$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27d1fec6-ea7f-3753-8a56-1c5343a3cd60.roa File: 27d1fec6-ea7f-3753-8a56-1c5343a3cd60.roa (raw, json) Hash identifier: gCpcSg2e6Nx/cGLuHzhzUA6YO/yf2ImXJT7bPfFDv1A= Subject key identifier: 65:E0:0B:FD:A2:CC:31:36:78:AB:48:00:7D:12:F0:E5:29:EE:94:19 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B08DBD40557336736F9E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27d1fec6-ea7f-3753-8a56-1c5343a3cd60.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 701 IP address blocks: 209.212.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:08:db:d4:05:57:33:67:36:f9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=c434d0fc-2e23-46cf-904d-a2abe749d3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:80:50:f7:cb:a6:12:17:26:c1:41:c1:28: 92:30:80:76:e1:cc:ad:d0:1d:21:47:b7:12:41:07: b6:7d:2a:10:01:f5:ef:fc:bc:26:4e:ae:c8:90:6a: b8:ba:0b:3a:53:ec:a8:34:e6:38:e3:0c:8d:2d:9c: 3b:d3:82:ad:a1:89:1b:89:30:0d:1c:e9:b8:5c:b6: d1:79:f5:58:4e:ad:ce:e8:2d:0c:f8:c8:18:75:09: d9:f9:59:fa:a5:82:94:e4:c0:9a:a2:12:c1:a9:d0: 3e:97:9b:ac:d6:a1:23:13:c9:00:7c:8d:04:d2:b1: 13:97:b3:30:8d:07:95:07:4a:01:3c:49:0a:70:de: 69:c2:02:30:0b:28:2b:14:95:87:6c:27:48:68:33: f3:04:c4:9a:dd:48:af:0f:bc:22:9e:80:93:51:54: 32:7e:2f:b0:2c:22:3b:9b:97:17:32:57:5b:8d:57: 8b:c0:71:57:f9:a5:37:4d:93:34:f1:a3:f4:90:09: 62:cd:63:2a:63:41:03:52:19:52:21:a0:b4:1d:be: 84:f9:29:42:77:75:29:e7:b1:f9:a3:57:10:7b:2c: 1f:27:c2:02:70:96:48:d8:f1:9a:ae:9b:c8:00:30: b3:09:23:fb:e9:c3:00:eb:e5:ef:95:b3:91:99:40: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E0:0B:FD:A2:CC:31:36:78:AB:48:00:7D:12:F0:E5:29:EE:94:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27d1fec6-ea7f-3753-8a56-1c5343a3cd60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.212.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ea:dc:2a:bd:ea:26:2a:94:23:c8:48:70:45:e4:24:29:63: 90:01:43:af:8a:94:29:17:ab:e7:7d:e9:58:d1:55:83:3a:ef: cb:70:98:2e:3a:92:9c:c8:26:1c:5e:19:b0:65:4e:40:60:53: 23:04:6b:23:16:36:97:6c:69:5c:11:b3:ba:7f:3c:5c:93:e9: d3:15:33:93:8e:41:25:28:c3:bb:fc:81:66:56:85:8d:84:00: a4:a6:c2:e2:da:ee:7d:83:a2:61:00:a0:16:70:05:00:09:59: b2:bb:08:0d:fd:03:00:6a:b1:c7:ec:4b:41:37:c6:eb:a7:0e: 5a:1a:77:bd:e0:f5:4f:9b:43:0d:ae:f5:79:b0:ac:a5:8d:ea: 87:c4:d0:2f:c1:22:56:10:e9:de:5f:8b:55:ba:af:34:a7:c1: ca:6a:8d:49:24:b1:da:47:23:6d:3d:68:8d:af:30:09:aa:58: a9:6d:d1:2d:85:c1:5a:00:da:ea:41:d1:38:2f:10:85:65:9e: 5d:29:4d:7f:c9:29:14:27:45:16:a6:45:c7:47:39:10:ea:6b: 0c:fd:3a:ed:4b:3e:ad:2b:a0:4d:72:34:2b:c3:da:61:7f:53: 14:4b:1a:1e:12:01:1f:83:43:f5:5c:a9:b5:65:7e:f8:35:19: 84:8b:69:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewjb1AVXM2c2+eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YzQzNGQwZmMtMmUyMy00NmNmLTkwNGQtYTJhYmU3NDlkM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYOAUPfLphIXJsFBwSiSMIB24cyt0B0hR7cS QQe2fSoQAfXv/LwmTq7IkGq4ugs6U+yoNOY44wyNLZw704KtoYkbiTANHOm4XLbR efVYTq3O6C0M+MgYdQnZ+Vn6pYKU5MCaohLBqdA+l5us1qEjE8kAfI0E0rETl7Mw jQeVB0oBPEkKcN5pwgIwCygrFJWHbCdIaDPzBMSa3UivD7winoCTUVQyfi+wLCI7 m5cXMldbjVeLwHFX+aU3TZM08aP0kAlizWMqY0EDUhlSIaC0Hb6E+SlCd3Up57H5 o1cQeywfJ8ICcJZI2PGarpvIADCzCSP76cMA6+XvlbORmUDR6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXgC/2izDE2eKtIAH0S8OUp7pQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjdkMWZlYzYtZWE3Zi0z NzUzLThhNTYtMWM1MzQzYTNjZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0dSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLq3Cq96iYqlCPISHBF5CQpY5ABQ6+KlCkXq+d96VjRVYM678twmC46 kpzIJhxeGbBlTkBgUyMEayMWNpdsaVwRs7p/PFyT6dMVM5OOQSUow7v8gWZWhY2E AKSmwuLa7n2DomEAoBZwBQAJWbK7CA39AwBqscfsS0E3xuunDload73g9U+bQw2u 9XmwrKWN6ofE0C/BIlYQ6d5fi1W6rzSnwcpqjUkksdpHI209aI2vMAmqWKlt0S2F wVoA2upB0TgvEIVlnl0pTX/JKRQnRRamRcdHORDqawz9Ou1LPq0roE1yNCvD2mF/ UxRLGh4SAR+DQ/VcqbVlfvg1GYSLaeI= -----END CERTIFICATE-----Generated at Wed Jul 9 21:57:17 2025 by rpki-client