$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf2551be-6012-3e11-9ced-4369f77997e6.roa File: cf2551be-6012-3e11-9ced-4369f77997e6.roa (raw, json) Hash identifier: PsEx5FZDy7d9sqDZWXfEkAWQU03BPAjyuP4FvjmDBTc= Subject key identifier: 55:46:15:BE:EB:2A:0E:87:91:D0:FA:55:E5:99:54:EC:77:88:D2:30 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA85269C32AD35CD63D13C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf2551be-6012-3e11-9ced-4369f77997e6.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 71.251.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:26:9c:32:ad:35:cd:63:d1:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=164f4c2b-2cc1-4f85-afe6-4f2011b1174a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:f1:86:d1:35:de:86:38:73:37:65:3a:8e: ff:6e:fe:93:51:d7:a4:27:6d:88:ae:a7:f4:33:2b: 56:a5:d6:36:54:53:a4:54:e2:d0:5b:7f:35:69:77: 8b:34:da:f4:38:c5:df:77:cd:b6:40:c8:a2:7f:95: 65:79:f0:a1:18:2f:ad:ce:77:cf:a4:15:f9:55:ec: 92:17:e5:b3:bb:6f:c6:96:6b:08:e1:4b:8c:26:77: 35:ec:7d:5f:3d:4d:94:86:f1:1a:59:bb:e9:85:8c: d6:6e:f2:67:cb:47:4d:e1:1c:78:57:b5:fb:2f:d2: cf:f6:b6:80:d4:55:3b:d8:89:84:0b:be:a9:48:ad: 96:6f:4d:fc:0a:6c:f4:ec:17:cf:86:da:da:d8:09: 0b:c4:22:20:cd:16:4f:02:11:31:d7:a2:39:ed:d7: 36:58:49:e4:92:6b:38:43:30:bd:57:02:5f:07:cd: cd:27:6d:20:db:e8:83:79:09:45:7c:e5:aa:a4:d3: 3a:7b:dd:2e:f4:22:d7:97:98:35:ce:50:b0:72:ea: dd:f0:82:8f:30:86:e2:43:24:44:bc:97:d0:c7:60: 05:a9:a9:3e:78:d1:4a:12:44:e1:d4:89:78:ba:bd: 14:80:5f:8a:b4:80:76:1a:e1:29:a2:6c:de:da:05: bd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:46:15:BE:EB:2A:0E:87:91:D0:FA:55:E5:99:54:EC:77:88:D2:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf2551be-6012-3e11-9ced-4369f77997e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.251.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:85:8a:66:60:1f:4c:d8:e9:8a:7a:6c:94:e8:34:0d:0c:ec: d3:0b:04:55:cc:3c:37:73:30:b4:44:64:f4:8d:b6:9a:4e:b3: 20:32:e7:a7:00:91:1f:c4:af:8c:1e:a2:6d:ad:9b:4b:3a:68: 18:38:85:87:3d:35:c4:91:1b:ab:3e:f3:82:48:03:21:33:e9: 7e:d1:0c:de:53:62:b3:74:e9:28:23:82:66:49:3b:b8:9c:e6: c9:f4:b3:12:56:a4:dd:a3:6a:85:cc:9c:fd:1b:8a:88:d1:84: 8a:6d:a5:84:2a:d4:10:bc:64:e2:0a:50:fb:db:54:92:3f:98: 8a:a4:ae:15:a5:55:9c:1b:c3:a6:ce:57:e0:36:e3:cc:7c:ea: be:1a:cf:a3:fa:f4:70:0e:a3:b6:1b:8a:94:c4:77:59:a7:96: 7e:2f:09:1a:aa:fe:f2:9e:27:5e:dc:b5:15:bf:b1:8a:a6:17: 0b:0c:4c:03:b1:1e:28:bc:26:3c:76:98:52:6f:a1:77:d1:a8: cd:6f:6c:39:27:f7:f9:71:82:c2:87:54:63:a3:9e:a8:43:ad: b1:43:b9:a6:da:37:88:72:72:29:fc:b0:49:13:e9:39:a1:9c: cd:2b:11:d0:29:06:fc:2f:67:09:97:2a:18:d4:75:e2:51:57: 22:3a:44:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSacMq01zWPRPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk MTY0ZjRjMmItMmNjMS00Zjg1LWFmZTYtNGYyMDExYjExNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWHxhtE13oY4czdlOo7/bv6TUdekJ22Irqf0 MytWpdY2VFOkVOLQW381aXeLNNr0OMXfd822QMiif5VlefChGC+tznfPpBX5VeyS F+Wzu2/GlmsI4UuMJnc17H1fPU2UhvEaWbvphYzWbvJny0dN4Rx4V7X7L9LP9raA 1FU72ImEC76pSK2Wb038Cmz07BfPhtra2AkLxCIgzRZPAhEx16I57dc2WEnkkms4 QzC9VwJfB83NJ20g2+iDeQlFfOWqpNM6e90u9CLXl5g1zlCwcurd8IKPMIbiQyRE vJfQx2AFqak+eNFKEkTh1Il4ur0UgF+KtIB2GuEpomze2gW9+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVGFb7rKg6HkdD6VeWZVOx3iNIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2YyNTUxYmUtNjAxMi0z ZTExLTljZWQtNDM2OWY3Nzk5N2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqFimZgH0zY6Yp6bJToNA0M7NMLBFXMPDdzMLREZPSNtppOsyAy56cA kR/Er4weom2tm0s6aBg4hYc9NcSRG6s+84JIAyEz6X7RDN5TYrN06SgjgmZJO7ic 5sn0sxJWpN2jaoXMnP0biojRhIptpYQq1BC8ZOIKUPvbVJI/mIqkrhWlVZwbw6bO V+A248x86r4az6P69HAOo7YbipTEd1mnln4vCRqq/vKeJ17ctRW/sYqmFwsMTAOx Hii8Jjx2mFJvoXfRqM1vbDkn9/lxgsKHVGOjnqhDrbFDuabaN4hycin8sEkT6Tmh nM0rEdApBvwvZwmXKhjUdeJRVyI6RCw= -----END CERTIFICATE-----Generated at Tue Jun 17 10:32:56 2025 by rpki-client