$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58e6cac-5df6-35bf-a4e9-2a08eede6fed.roa File: d58e6cac-5df6-35bf-a4e9-2a08eede6fed.roa (raw, json) Hash identifier: GszmmROi5Ca3+k8KT5naQdvdrZIa+vZ7UksH8UPCaI0= Subject key identifier: 44:D0:67:49:39:51:90:7B:71:86:DC:02:55:0D:82:B1:F8:B4:DB:D0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F18002A16B4777FF298AA700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58e6cac-5df6-35bf-a4e9-2a08eede6fed.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 70.106.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:02:a1:6b:47:77:ff:29:8a:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=df0e2bb3-d11e-42bd-989e-bb509172dd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:56:5a:b1:d1:fe:e5:a7:ce:0d:54:ce:24:a9: e0:d9:7e:0f:33:02:f9:a8:f8:04:37:53:5d:a7:c9: 25:87:43:82:1b:0f:b9:45:40:ad:08:e1:01:7b:70: 01:8b:21:9b:df:2e:83:bb:af:8f:08:17:38:5a:18: 4a:65:3b:d5:d1:36:1b:f7:ed:0c:9c:19:3c:cc:a1: e9:99:c6:bc:51:f9:e5:89:bb:6c:fc:fc:c5:42:8c: 3e:f7:16:cc:1f:c2:70:b6:8c:d3:26:5f:79:29:60: e6:2e:18:11:22:7d:ef:36:94:11:b3:a7:69:af:f1: 74:54:53:8f:9c:d8:f7:72:14:1d:ce:65:2e:0c:60: b8:57:20:1c:34:8d:d2:57:c5:7f:1f:1e:19:7a:a0: dc:c6:d9:03:5e:d9:1a:6f:e2:ae:0e:71:44:54:7b: d8:69:29:b6:3d:0d:67:d0:60:fb:0b:47:14:61:42: 54:6a:48:bf:43:8c:d0:ec:04:ff:f9:b3:fb:66:67: 1a:d5:84:02:82:31:c1:b7:dc:30:a7:e7:d6:9b:ce: dc:97:9f:07:6d:0a:fc:25:6a:37:5b:ac:77:aa:37: 24:1b:aa:20:50:c0:d8:36:d3:c9:da:06:25:f8:e1: cf:fd:42:50:7a:7d:eb:eb:43:f0:74:8c:59:b2:b2: c8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D0:67:49:39:51:90:7B:71:86:DC:02:55:0D:82:B1:F8:B4:DB:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58e6cac-5df6-35bf-a4e9-2a08eede6fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.106.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8f:55:d9:47:9c:0e:42:16:68:16:c7:95:41:61:60:b6:83: 90:58:2e:68:ff:76:35:e1:a9:c6:79:53:ce:d2:52:25:f9:10: 19:be:b6:14:11:63:dd:ec:14:62:fb:c6:82:49:67:21:88:cf: 98:fc:20:5c:93:44:a1:cb:33:f5:41:3a:be:e0:3d:dd:3b:13: 47:b7:7c:83:35:a7:58:55:30:12:a3:54:2c:bf:d2:cd:72:96: 43:c7:40:87:4b:4b:29:2c:69:00:2e:de:3e:a1:bb:23:6b:30: 5a:c4:53:f5:fb:e1:5e:0a:6d:67:70:8b:e2:5a:0b:85:a5:27: 9f:7c:2c:da:05:f9:c1:39:e9:3a:6a:fd:21:e5:4d:31:6c:0a: 48:f0:4f:13:ee:27:b4:81:af:68:02:cb:5f:d6:d2:06:ca:5f: fc:4f:7f:90:4c:8c:25:9b:c6:e6:54:3c:58:a5:1f:80:77:0f: b6:d0:ad:46:8e:83:01:1f:e2:f5:93:8c:41:09:71:fa:38:a5: 9b:ee:e7:2e:88:02:2c:43:41:85:5f:c7:d9:77:af:cd:89:64: 96:04:f2:f9:48:34:1a:71:b7:83:9e:c4:b5:1d:0b:d2:26:a0: 97:21:be:08:07:0b:69:6e:92:fa:5c:0d:3f:66:68:6b:34:38: 83:f1:87:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAKha0d3/ymKpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZGYwZTJiYjMtZDExZS00MmJkLTk4OWUtYmI1MDkxNzJkZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31ZasdH+5afODVTOJKng2X4PMwL5qPgEN1Nd p8klh0OCGw+5RUCtCOEBe3ABiyGb3y6Du6+PCBc4WhhKZTvV0TYb9+0MnBk8zKHp mca8Ufnlibts/PzFQow+9xbMH8JwtozTJl95KWDmLhgRIn3vNpQRs6dpr/F0VFOP nNj3chQdzmUuDGC4VyAcNI3SV8V/Hx4ZeqDcxtkDXtkab+KuDnFEVHvYaSm2PQ1n 0GD7C0cUYUJUaki/Q4zQ7AT/+bP7Zmca1YQCgjHBt9wwp+fWm87cl58HbQr8JWo3 W6x3qjckG6ogUMDYNtPJ2gYl+OHP/UJQen3r60PwdIxZsrLI8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETQZ0k5UZB7cYbcAlUNgrH4tNvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDU4ZTZjYWMtNWRmNi0z NWJmLWE0ZTktMmEwOGVlZGU2ZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERmqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+PVdlHnA5CFmgWx5VBYWC2g5BYLmj/djXhqcZ5U87SUiX5EBm+thQR Y93sFGL7xoJJZyGIz5j8IFyTRKHLM/VBOr7gPd07E0e3fIM1p1hVMBKjVCy/0s1y lkPHQIdLSyksaQAu3j6huyNrMFrEU/X74V4KbWdwi+JaC4WlJ598LNoF+cE56Tpq /SHlTTFsCkjwTxPuJ7SBr2gCy1/W0gbKX/xPf5BMjCWbxuZUPFilH4B3D7bQrUaO gwEf4vWTjEEJcfo4pZvu5y6IAixDQYVfx9l3r82JZJYE8vlINBpxt4OexLUdC9Im oJchvggHC2lukvpcDT9maGs0OIPxh+4= -----END CERTIFICATE-----Generated at Fri Jun 6 06:33:09 2025 by rpki-client