$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1528e5b2-3347-3780-9ee5-b0c0983a2553.roa File: 1528e5b2-3347-3780-9ee5-b0c0983a2553.roa (raw, json) Hash identifier: 4+ty6IrPWdNyMKbht//UZ+8AODSylUqC18V/DAMiZ+4= Subject key identifier: 99:20:7C:7B:5B:37:25:C0:6E:10:E6:71:E4:78:1C:9C:3B:DB:4B:D0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA85279F50D5EC89C4369B58 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1528e5b2-3347-3780-9ee5-b0c0983a2553.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 71.127.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:27:9f:50:d5:ec:89:c4:36:9b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=7ca8e22c-c10e-4768-8f2f-35514356c369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:82:ac:a6:d7:08:a7:a0:cf:bb:d9:5d:27: 20:97:3b:42:72:3f:dc:80:af:12:d7:7a:ae:9f:3b: ba:22:86:6d:14:bd:df:d9:76:7d:4b:c8:2b:ea:52: 62:ee:27:fb:d2:27:ce:91:90:80:72:c0:95:80:3c: 6a:a9:4e:97:3d:63:2c:fb:e7:4c:a8:d3:ef:8d:9c: 43:e8:d7:ef:b8:a9:94:6b:0a:bf:14:8b:30:44:40: 77:43:bc:d4:cf:f7:e3:62:27:89:10:e1:4d:df:71: 72:46:6c:03:5a:53:25:45:db:e0:66:d7:17:20:e6: d7:3e:af:47:16:fe:cd:80:8d:18:71:76:be:ea:56: e0:55:5a:c5:73:ea:16:5a:00:21:04:b1:c6:04:f9: e8:dd:d0:9d:40:81:fb:6b:d3:71:36:1a:a7:11:58: 7c:5a:25:e7:75:04:a9:ba:0d:f8:72:45:4e:a7:2a: be:e2:35:b3:60:a4:0e:d5:3a:4f:f3:82:00:b0:fd: c1:39:9a:fa:fc:3b:a9:1d:d9:33:8f:46:02:84:cf: fa:7e:ad:c8:e5:25:5a:31:db:09:d9:ea:99:72:7d: d5:f5:35:e7:d7:0f:46:44:8c:c3:8f:ee:48:9d:6e: 2b:16:3a:db:4b:ae:26:c9:3c:6f:45:6b:94:c5:eb: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:20:7C:7B:5B:37:25:C0:6E:10:E6:71:E4:78:1C:9C:3B:DB:4B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1528e5b2-3347-3780-9ee5-b0c0983a2553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.127.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:69:7d:3e:e2:63:d3:76:c7:84:3d:4b:27:4d:87:53:c8:d2: 12:8e:00:19:b9:d1:2b:85:d9:c6:b0:04:13:fb:4b:e0:a6:e3: 53:5c:87:2d:d3:9f:4f:15:39:21:ed:65:72:a2:d0:ad:40:53: 30:44:3e:75:4d:59:df:63:ed:9d:d8:2a:57:55:e9:54:39:00: 17:4b:2a:2f:1a:32:41:7b:bc:09:87:ce:97:45:c1:fe:b3:7c: 1e:f4:83:27:6d:f6:f8:5b:62:a3:a8:23:ee:87:4c:bf:bb:0e: b2:84:51:f8:78:b0:29:11:89:ba:9f:52:6b:8a:33:b7:45:68: 2b:5b:18:9c:04:95:9d:a8:c5:71:67:88:04:5d:98:76:e2:0b: ab:45:f3:4d:eb:43:70:91:0d:d6:5d:78:93:85:67:87:89:d6: 2d:81:88:28:95:75:f5:5e:f0:53:07:92:b2:c7:0d:56:7e:78: 0e:6f:5c:a9:f6:25:e8:cb:2d:f4:ff:e8:d8:1a:e1:4a:86:16: 33:23:cc:3f:60:e2:6e:f5:9e:d3:52:89:b9:88:ad:81:f0:22: 83:bf:de:ee:e6:01:c2:c1:71:b3:76:d5:7f:2f:b9:a3:0d:6c: 76:6e:38:5b:4d:27:c5:ee:f2:c0:ad:17:77:09:3a:87:8c:29: 7b:b5:1e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSefUNXsicQ2m1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk N2NhOGUyMmMtYzEwZS00NzY4LThmMmYtMzU1MTQzNTZjMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNiCrKbXCKegz7vZXScglztCcj/cgK8S13qu nzu6IoZtFL3f2XZ9S8gr6lJi7if70ifOkZCAcsCVgDxqqU6XPWMs++dMqNPvjZxD 6NfvuKmUawq/FIswREB3Q7zUz/fjYieJEOFN33FyRmwDWlMlRdvgZtcXIObXPq9H Fv7NgI0YcXa+6lbgVVrFc+oWWgAhBLHGBPno3dCdQIH7a9NxNhqnEVh8WiXndQSp ug34ckVOpyq+4jWzYKQO1TpP84IAsP3BOZr6/DupHdkzj0YChM/6fq3I5SVaMdsJ 2eqZcn3V9TXn1w9GRIzDj+5InW4rFjrbS64myTxvRWuUxet9ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkgfHtbNyXAbhDmceR4HJw720vQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTUyOGU1YjItMzM0Ny0z NzgwLTllZTUtYjBjMDk4M2EyNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR3+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFpfT7iY9N2x4Q9SydNh1PI0hKOABm50SuF2cawBBP7S+Cm41Nchy3T n08VOSHtZXKi0K1AUzBEPnVNWd9j7Z3YKldV6VQ5ABdLKi8aMkF7vAmHzpdFwf6z fB70gydt9vhbYqOoI+6HTL+7DrKEUfh4sCkRibqfUmuKM7dFaCtbGJwElZ2oxXFn iARdmHbiC6tF803rQ3CRDdZdeJOFZ4eJ1i2BiCiVdfVe8FMHkrLHDVZ+eA5vXKn2 JejLLfT/6Nga4UqGFjMjzD9g4m71ntNSibmIrYHwIoO/3u7mAcLBcbN21X8vuaMN bHZuOFtNJ8Xu8sCtF3cJOoeMKXu1HnE= -----END CERTIFICATE-----Generated at Sun Jun 8 13:28:02 2025 by rpki-client