$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa File: 7405a99a-393f-3196-80ba-b4ad1406ad44.roa (raw, json) Hash identifier: hQ66ED9hT7u7KW2CyFkcfwv7y7P0yWsKat4fRRgNqGs= Subject key identifier: 37:B6:9E:07:3C:57:F9:4D:2C:0E:F7:89:0A:02:97:1F:BF:DE:3D:4C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B39349256CB1724CC4880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 701 IP address blocks: 138.89.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:39:34:92:56:cb:17:24:cc:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=e16f0b08-0ac4-4971-930f-debf01d34bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b9:0a:ad:38:34:96:61:d9:ab:7b:79:e4:da: d9:00:d1:87:e5:bb:04:e0:2d:97:22:87:8c:c0:02: 37:26:60:9d:bd:03:c9:94:c4:5d:f5:64:79:4c:04: 45:cf:32:52:e3:b2:da:b3:7d:29:8b:9b:bb:61:f0: 86:2a:e3:24:1b:87:7d:91:5b:ba:0b:e9:78:2d:c1: 01:48:52:0e:5a:5f:8d:c4:42:ae:f9:b9:83:1f:7b: 2e:8c:1a:7f:55:5b:32:0d:8a:42:97:1b:28:49:2c: cc:7b:ad:40:a6:2a:46:d3:c8:c2:82:59:3b:c4:f7: 94:8b:ef:d2:a3:6c:ae:64:24:fe:0d:27:5b:8b:46: 71:b8:03:3a:60:ca:a8:c4:9f:0a:ed:e3:a4:9c:4f: 4b:34:ec:43:ff:a8:0f:d0:9b:bf:1b:ed:c3:39:ed: 52:a8:db:5a:75:15:92:52:69:00:eb:e6:08:38:0e: 9c:85:75:d0:2f:d3:cb:5a:db:3b:54:d9:2d:51:0e: 08:57:5a:03:3a:26:d4:85:7f:c4:09:18:56:47:23: 95:b0:d3:f6:4f:c6:a4:85:90:fc:2d:2d:c4:08:89: 15:df:cd:fb:05:3a:8b:bb:48:fd:e0:b3:55:fe:99: d6:57:20:6f:f3:6e:48:24:c2:c3:ca:a1:cd:dd:95: e3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B6:9E:07:3C:57:F9:4D:2C:0E:F7:89:0A:02:97:1F:BF:DE:3D:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 138.89.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:52:48:e1:de:84:b5:ae:12:35:21:e0:f2:8f:19:1a:68:fc: 26:62:aa:df:65:ba:a3:69:09:68:e3:a2:bf:11:e8:41:83:3b: 10:73:5a:ce:44:7d:95:b0:cc:8a:fe:aa:8a:9a:27:b1:6a:c7: f4:2e:31:50:75:4d:c0:b6:5a:f7:fc:cd:1a:4f:f3:0c:df:32: 80:99:c8:dc:ae:39:07:6f:3e:14:6d:99:4b:db:54:8f:4b:05: 74:7f:55:9c:fa:b1:96:02:71:e3:03:50:15:ce:65:dc:94:f8: fc:01:cc:22:4e:78:09:7c:7d:21:59:4c:11:e5:4d:67:2b:65: 80:1c:8a:69:4c:fa:1a:f8:83:2b:d1:f9:1f:5f:18:69:bd:b1: cf:71:35:8e:3f:88:59:28:a6:9e:9d:54:5a:f9:31:96:c8:b8: 18:b9:3d:33:f5:ac:9a:f0:ec:ea:f9:ef:27:8b:a6:78:53:4b: 02:89:09:85:fe:5c:1c:2e:32:eb:25:ae:94:b1:f6:5e:5e:ca: c9:a2:c3:3a:ab:79:39:7c:19:60:c2:27:58:a6:33:4b:44:08: 56:17:bd:96:71:25:2a:ba:76:d1:da:b3:e7:9a:bb:f0:8b:ee: d4:d1:fd:23:5c:70:0b:3e:d8:8d:6e:60:c1:88:d4:d8:db:2f: 1b:62:10:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ezk0klbLFyTMSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ZTE2ZjBiMDgtMGFjNC00OTcxLTkzMGYtZGViZjAxZDM0YmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLkKrTg0lmHZq3t55NrZANGH5bsE4C2XIoeM wAI3JmCdvQPJlMRd9WR5TARFzzJS47Las30pi5u7YfCGKuMkG4d9kVu6C+l4LcEB SFIOWl+NxEKu+bmDH3sujBp/VVsyDYpClxsoSSzMe61ApipG08jCglk7xPeUi+/S o2yuZCT+DSdbi0ZxuAM6YMqoxJ8K7eOknE9LNOxD/6gP0Ju/G+3DOe1SqNtadRWS UmkA6+YIOA6chXXQL9PLWts7VNktUQ4IV1oDOibUhX/ECRhWRyOVsNP2T8akhZD8 LS3ECIkV3837BTqLu0j94LNV/pnWVyBv825IJMLDyqHN3ZXjSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe2ngc8V/lNLA73iQoClx+/3j1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzQwNWE5OWEtMzkzZi0z MTk2LTgwYmEtYjRhZDE0MDZhZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHilkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRSSOHehLWuEjUh4PKPGRpo/CZiqt9luqNpCWjjor8R6EGDOxBzWs5E fZWwzIr+qoqaJ7Fqx/QuMVB1TcC2Wvf8zRpP8wzfMoCZyNyuOQdvPhRtmUvbVI9L BXR/VZz6sZYCceMDUBXOZdyU+PwBzCJOeAl8fSFZTBHlTWcrZYAcimlM+hr4gyvR +R9fGGm9sc9xNY4/iFkopp6dVFr5MZbIuBi5PTP1rJrw7Or57yeLpnhTSwKJCYX+ XBwuMuslrpSx9l5eysmiwzqreTl8GWDCJ1imM0tECFYXvZZxJSq6dtHas+eau/CL 7tTR/SNccAs+2I1uYMGI1NjbLxtiEJk= -----END CERTIFICATE-----Generated at Wed Jul 9 22:06:35 2025 by rpki-client