$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af8fbb5b-c77e-30b4-8d00-9ead956f54d3.roa File: af8fbb5b-c77e-30b4-8d00-9ead956f54d3.roa (raw, json) Hash identifier: 3GoxDU/lwUEC70I5PQlOeOATNv3WIyTIZdTHaGHGNrg= Subject key identifier: 1A:41:0B:C0:FA:6E:A1:D7:96:C3:6F:85:70:A0:7D:DC:51:B1:5E:8E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CD34C456628D2F7B20B48DD0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af8fbb5b-c77e-30b4-8d00-9ead956f54d3.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 208.214.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:c4:56:62:8d:2f:7b:20:b4:8d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=833e8ba5-0584-474d-a7be-8c7903f16a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c0:a5:b7:7b:18:2e:f1:d6:41:0b:cd:06:88: 39:a9:cf:d5:a6:4a:cb:2f:2b:f6:b4:97:75:b3:d0: 42:60:9e:c7:b2:e0:1a:0b:6b:77:fd:2a:8d:e8:82: b4:d6:d9:00:82:8e:cd:ae:f9:c9:17:03:ef:84:e5: a0:80:4d:a7:83:30:fc:49:2c:e4:97:97:04:e9:2c: c4:2a:89:4b:e6:28:d0:8b:c0:60:74:dd:cd:e3:d2: 92:d0:20:41:2b:5e:1b:68:4b:0c:02:fb:7c:b3:c7: 9f:14:0b:61:ef:4f:c8:0f:d8:37:ab:18:00:b9:29: e2:9b:c9:40:ed:c5:7b:01:54:47:c2:33:3e:0d:39: 52:0d:bb:8c:c5:63:91:13:50:aa:63:a5:3b:2e:6d: ef:68:f8:3d:6d:c2:70:54:43:1c:d1:b8:30:dc:f5: f7:dd:17:78:ba:a2:f5:05:e6:17:8f:53:33:72:1f: 20:bf:0f:93:ef:bf:f9:36:fb:87:ea:a8:78:b8:6d: 28:8c:bd:e7:fb:97:04:54:1b:f3:ae:99:07:a9:35: 1a:af:6d:25:af:ae:9d:1b:03:3b:bf:e9:23:5a:d6: 38:56:4d:89:1f:03:3d:cc:f9:ca:a6:0a:93:1f:3c: 37:28:71:a6:9d:c9:1f:49:35:08:6a:dd:4b:bf:14: bf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:41:0B:C0:FA:6E:A1:D7:96:C3:6F:85:70:A0:7D:DC:51:B1:5E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af8fbb5b-c77e-30b4-8d00-9ead956f54d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.214.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:78:8a:ac:2c:08:ec:d3:55:f5:ce:5a:6c:8e:93:3e:b3:f0: 51:fa:0b:26:d5:8b:05:22:46:1e:fd:e7:3b:69:ee:d3:3a:d3: 4f:13:77:3e:b4:b0:d3:ab:33:f4:e2:66:d2:ee:c4:f5:4d:69: c5:d6:27:5a:21:1a:e2:53:94:44:ee:bc:81:26:21:83:28:82: a7:d0:65:68:15:a4:db:16:2a:16:c6:e7:84:69:c5:eb:d4:77: 54:18:6c:2a:3e:9a:42:9f:54:59:61:33:ab:64:95:0b:39:6d: 5d:37:88:6d:a9:00:ea:d6:ee:09:9f:0a:1c:15:32:df:27:f0: 1b:6e:ee:fb:ea:fc:53:dc:6a:b7:de:d9:d2:4f:15:2f:52:13: 1e:16:31:c9:e3:b5:87:8b:0a:70:44:c0:59:b1:3c:bf:dc:bc: 15:b4:55:6c:b8:58:14:ed:1d:24:b8:b5:8b:5e:3e:4e:a9:cd: a9:46:4c:1f:ca:bf:af:61:01:07:bd:ac:c8:0a:56:18:a7:c0: cf:fd:6d:80:06:66:8a:88:47:d7:ce:44:5b:df:7b:14:23:11: 2c:fb:6b:1c:7e:48:4c:69:6e:2a:b1:0b:5e:c8:3a:a7:25:2a: af:67:95:f6:60:ee:cd:84:a4:85:83:5f:e7:57:f2:a1:ca:36: ca:ec:78:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNMRWYo0veyC0jdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk ODMzZThiYTUtMDU4NC00NzRkLWE3YmUtOGM3OTAzZjE2YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8Clt3sYLvHWQQvNBog5qc/VpkrLLyv2tJd1 s9BCYJ7HsuAaC2t3/SqN6IK01tkAgo7NrvnJFwPvhOWggE2ngzD8SSzkl5cE6SzE KolL5ijQi8BgdN3N49KS0CBBK14baEsMAvt8s8efFAth70/ID9g3qxgAuSnim8lA 7cV7AVRHwjM+DTlSDbuMxWORE1CqY6U7Lm3vaPg9bcJwVEMc0bgw3PX33Rd4uqL1 BeYXj1Mzch8gvw+T77/5NvuH6qh4uG0ojL3n+5cEVBvzrpkHqTUar20lr66dGwM7 v+kjWtY4Vk2JHwM9zPnKpgqTHzw3KHGmnckfSTUIat1LvxS/ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpBC8D6bqHXlsNvhXCgfdxRsV6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWY4ZmJiNWItYzc3ZS0z MGI0LThkMDAtOWVhZDk1NmY1NGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF4iqwsCOzTVfXOWmyOkz6z8FH6CybViwUiRh795ztp7tM6008Tdz60 sNOrM/TiZtLuxPVNacXWJ1ohGuJTlETuvIEmIYMogqfQZWgVpNsWKhbG54RpxevU d1QYbCo+mkKfVFlhM6tklQs5bV03iG2pAOrW7gmfChwVMt8n8Btu7vvq/FPcarfe 2dJPFS9SEx4WMcnjtYeLCnBEwFmxPL/cvBW0VWy4WBTtHSS4tYtePk6pzalGTB/K v69hAQe9rMgKVhinwM/9bYAGZoqIR9fORFvfexQjESz7axx+SExpbiqxC17IOqcl Kq9nlfZg7s2EpIWDX+dX8qHKNsrseEU= -----END CERTIFICATE-----Generated at Sun Jun 15 13:16:55 2025 by rpki-client