: ed:4d:ef:13:5c:9e:57:a7:26:8c:75:a8:5e:fb:af:79:32:18: 58:08:d0:a7:0a:a8:af:3e:5d:1c:0e:d6:18:aa:50:86:05:94: df:dd:37:27:26:99:bc:ff:88:68:19:a0:53:44:d2:ee:ee:e3: 0b:08:7d:dd:10:a1:8d:30:5c:e2:4e:51:99:6c:a3:6b:2b:06: 72:81:14:af:98:9a:e4:bf:10:24:34:16:cd:fa:c4:a4:22:3f: 49:d5:7d:34:9f:bf:9f:13:8c:ad:e7:e4:e5:97:22:09:03:e0: 27:e0:46:cd:fe:72:fb:a8:0a:2e:d2:a9:d6:84:26:d3:99:38: ce:08:44:9e:15:66:b7:c9:dc:9f:f5:64:ca:3f:8e:d9:7f:1c: 0b:d4:76:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAfEhFh+Un2U9SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk YzM2ZTFlMWUtNTE3Ny00ZDk2LWJiYmUtZGIxNzExNjIyOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ob2DX/AlvoCKwpPUlau+tB7czhsSwfa712W SfMXQtaQN96gAGVXu6ZeN+2Ley84cJIGy8JZhetu3JRtxLZ6nPs+TBtzRybr/x6O EnzZe95Esecc+z9cy0gTOHwNcoUylAPevBhrAo0mXKOEm4EtKB+UAENg0LPaTQ/y FileFnWXTRAV+UugneUdn25YUH3NfDJuO7bDiA4/VmsOxIZ3+KW5MTAO04tD13UX iFDdOpyY0+8V+rPBZtM+7dzgmh46Btu0ndsqIuvTb7gJt79jJE7DCvIjlu6/YIh7 pRquBujLRfsGkzELhAkVoPKOvjlJfj9P0yEOeVnIZg3V91vT8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZwodcas8QDeqT0Rn2Y0m+7NlCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjg1N2ViYmQtMjAwMS0z ZWJiLWI4YmItOWViMGYyMzMyYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxRrulMVb3mRSTDZDv9x8I1Pyz5yX+EXRY3/Gqx1W3Q5aineclwKPG5 WM2tpbnk6EwF936UhVjRQPkqxsLzR36jfHcHFocZT1h711o6i0fgaf6/myA8sgwR gvw5vCzTocF9s3odqEHBObLAQu1N7xNcnlenJox1qF77r3kyGFgI0KcKqK8+XRwO 1hiqUIYFlN/dNycmmbz/iGgZoFNE0u7u4wsIfd0QoY0wXOJOUZlso2srBnKBFK+Y muS/ECQ0Fs36xKQiP0nVfTSfv58TjK3n5OWXIgkD4CfgRs3+cvuoCi7SqdaEJtOZ OM4IRJ4VZrfJ3J/1ZMo/jtl/HAvUdj8= -----END CERTIFICATE-----Generated at Tue Jun 17 14:43:05 2025 by rpki-client