$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/409e8041-9438-33b8-b8ce-5c23c1da38f1.roa File: 409e8041-9438-33b8-b8ce-5c23c1da38f1.roa (raw, json) Hash identifier: coE7XSwavcaWmpnehQO0Ck3ofOiCkKLYM2B2T0UZKyI= Subject key identifier: 91:06:68:C0:8C:0B:C0:3A:2D:48:58:84:51:B0:AC:D0:E7:51:03:D0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A5335B4D484D0A622FD1B0700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/409e8041-9438-33b8-b8ce-5c23c1da38f1.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 6195 IP address blocks: 207.17.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:b4:d4:84:d0:a6:22:fd:1b:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=51977c3d-4c83-4093-9f0a-64903c8a731f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:37:98:da:c6:82:ed:3d:35:90:37:b8:f8: a3:ba:63:93:6c:cd:01:ce:23:0c:2f:43:a9:99:2a: bb:17:ed:8d:2e:a0:d1:64:db:bc:d3:be:b6:0a:bf: ee:7a:23:7d:28:4b:0e:ff:33:17:c0:1f:60:d4:1f: 78:cc:d3:2d:63:6d:fb:56:d9:3a:61:79:6d:c5:68: e0:e3:77:31:54:ee:5f:f6:44:c8:e4:31:60:fd:7e: 51:11:7a:de:89:31:e6:00:bd:9b:fe:9d:3d:5d:53: 66:9a:59:3b:7d:3b:b1:c2:79:36:d7:7b:7d:50:2e: d0:3e:fd:d7:f7:19:f3:99:b3:e5:db:fe:11:4f:fb: 32:1d:ec:db:f7:b9:e6:71:5d:db:ae:7e:9b:73:15: 1d:4f:6f:e5:95:56:ef:fd:59:ab:71:98:1a:45:1a: cb:63:34:fe:be:10:bc:5a:1f:43:cf:a1:24:ea:75: 8c:d5:df:13:39:92:ba:51:6d:e0:45:cb:ba:81:2c: ce:4b:3e:bf:23:0d:52:61:21:d3:25:19:94:28:6b: 23:39:37:34:72:28:6a:b7:44:a7:08:8b:6f:01:e9: 01:02:47:31:91:c1:0f:85:3a:71:61:bf:5d:35:7e: e3:33:6b:c5:37:f5:c5:e4:26:8d:e4:e6:20:3f:0d: 9f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:06:68:C0:8C:0B:C0:3A:2D:48:58:84:51:B0:AC:D0:E7:51:03:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/409e8041-9438-33b8-b8ce-5c23c1da38f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 207.17.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:3d:5e:2b:51:e5:a4:4c:e9:61:5e:12:a5:4c:fe:75:b9:7d: a2:c0:d7:d2:ad:f6:b5:2d:53:40:a3:34:51:38:01:5e:fe:77: e1:a7:04:6a:6e:ae:75:94:6f:44:c7:03:f6:9b:3a:71:5b:fb: e3:c1:09:6e:03:65:b8:dc:e2:62:b2:1f:e4:70:9c:0e:93:6f: f2:ac:24:2b:39:18:ee:b9:ac:19:0c:f3:7b:95:0d:40:79:fe: 33:ea:76:fb:eb:ac:2c:a6:9f:dd:29:3b:00:30:e0:e6:0d:49: 52:a5:6e:3f:82:89:5b:ef:f3:82:14:98:9b:0b:bf:87:d3:68: a8:07:84:85:ae:00:37:c0:a0:ad:3b:8d:99:2a:92:ec:67:6b: bb:4b:1c:33:d4:db:96:35:d9:d4:06:14:e9:ed:2f:79:2a:db: ec:0e:bb:ac:74:93:82:46:ac:fc:86:cc:f5:8f:56:12:9a:b6: b2:91:19:d6:f3:fe:03:56:46:65:80:0e:f1:92:be:cf:59:48: 2d:ca:5f:82:60:45:7d:91:da:e4:58:f4:54:95:55:f1:db:22: 1a:dc:ea:d0:d6:0a:8c:b7:46:9b:f6:a0:39:d9:05:94:4a:b9: 61:74:31:3a:14:e7:6a:05:5f:48:82:c5:7c:b1:b5:58:64:af: a3:92:d4:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNbTUhNCmIv0bBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk NTE5NzdjM2QtNGM4My00MDkzLTlmMGEtNjQ5MDNjOGE3MzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo43mNrGgu09NZA3uPijumOTbM0BziMML0Op mSq7F+2NLqDRZNu80762Cr/ueiN9KEsO/zMXwB9g1B94zNMtY237Vtk6YXltxWjg 43cxVO5f9kTI5DFg/X5REXreiTHmAL2b/p09XVNmmlk7fTuxwnk213t9UC7QPv3X 9xnzmbPl2/4RT/syHezb97nmcV3brn6bcxUdT2/llVbv/VmrcZgaRRrLYzT+vhC8 Wh9Dz6Ek6nWM1d8TOZK6UW3gRcu6gSzOSz6/Iw1SYSHTJRmUKGsjOTc0cihqt0Sn CItvAekBAkcxkcEPhTpxYb9dNX7jM2vFN/XF5CaN5OYgPw2fqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEGaMCMC8A6LUhYhFGwrNDnUQPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDA5ZTgwNDEtOTQzOC0z M2I4LWI4Y2UtNWMyM2MxZGEzOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA9XitR5aRM6WFeEqVM/nW5faLA19Kt9rUtU0CjNFE4AV7+d+GnBGpu rnWUb0THA/abOnFb++PBCW4DZbjc4mKyH+RwnA6Tb/KsJCs5GO65rBkM83uVDUB5 /jPqdvvrrCymn90pOwAw4OYNSVKlbj+CiVvv84IUmJsLv4fTaKgHhIWuADfAoK07 jZkqkuxna7tLHDPU25Y12dQGFOntL3kq2+wOu6x0k4JGrPyGzPWPVhKatrKRGdbz /gNWRmWADvGSvs9ZSC3KX4JgRX2R2uRY9FSVVfHbIhrc6tDWCoy3Rpv2oDnZBZRK uWF0MToU52oFX0iCxXyxtVhkr6OS1HI= -----END CERTIFICATE-----Generated at Wed Jul 9 22:03:35 2025 by rpki-client