$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa File: d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa (raw, json) Hash identifier: khYqcQJY9x+efe4G6wMTlls+luPhAab8+85Kml413F4= Subject key identifier: 69:05:1A:17:01:66:56:3B:2D:0F:3D:88:5D:F5:80:13:D8:B2:3F:42 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F17FDD9FA0096D551D757AA0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 173.67.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:dd:9f:a0:09:6d:55:1d:75:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=747d08e9-8e95-4965-9ff3-6ed215af4d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b1:f6:4b:c1:82:2d:9e:77:f6:30:a5:ee:ba: e9:b1:27:1e:cf:9e:8e:41:4d:ed:e4:58:75:59:94: 11:81:a9:48:01:d5:ce:a9:a1:44:24:e5:34:06:c6: 2d:92:43:92:ea:df:94:1b:07:d5:9a:44:5f:c3:a2: 43:b0:31:25:cd:74:11:ad:b8:d6:1d:62:0a:9a:50: 9e:07:67:9a:b7:c2:e8:51:8a:40:52:92:44:05:ac: 0c:c5:b4:4e:cb:9b:41:4f:4e:a4:15:e5:38:cb:67: 80:1f:34:c5:38:1e:25:71:59:99:5e:08:06:d8:2c: c2:2e:92:c0:a0:37:ef:e8:a6:ad:73:b9:63:67:90: 69:bf:bd:8b:ec:f8:8c:ff:2d:76:01:ce:31:8e:11: 19:b9:aa:64:62:fb:07:cd:df:cc:7c:a2:be:b7:ec: f6:68:0c:13:0a:df:a7:56:40:ed:70:76:a7:d5:e4: f3:7f:16:6f:2b:70:52:45:3f:8c:97:dd:65:bc:da: 4e:2e:0e:64:c2:f7:9c:2c:23:4f:d4:29:68:a9:5f: d8:9f:96:b0:8c:95:d0:ec:f9:66:d9:d2:28:71:29: 9b:5a:8c:05:f7:07:63:a8:bd:e6:36:10:aa:93:35: 37:59:5c:df:d7:86:db:48:e9:f0:62:ce:71:13:c6: fb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:05:1A:17:01:66:56:3B:2D:0F:3D:88:5D:F5:80:13:D8:B2:3F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.67.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a3:0c:a3:cf:4d:71:49:24:48:79:6c:61:11:36:48:fe:cd: d6:d1:91:06:0e:5a:c1:6c:81:ca:c2:6d:90:d0:61:3f:20:5d: 0a:75:8d:90:27:ac:39:da:01:5e:0c:d1:57:37:76:c5:fd:73: 05:39:be:6f:01:1d:58:dc:4e:da:77:79:4c:1b:9c:66:72:a4: a3:29:5d:3e:f8:11:43:13:c1:ec:9c:ce:65:27:d3:63:43:6a: b6:21:d7:b2:04:c4:b7:d0:13:68:cf:8d:25:4f:87:15:a4:31: c7:ae:7a:a1:99:de:5b:9a:a3:fc:2a:e0:b8:7c:07:6d:9a:ab: 75:4c:35:97:ad:72:91:35:43:b2:a0:7f:e8:22:3b:90:a8:1f: 09:c4:57:87:b0:c9:5d:0a:3a:c5:b6:da:7c:a1:b6:b1:38:ac: 6b:31:98:fc:9d:0a:22:b0:3b:ed:2b:0b:90:1e:d5:f4:79:96: 40:2b:b5:50:a5:2a:9a:c6:d7:ea:aa:a3:91:a0:d9:be:b0:39: 13:3a:2a:c6:08:20:3c:96:ae:54:01:2c:b0:d4:e3:b0:29:25: 89:a7:a9:61:cf:b7:d6:55:72:6d:94:ef:59:b0:14:c2:16:de: 83:50:82:b0:a6:88:42:8e:ab:82:b1:1a:92:a9:be:d6:8a:2b: f0:f4:2d:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf92foAltVR11eqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NzQ3ZDA4ZTktOGU5NS00OTY1LTlmZjMtNmVkMjE1YWY0ZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7H2S8GCLZ539jCl7rrpsScez56OQU3t5Fh1 WZQRgalIAdXOqaFEJOU0BsYtkkOS6t+UGwfVmkRfw6JDsDElzXQRrbjWHWIKmlCe B2eat8LoUYpAUpJEBawMxbROy5tBT06kFeU4y2eAHzTFOB4lcVmZXggG2CzCLpLA oDfv6Katc7ljZ5Bpv72L7PiM/y12Ac4xjhEZuapkYvsHzd/MfKK+t+z2aAwTCt+n VkDtcHan1eTzfxZvK3BSRT+Ml91lvNpOLg5kwvecLCNP1CloqV/Yn5awjJXQ7Plm 2dIocSmbWowF9wdjqL3mNhCqkzU3WVzf14bbSOnwYs5xE8b7nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkFGhcBZlY7LQ89iF31gBPYsj9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDNlZmZkOWYtMGE4ZC0z ZmUzLTljZWYtNzYwY2VhZWU2N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErUPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqjDKPPTXFJJEh5bGERNkj+zdbRkQYOWsFsgcrCbZDQYT8gXQp1jZAn rDnaAV4M0Vc3dsX9cwU5vm8BHVjcTtp3eUwbnGZypKMpXT74EUMTweyczmUn02ND arYh17IExLfQE2jPjSVPhxWkMceueqGZ3luao/wq4Lh8B22aq3VMNZetcpE1Q7Kg f+giO5CoHwnEV4ewyV0KOsW22nyhtrE4rGsxmPydCiKwO+0rC5Ae1fR5lkArtVCl KprG1+qqo5Gg2b6wORM6KsYIIDyWrlQBLLDU47ApJYmnqWHPt9ZVcm2U71mwFMIW 3oNQgrCmiEKOq4KxGpKpvtaKK/D0Lbg= -----END CERTIFICATE-----Generated at Mon Jun 16 13:29:27 2025 by rpki-client