$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa File: da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa (raw, json) Hash identifier: MA727dWK1SMe+gTQkv1R+SvpFWM92kn914sKa6Jg82Y= Subject key identifier: 53:B5:27:3E:93:AC:38:B4:54:5E:39:B1:57:F5:70:6C:1F:00:73:56 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA853992BF69CD90AC5B4B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 71.255.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:39:92:bf:69:cd:90:ac:5b:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=41fb5495-6885-451c-bc3b-c8987e2b05b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:ea:94:5d:81:8c:a8:97:7f:87:71:7e:2a: 7a:99:90:23:18:ef:6a:31:bd:6b:18:9b:52:7b:d6: f2:d0:33:04:4d:60:99:bb:5b:e4:04:41:4d:ac:f2: a5:a7:68:6f:b5:13:50:fb:1f:09:f8:9b:d1:f6:e6: 6f:da:51:c3:67:06:41:55:3a:eb:bd:d0:e4:da:63: a5:59:ed:f2:7e:f1:6b:7d:98:d6:ea:80:a2:55:ad: 73:41:7e:2b:28:b9:ac:bc:e0:8a:62:09:f8:90:e3: 7d:5d:32:d1:fa:58:f1:f6:ce:79:04:e2:f7:e8:e4: a2:f1:c0:76:3c:5c:52:00:4e:14:4b:37:ad:50:41: 01:ab:fb:1b:69:76:3f:a8:52:a6:27:5a:53:94:9e: f7:8b:8a:35:74:a4:62:d2:3e:5f:05:09:65:fb:be: e3:9a:bc:5b:9c:34:8a:3c:05:ac:68:b5:59:12:65: a4:a5:27:8a:44:1e:ad:d3:df:20:b4:71:6a:50:55: 08:13:4f:89:b5:07:70:c3:da:3f:2c:da:30:bb:6c: ff:f3:25:8e:a0:57:bf:ad:d2:99:62:5c:d7:58:32: 2e:48:bb:0a:7c:5a:6b:76:30:f2:6e:9c:2d:59:84: e4:2b:17:1f:36:f4:87:2d:38:7e:27:1c:ca:d6:e1: 44:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B5:27:3E:93:AC:38:B4:54:5E:39:B1:57:F5:70:6C:1F:00:73:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.255.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:70:d8:6b:38:1d:59:e8:2c:cb:3d:2f:6e:9f:ff:7b:9d:b9: 84:9f:25:bc:ff:d3:4b:52:69:c2:ad:70:3e:f3:96:41:7b:dd: 7c:7c:38:f4:97:ac:ed:d7:73:26:13:6d:f2:8f:8c:0a:53:8c: f6:c9:cc:83:81:b4:f8:aa:4a:48:76:a2:9f:7a:f7:0c:93:8d: 7c:4c:9e:04:ae:c5:88:a9:c2:45:ff:1e:dc:07:f2:00:62:82: c1:0d:7d:cb:0e:71:bc:fb:6a:cd:3a:84:b9:2e:4f:30:de:2a: 9c:ad:c9:b5:cf:93:74:4c:14:89:86:da:f7:d0:22:df:42:95: 0b:d4:1a:37:c7:bb:96:ce:f5:bd:6e:34:f0:0e:41:2e:83:34: 33:fb:a6:27:4f:c8:03:19:7a:68:fe:2f:f7:0a:a9:14:41:f0: 09:99:a9:01:12:a4:48:3b:d4:15:e2:0d:cf:96:25:59:e6:60: 40:65:2e:6d:e0:f4:7e:34:ab:1e:de:cf:59:96:3d:ff:7f:97: 90:79:84:94:13:72:07:53:df:b9:54:c3:8f:4b:d9:c9:f9:59: b1:ad:14:54:16:bc:42:af:8c:2b:ea:38:20:83:cb:08:20:60: 2b:d0:6b:48:d9:7c:a1:a6:04:c3:d3:37:0b:3e:c4:99:42:fe: 08:03:8d:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTmSv2nNkKxbS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NDFmYjU0OTUtNjg4NS00NTFjLWJjM2ItYzg5ODdlMmIwNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE7qlF2BjKiXf4dxfip6mZAjGO9qMb1rGJtS e9by0DMETWCZu1vkBEFNrPKlp2hvtRNQ+x8J+JvR9uZv2lHDZwZBVTrrvdDk2mOl We3yfvFrfZjW6oCiVa1zQX4rKLmsvOCKYgn4kON9XTLR+ljx9s55BOL36OSi8cB2 PFxSAE4USzetUEEBq/sbaXY/qFKmJ1pTlJ73i4o1dKRi0j5fBQll+77jmrxbnDSK PAWsaLVZEmWkpSeKRB6t098gtHFqUFUIE0+JtQdww9o/LNowu2z/8yWOoFe/rdKZ YlzXWDIuSLsKfFprdjDybpwtWYTkKxcfNvSHLTh+JxzK1uFEkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFO1Jz6TrDi0VF45sVf1cGwfAHNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGE4ZGM2YzctMTMzMC0z YTJkLWE5YzMtMGUwNDk3MjljN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBw2Gs4HVnoLMs9L26f/3uduYSfJbz/00tSacKtcD7zlkF73Xx8OPSX rO3XcyYTbfKPjApTjPbJzIOBtPiqSkh2op969wyTjXxMngSuxYipwkX/HtwH8gBi gsENfcsOcbz7as06hLkuTzDeKpytybXPk3RMFImG2vfQIt9ClQvUGjfHu5bO9b1u NPAOQS6DNDP7pidPyAMZemj+L/cKqRRB8AmZqQESpEg71BXiDc+WJVnmYEBlLm3g 9H40qx7ez1mWPf9/l5B5hJQTcgdT37lUw49L2cn5WbGtFFQWvEKvjCvqOCCDywgg YCvQa0jZfKGmBMPTNws+xJlC/ggDjUM= -----END CERTIFICATE-----Generated at Mon Jun 16 12:56:38 2025 by rpki-client