$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa File: eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa (raw, json) Hash identifier: gZZyqV8tTX85tFNAJ1hsQm7SxIab3V8ptMCRAU0dCmQ= Subject key identifier: E2:67:6F:F6:CC:8B:D7:19:6C:8B:E5:FD:77:88:CD:69:31:7D:76:A9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F18007992E6A846AD89A9D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 70.21.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:07:99:2e:6a:84:6a:d8:9a:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=e2eccf49-134d-4637-a497-bfd1636a8b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:96:ea:98:07:2c:9e:54:52:18:65:e1:19: bf:c8:bb:f8:a0:f9:bd:c6:3c:96:c5:fa:88:2b:f0: 0f:3b:e0:bf:7e:c2:31:8a:11:e2:cc:86:dc:83:aa: e4:05:43:35:cf:eb:a8:74:f3:a7:1a:df:ad:74:d5: 47:da:79:33:d5:ce:cb:52:ee:b3:fb:eb:69:da:b9: e8:88:7c:22:6a:ff:18:e3:a6:b0:06:31:11:04:e6: ab:1f:fd:28:2d:a3:0e:7b:7c:41:eb:4e:4b:34:ef: 77:5a:5b:39:0c:eb:c5:96:c9:33:fa:db:3d:65:cc: 57:d3:b9:b4:eb:7b:c6:c2:aa:ad:50:2d:27:b0:c5: ab:71:19:54:62:3f:06:4c:c8:30:df:3c:9f:fd:8f: 27:e6:7c:84:20:10:ef:ee:2c:f5:f0:70:1d:86:ca: dd:92:3c:44:cb:2d:d7:26:04:77:fd:7d:9f:39:0c: cf:4e:d0:cb:b5:79:b1:fe:55:6a:44:c6:82:25:78: 17:4b:4d:c0:8d:81:ef:ee:81:bc:3a:98:28:4a:c4: 94:33:7d:79:55:76:9f:fd:d2:6a:90:00:dc:77:06: 5a:06:24:98:dd:62:5e:fb:15:b7:df:e8:13:74:07: 78:ae:2b:70:ab:2a:ef:0e:01:93:7f:a2:76:62:ac: 1c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:67:6F:F6:CC:8B:D7:19:6C:8B:E5:FD:77:88:CD:69:31:7D:76:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.21.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:93:5f:21:08:6a:4f:36:fc:32:ed:c4:81:09:3e:bf:69:ce: 72:8d:72:f7:2f:80:2a:ba:fc:67:14:ce:12:cc:26:0b:0f:84: 96:a5:3f:34:2e:f0:f4:9a:3d:54:6d:5f:c5:2b:63:2d:16:c7: be:32:64:b2:cd:f8:2b:53:33:63:3c:c5:a8:b2:23:b0:98:9e: 19:88:ca:0b:18:7e:57:d9:a0:5f:ac:dc:c1:a5:4b:9e:cd:e2: 86:1d:f4:ec:4e:85:a4:29:aa:2d:f8:ff:30:85:37:bb:66:ee: 41:61:99:1b:b8:94:79:c0:14:03:af:39:df:9e:80:2b:25:37: 66:ff:55:bd:be:1f:f9:1b:4a:55:d8:ff:10:c4:44:ad:39:58: 0f:5a:81:5b:36:71:ed:29:1d:59:c6:89:20:bf:19:3f:a0:a6: 08:05:63:ac:88:b6:ba:d8:a7:e5:fd:79:0f:f9:31:05:d6:7f: 89:17:c6:38:fe:a5:0f:af:3d:ad:bd:60:81:8c:a9:a1:4e:0b: 11:b8:e0:8c:85:63:82:77:76:33:7b:a2:92:f9:c5:b0:78:19: 5b:c8:e6:82:18:4a:1e:a6:80:f7:c7:6e:2f:8a:7d:f6:0c:90: a4:54:f3:2c:3d:09:55:19:98:fb:aa:60:5e:d4:9f:c0:8c:c4: d4:71:ba:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAeZLmqEatianQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZTJlY2NmNDktMTM0ZC00NjM3LWE0OTctYmZkMTYzNmE4YjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOiW6pgHLJ5UUhhl4Rm/yLv4oPm9xjyWxfqI K/APO+C/fsIxihHizIbcg6rkBUM1z+uodPOnGt+tdNVH2nkz1c7LUu6z++tp2rno iHwiav8Y46awBjERBOarH/0oLaMOe3xB605LNO93Wls5DOvFlskz+ts9ZcxX07m0 63vGwqqtUC0nsMWrcRlUYj8GTMgw3zyf/Y8n5nyEIBDv7iz18HAdhsrdkjxEyy3X JgR3/X2fOQzPTtDLtXmx/lVqRMaCJXgXS03AjYHv7oG8OpgoSsSUM315VXaf/dJq kADcdwZaBiSY3WJe+xW33+gTdAd4ritwqyrvDgGTf6J2YqwcfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJnb/bMi9cZbIvl/XeIzWkxfXapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWZmNWYzY2MtZDA1NC0z YWMxLWE2MmUtNDgxYmY4ZjlkN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmTXyEIak82/DLtxIEJPr9pznKNcvcvgCq6/GcUzhLMJgsPhJalPzQu 8PSaPVRtX8UrYy0Wx74yZLLN+CtTM2M8xaiyI7CYnhmIygsYflfZoF+s3MGlS57N 4oYd9OxOhaQpqi34/zCFN7tm7kFhmRu4lHnAFAOvOd+egCslN2b/Vb2+H/kbSlXY /xDERK05WA9agVs2ce0pHVnGiSC/GT+gpggFY6yItrrYp+X9eQ/5MQXWf4kXxjj+ pQ+vPa29YIGMqaFOCxG44IyFY4J3djN7opL5xbB4GVvI5oIYSh6mgPfHbi+KffYM kKRU8yw9CVUZmPuqYF7Un8CMxNRxuv0= -----END CERTIFICATE-----Generated at Fri Jun 6 19:27:47 2025 by rpki-client