$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/391bbefa-9aea-322f-807a-b5b118d3b226.roa File: 391bbefa-9aea-322f-807a-b5b118d3b226.roa (raw, json) Hash identifier: gnnSFGNoXM/eLOV4a+iX1h0k9/W+dPhOFbQSq+70mvo= Subject key identifier: 04:02:E2:BD:14:88:F8:32:BD:5D:12:0B:24:8F:71:E5:30:79:A0:67 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C28E28DF9304782926C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/391bbefa-9aea-322f-807a-b5b118d3b226.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 74.106.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:28:e2:8d:f9:30:47:82:92:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=ab09ff0c-6b42-41a1-b12e-d34c9aa2508a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e2:6d:d9:eb:92:ab:30:03:56:53:08:7b:b6: 32:c9:31:02:70:be:a3:19:d9:1c:31:0b:c7:0a:b6: 81:88:a0:78:1b:d8:16:b4:74:20:df:ac:c5:e4:b6: 3d:42:a4:42:cd:21:41:95:d0:d2:88:52:fb:b6:47: 83:aa:40:cf:db:23:51:b4:c3:de:bc:b4:f2:b7:e8: ed:04:14:78:b3:d2:9b:0c:32:e1:a6:0d:17:9e:3f: af:0f:aa:66:65:0a:d6:99:48:30:2a:41:e9:6b:04: 17:0c:48:13:45:8c:56:ff:a0:5a:75:b3:5c:79:1d: 83:4f:6f:a4:f1:7b:62:72:47:27:43:05:a5:4b:ff: 31:ba:86:6a:d6:34:17:18:49:bc:11:66:68:cc:42: fc:55:8c:d7:4a:ee:30:df:74:a9:6b:7f:29:77:bc: 66:af:3f:5b:6b:76:1f:5f:88:e8:5e:64:ee:0b:43: fb:e7:c9:b8:41:d4:2c:15:66:0d:ea:2c:16:a1:06: 15:91:d1:62:3a:fd:41:92:7d:68:e3:84:31:a4:e2: bb:16:38:a8:6c:f1:5b:c1:95:1f:cc:0e:d4:a0:cc: 63:cd:bc:fe:46:ae:30:c4:7e:ab:e4:4c:80:1a:06: 6b:b3:92:e3:09:60:bf:75:d8:7b:2c:27:b7:10:96: be:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:02:E2:BD:14:88:F8:32:BD:5D:12:0B:24:8F:71:E5:30:79:A0:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/391bbefa-9aea-322f-807a-b5b118d3b226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 74.106.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6a:65:f2:36:51:d7:d3:cf:b3:fa:ed:65:02:8e:50:94:1b: 68:0c:c2:16:cc:96:cd:35:d9:6e:85:ff:c9:20:60:60:ad:6b: 43:77:3e:73:86:48:c9:6c:ca:c9:25:6d:a4:66:0f:b3:ed:eb: 80:89:4f:9d:ad:27:1d:84:89:17:ee:0d:cd:50:5e:ee:cd:17: 33:8a:d3:71:36:f9:ab:56:27:d6:68:69:6b:ea:75:6c:a0:da: d0:88:76:43:80:f8:4a:eb:07:23:77:5a:4f:3c:e4:24:e2:9d: 04:77:57:a4:cd:85:cd:aa:f1:9d:00:fb:da:aa:b6:df:3a:42: 01:d1:c2:b2:37:82:e5:ed:cb:5c:e9:b7:d5:9f:6d:22:32:83: 54:95:a0:d8:0f:18:74:30:39:0f:a2:a3:7a:e3:13:4c:98:85: 95:8f:63:20:38:8e:21:79:c4:16:7b:6c:fa:57:09:e0:63:17: 6a:14:2e:7f:15:d2:e3:4b:70:7a:ce:29:de:3a:7f:33:f1:40: 8b:37:d5:33:2d:d4:68:ca:a3:e5:69:3b:77:cb:36:f8:6f:37: 1a:b3:e8:2b:75:36:ea:a7:df:82:85:09:e1:26:c9:a2:1c:0a: 9d:e6:09:ac:19:d1:14:e8:61:dd:9c:d7:bd:4e:8f:44:74:21: d5:ea:ad:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCjijfkwR4KSbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YWIwOWZmMGMtNmI0Mi00MWExLWIxMmUtZDM0YzlhYTI1MDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOJt2euSqzADVlMIe7YyyTECcL6jGdkcMQvH CraBiKB4G9gWtHQg36zF5LY9QqRCzSFBldDSiFL7tkeDqkDP2yNRtMPevLTyt+jt BBR4s9KbDDLhpg0Xnj+vD6pmZQrWmUgwKkHpawQXDEgTRYxW/6BadbNceR2DT2+k 8XtickcnQwWlS/8xuoZq1jQXGEm8EWZozEL8VYzXSu4w33Spa38pd7xmrz9ba3Yf X4joXmTuC0P758m4QdQsFWYN6iwWoQYVkdFiOv1Bkn1o44QxpOK7FjiobPFbwZUf zA7UoMxjzbz+Rq4wxH6r5EyAGgZrs5LjCWC/ddh7LCe3EJa+hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQC4r0UiPgyvV0SCySPceUweaBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzkxYmJlZmEtOWFlYS0z MjJmLTgwN2EtYjViMTE4ZDNiMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESmqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFqZfI2UdfTz7P67WUCjlCUG2gMwhbMls012W6F/8kgYGCta0N3PnOG SMlsysklbaRmD7Pt64CJT52tJx2EiRfuDc1QXu7NFzOK03E2+atWJ9ZoaWvqdWyg 2tCIdkOA+ErrByN3Wk885CTinQR3V6TNhc2q8Z0A+9qqtt86QgHRwrI3guXty1zp t9WfbSIyg1SVoNgPGHQwOQ+io3rjE0yYhZWPYyA4jiF5xBZ7bPpXCeBjF2oULn8V 0uNLcHrOKd46fzPxQIs31TMt1GjKo+VpO3fLNvhvNxqz6Ct1Nuqn34KFCeEmyaIc Cp3mCawZ0RToYd2c171Oj0R0IdXqrUo= -----END CERTIFICATE-----Generated at Sun May 11 16:23:50 2025 by rpki-client