$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a0e80a3-10d4-3a1e-b4a3-7dc6d10e5257.roa File: 0a0e80a3-10d4-3a1e-b4a3-7dc6d10e5257.roa (raw, json) Hash identifier: yah5iRDuEOEhye0+OzhSI+A27H43xhr3rHQn20vis7k= Subject key identifier: 88:EF:CE:DA:38:15:2F:9E:1A:B8:F2:EC:3A:EF:52:16:58:AE:AD:D2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849C79F71194AC5F318A4791800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a0e80a3-10d4-3a1e-b4a3-7dc6d10e5257.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.228.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:71:19:4a:c5:f3:18:a4:79:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=42e99578-3e5f-402b-a70f-10c0d37138c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:3c:f9:71:c4:99:ae:f3:ff:93:2f:99:da: d4:7c:fa:37:0e:f7:e5:01:d4:58:e4:5c:de:23:5e: cb:cd:3b:58:b2:49:e2:ee:26:41:0a:1a:6c:09:aa: f3:9b:e2:e1:70:25:22:96:78:ad:0f:74:70:c9:f8: f2:3f:ac:33:9a:db:82:04:79:b2:b1:5c:ab:c0:36: 2a:d1:fe:e9:dc:30:c3:c9:7b:17:58:b0:2f:f9:ff: d4:a8:dd:76:6e:cb:96:78:da:34:8c:24:3d:5c:34: ed:b2:49:7c:86:4f:23:e2:70:21:cb:6d:29:7c:88: 38:e2:89:c8:9f:d5:4c:c6:b1:e8:3f:67:40:af:81: 7d:57:b9:1f:f6:f2:af:d4:3b:af:7b:4d:85:a3:1f: 6b:3d:7c:b2:37:c3:72:d8:42:29:0f:1d:bc:dd:da: d7:95:4f:b3:7b:3c:fd:ff:e8:a5:71:f7:3e:39:f8: 2c:d2:61:12:20:b7:07:33:cc:0c:5a:c5:5f:42:4f: 9a:b7:44:f3:90:a7:5a:58:02:5f:d1:39:72:6f:9f: d4:96:35:2d:aa:ff:80:23:99:e4:a2:12:a5:17:bf: 12:6f:d3:93:0e:f1:f5:7f:fc:d4:4d:6e:f1:2b:2e: 5e:40:6e:26:db:90:da:26:4e:07:5f:dd:80:3d:16: 49:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EF:CE:DA:38:15:2F:9E:1A:B8:F2:EC:3A:EF:52:16:58:AE:AD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a0e80a3-10d4-3a1e-b4a3-7dc6d10e5257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.228.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e7:1f:6a:dc:1f:1b:cb:a3:ee:38:6f:79:bc:82:5b:44:0f: f7:9e:02:ad:b4:b5:7e:76:15:66:75:7f:c2:2c:cb:58:e4:37: 4a:17:75:f5:5f:7d:86:0d:1e:3d:3c:54:cb:2f:e7:34:ff:69: 49:40:a0:c4:a5:2a:f4:7a:1b:cb:91:2e:8b:01:b2:45:ff:d7: 42:55:83:c5:d4:9b:10:56:4f:43:66:46:b4:5a:4a:d5:84:f1: 54:af:fd:89:1b:a8:a8:e1:2f:95:47:1b:2e:99:03:c8:55:ca: a8:e6:66:5a:4f:31:f7:d0:6c:18:16:82:9d:6d:cd:47:5c:3a: 09:0c:8f:4b:d1:78:61:57:96:f9:87:51:93:27:5d:2e:17:9f: bf:8a:d6:48:b5:e5:71:f3:20:67:d8:24:be:4f:d4:16:5c:2e: dd:04:f3:c3:b2:c2:df:25:63:f5:fc:75:f3:b0:41:ef:c9:ec: cd:14:76:b1:10:d1:a0:10:f8:9a:99:5e:26:95:21:a0:22:dc: df:ba:87:73:7c:26:aa:db:7e:ca:27:67:09:33:94:af:54:6d: b5:2f:6f:06:65:a3:b1:ca:72:82:ce:2e:b7:97:a1:e2:bb:3b: 17:f8:ac:64:61:2f:c2:d2:81:3c:4d:a5:97:ac:33:22:c4:e1: c3:39:14:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3EZSsXzGKR5GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk NDJlOTk1NzgtM2U1Zi00MDJiLWE3MGYtMTBjMGQzNzEzOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE08+XHEma7z/5MvmdrUfPo3DvflAdRY5Fze I17LzTtYskni7iZBChpsCarzm+LhcCUilnitD3RwyfjyP6wzmtuCBHmysVyrwDYq 0f7p3DDDyXsXWLAv+f/UqN12bsuWeNo0jCQ9XDTtskl8hk8j4nAhy20pfIg44onI n9VMxrHoP2dAr4F9V7kf9vKv1Duve02Fox9rPXyyN8Ny2EIpDx283drXlU+zezz9 /+ilcfc+Ofgs0mESILcHM8wMWsVfQk+at0TzkKdaWAJf0Tlyb5/UljUtqv+AI5nk ohKlF78Sb9OTDvH1f/zUTW7xKy5eQG4m25DaJk4HX92APRZJrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjvzto4FS+eGrjy7DrvUhZYrq3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGEwZTgwYTMtMTBkNC0z YTFlLWI0YTMtN2RjNmQxMGU1MjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFruQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvnH2rcHxvLo+44b3m8gltED/eeAq20tX52FWZ1f8Isy1jkN0oXdfVf fYYNHj08VMsv5zT/aUlAoMSlKvR6G8uRLosBskX/10JVg8XUmxBWT0NmRrRaStWE 8VSv/YkbqKjhL5VHGy6ZA8hVyqjmZlpPMffQbBgWgp1tzUdcOgkMj0vReGFXlvmH UZMnXS4Xn7+K1ki15XHzIGfYJL5P1BZcLt0E88Oywt8lY/X8dfOwQe/J7M0UdrEQ 0aAQ+JqZXiaVIaAi3N+6h3N8JqrbfsonZwkzlK9UbbUvbwZlo7HKcoLOLreXoeK7 Oxf4rGRhL8LSgTxNpZesMyLE4cM5FJI= -----END CERTIFICATE-----Generated at Sat May 10 07:13:33 2025 by rpki-client