$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e19df3-2874-3b59-995c-406d3f301d2e.roa File: d9e19df3-2874-3b59-995c-406d3f301d2e.roa (raw, json) Hash identifier: keOpSJ2hLGY+jmnYeF13UUc0pBrsV1zclJQ4LSqWk1c= Subject key identifier: 68:5C:D2:1F:D6:CA:78:5E:3F:EC:2D:E7:FF:B9:1B:DD:8E:5C:0E:6F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA853AEF488A63C9281D9580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e19df3-2874-3b59-995c-406d3f301d2e.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 71.97.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:3a:ef:48:8a:63:c9:28:1d:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=290c7364-d476-43fd-9b23-fd41e07d563e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:50:4f:e0:8a:f3:e7:9f:f8:6e:cf:9a:97:74: 60:52:91:63:08:35:03:e8:ce:c5:bf:3d:db:ec:57: 1c:0a:b3:c5:58:54:8b:1e:87:92:ba:bc:04:17:9d: 5b:18:6c:df:6b:33:52:79:be:68:51:25:dd:83:fc: 34:a4:ca:2a:be:3a:3a:91:a5:9b:93:18:d3:26:4f: 06:23:d1:65:d5:d2:f2:5a:3b:b6:0d:4c:69:9c:78: 59:b6:81:ad:09:96:cd:c6:88:29:23:0d:77:cc:3e: 94:fb:d3:9b:de:ec:72:07:e1:57:d6:14:cd:55:b4: d0:06:5c:59:87:b4:55:f9:94:ee:16:85:01:37:91: b2:a5:b5:d5:b0:fc:a5:86:4c:ea:0b:31:fa:51:b9: 58:e5:2d:3b:4f:d1:1c:e4:b5:0f:d2:6c:68:c0:87: e8:0d:50:91:d5:f8:bc:1b:f5:59:19:e0:cf:bc:b1: dd:ae:9e:62:91:79:65:05:a7:00:6d:a8:b5:3d:c2: 0c:6e:48:ab:5c:48:a7:b6:06:e3:ee:fc:90:d8:48: 70:76:1e:23:a1:5e:e6:30:d4:2c:5e:1c:91:a0:fd: 4e:ce:0a:46:c9:a3:fe:7c:37:c6:63:42:ea:7d:e5: 85:30:51:14:e2:71:30:51:bb:80:26:e8:1e:54:c9: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5C:D2:1F:D6:CA:78:5E:3F:EC:2D:E7:FF:B9:1B:DD:8E:5C:0E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e19df3-2874-3b59-995c-406d3f301d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.97.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:71:ee:00:93:40:82:59:57:5d:9f:a5:c6:d6:29:de:d6:94: c3:74:06:12:09:b4:ed:f9:e3:d7:ae:b6:83:08:b5:16:2b:c0: 62:95:b0:3e:85:e4:45:ab:a3:4d:c8:63:d3:29:ad:c3:5e:0d: 84:97:0a:7a:a4:17:52:97:91:63:64:c6:57:a8:9c:1e:8e:e9: 3c:a1:b8:7b:ca:a5:65:eb:15:fc:52:9b:e5:38:3e:e6:0d:3f: ed:5e:ea:5f:b8:b5:6d:38:a8:a2:d3:af:a3:e2:a9:b9:bb:d3: 2f:8b:2c:09:aa:a4:8b:05:81:b9:16:04:2a:ad:6f:22:91:3e: 9b:28:8d:75:4d:f5:fe:e5:30:0a:b4:03:9c:cb:c0:18:66:8e: a5:f7:48:fa:a7:f8:b0:d6:6d:d9:57:fe:e2:f3:47:59:c7:fb: 36:b5:e7:14:1c:46:5e:8b:53:86:4a:4d:8f:99:f7:fb:84:a6: d6:bc:63:81:b7:b8:39:58:89:f1:78:2a:10:be:db:c1:2f:55: 0d:f4:8c:68:ff:06:1e:06:19:f7:5c:7a:6b:01:65:31:6b:c3: 3b:90:70:47:a4:17:52:12:61:65:44:c7:d9:a0:4f:c5:d6:3e: 4d:c4:84:8e:91:c6:b3:d7:bb:2e:dc:ae:e6:8e:3b:d9:54:a0: c7:c5:dc:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTrvSIpjySgdlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk MjkwYzczNjQtZDQ3Ni00M2ZkLTliMjMtZmQ0MWUwN2Q1NjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilBP4Irz55/4bs+al3RgUpFjCDUD6M7Fvz3b 7FccCrPFWFSLHoeSurwEF51bGGzfazNSeb5oUSXdg/w0pMoqvjo6kaWbkxjTJk8G I9Fl1dLyWju2DUxpnHhZtoGtCZbNxogpIw13zD6U+9Ob3uxyB+FX1hTNVbTQBlxZ h7RV+ZTuFoUBN5GypbXVsPylhkzqCzH6UblY5S07T9Ec5LUP0mxowIfoDVCR1fi8 G/VZGeDPvLHdrp5ikXllBacAbai1PcIMbkirXEintgbj7vyQ2Ehwdh4joV7mMNQs XhyRoP1OzgpGyaP+fDfGY0LqfeWFMFEU4nEwUbuAJugeVMlphwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhc0h/WynheP+wt5/+5G92OXA5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDllMTlkZjMtMjg3NC0z YjU5LTk5NWMtNDA2ZDNmMzAxZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR2GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZx7gCTQIJZV12fpcbWKd7WlMN0BhIJtO3549eutoMItRYrwGKVsD6F 5EWro03IY9MprcNeDYSXCnqkF1KXkWNkxleonB6O6TyhuHvKpWXrFfxSm+U4PuYN P+1e6l+4tW04qKLTr6Piqbm70y+LLAmqpIsFgbkWBCqtbyKRPpsojXVN9f7lMAq0 A5zLwBhmjqX3SPqn+LDWbdlX/uLzR1nH+za15xQcRl6LU4ZKTY+Z9/uEpta8Y4G3 uDlYifF4KhC+28EvVQ30jGj/Bh4GGfdcemsBZTFrwzuQcEekF1ISYWVEx9mgT8XW Pk3EhI6RxrPXuy7cruaOO9lUoMfF3NA= -----END CERTIFICATE-----Generated at Mon Jun 16 13:29:32 2025 by rpki-client