$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35ff11e1-7841-385b-9a1d-a6b4ca25098a.roa File: 35ff11e1-7841-385b-9a1d-a6b4ca25098a.roa (raw, json) Hash identifier: rxNljBAO7Mvj/47oxY+TPU7uByaoUKyc3dMmxgcxM2w= Subject key identifier: 3F:A6:97:4B:54:86:E8:87:3F:38:54:66:A6:4E:24:F6:75:32:13:47 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A72CE3C7E158879052240 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35ff11e1-7841-385b-9a1d-a6b4ca25098a.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 22394 IP address blocks: 174.41.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:72:ce:3c:7e:15:88:79:05:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=82b709ba-b258-493d-967b-700d989c1404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:99:7c:df:12:49:b6:70:e4:ed:bb:43:6e:76: c2:56:88:d2:c0:d4:d1:7d:7c:97:31:78:09:f7:61: cc:f1:95:76:3a:52:4d:f2:e3:66:d0:a0:13:4c:1a: 59:10:a8:6d:8b:b9:bb:e5:d4:0e:ef:41:01:b8:5b: cb:36:44:a9:2b:cc:3e:1a:d4:c3:d2:e6:19:d7:2a: f5:26:83:5e:71:7b:ba:79:86:83:d8:9c:f3:ee:f9: 1f:6e:36:38:a0:c5:c9:7b:71:6c:df:90:29:e3:d9: e1:6f:b9:88:5c:b9:b3:a3:7a:75:c0:d8:5e:a6:55: 41:61:e6:91:b5:ed:cc:d1:22:db:82:bd:a5:e1:cb: 9e:75:5c:97:fb:28:1f:8f:4a:01:f7:07:b9:90:ad: 35:8a:8a:66:1d:82:a8:d7:2f:f4:76:83:e9:e3:2b: 2c:63:c5:80:f9:f8:b0:c3:4e:2b:9a:67:26:ec:ba: b1:cd:e5:1e:ed:9f:9b:de:2f:66:dd:d6:66:1e:a8: 45:36:df:cd:3a:49:97:d9:59:6c:f9:4b:8e:36:cd: d0:a6:6a:73:58:2f:4f:98:ce:9b:b5:03:a9:9c:51: cd:6f:fa:89:f0:85:57:d3:09:15:3c:92:9c:0e:7b: b1:61:e9:37:b4:87:46:dd:c0:7c:23:97:a1:e8:bc: a1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A6:97:4B:54:86:E8:87:3F:38:54:66:A6:4E:24:F6:75:32:13:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35ff11e1-7841-385b-9a1d-a6b4ca25098a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ad:16:74:91:95:0f:9e:21:c2:b7:f8:6f:45:4e:00:a7:e9: da:3c:7c:84:4d:ee:21:b1:97:0b:49:28:e9:07:49:9d:08:24: 25:7e:a6:2c:c4:3a:9c:bf:65:d6:57:76:de:54:8c:89:c0:22: a8:3f:fc:26:8d:43:d4:d6:33:5b:31:2c:d8:77:32:92:1f:62: e8:9b:ca:73:0d:17:28:82:f5:37:9b:9a:bc:96:23:6d:8e:28: e0:b0:ed:a3:14:4a:44:20:c3:6b:ce:d6:1c:84:26:bc:90:65: 82:63:c3:a1:2a:e4:bb:2d:f9:8f:84:c5:67:74:a2:c7:df:aa: a3:61:be:12:2e:64:fe:6a:40:fe:a5:bd:90:3f:af:62:85:16: 44:75:b9:4a:7e:b7:60:20:b5:24:f3:0e:e5:3b:df:b0:98:21: 27:14:a4:df:20:15:a0:a5:4f:91:2c:53:3b:b6:e1:2c:f4:5f: 5e:3b:66:95:87:c0:02:a0:4e:32:ff:6e:32:54:b3:4f:a0:aa: 93:b1:9a:87:2f:80:73:7a:ee:6c:c4:9a:e2:87:07:59:05:2c: e9:16:89:e8:80:06:15:3c:18:32:c1:ae:83:fe:d2:0c:77:fc: 45:bd:80:d6:fa:d6:4e:ea:3b:07:34:5d:4b:4d:85:7f:74:66: 34:e8:cd:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnLOPH4ViHkFIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ODJiNzA5YmEtYjI1OC00OTNkLTk2N2ItNzAwZDk4OWMxNDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZl83xJJtnDk7btDbnbCVojSwNTRfXyXMXgJ 92HM8ZV2OlJN8uNm0KATTBpZEKhti7m75dQO70EBuFvLNkSpK8w+GtTD0uYZ1yr1 JoNecXu6eYaD2Jzz7vkfbjY4oMXJe3Fs35Ap49nhb7mIXLmzo3p1wNheplVBYeaR te3M0SLbgr2l4cuedVyX+ygfj0oB9we5kK01iopmHYKo1y/0doPp4yssY8WA+fiw w04rmmcm7LqxzeUe7Z+b3i9m3dZmHqhFNt/NOkmX2Vls+UuONs3QpmpzWC9PmM6b tQOpnFHNb/qJ8IVX0wkVPJKcDnuxYek3tIdG3cB8I5eh6LyhNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+ml0tUhuiHPzhUZqZOJPZ1MhNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzVmZjExZTEtNzg0MS0z ODViLTlhMWQtYTZiNGNhMjUwOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrinAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFytFnSRlQ+eIcK3+G9FTgCn6do8fIRN7iGxlwtJKOkHSZ0IJCV+pizE Opy/ZdZXdt5UjInAIqg//CaNQ9TWM1sxLNh3MpIfYuibynMNFyiC9TebmryWI22O KOCw7aMUSkQgw2vO1hyEJryQZYJjw6Eq5Lst+Y+ExWd0osffqqNhvhIuZP5qQP6l vZA/r2KFFkR1uUp+t2AgtSTzDuU737CYIScUpN8gFaClT5EsUzu24Sz0X147ZpWH wAKgTjL/bjJUs0+gqpOxmocvgHN67mzEmuKHB1kFLOkWieiABhU8GDLBroP+0gx3 /EW9gNb61k7qOwc0XUtNhX90ZjTozfA= -----END CERTIFICATE-----Generated at Sun May 11 01:27:36 2025 by rpki-client