$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa File: 3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa (raw, json) Hash identifier: tNlyrGiHTHXvp6fLrN6QHWLpZIK5ffmdE6F2UqlXZno= Subject key identifier: DE:CC:29:9E:D3:5A:73:52:E6:A3:5E:4F:F5:70:0B:B9:4C:7C:05:5B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A748D76166B0711B8ECB0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 6167 IP address blocks: 174.43.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:74:8d:76:16:6b:07:11:b8:ec:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=96d7f4c3-5035-48a8-afcc-870061b6d22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:23:32:da:e6:ef:bb:48:bf:cb:26:77:f8:43: 2b:b9:df:03:7d:14:1d:79:6d:1a:09:fc:39:c9:e7: 71:87:90:d0:08:b0:ae:f1:5f:19:bf:1b:cb:4f:25: a7:26:e8:37:6c:d4:90:5e:c9:ae:28:c5:ba:fb:06: 09:51:9b:eb:4d:87:d0:c5:bb:45:92:43:4b:a9:0c: 90:29:c7:6c:6a:0f:d2:84:0b:5f:5c:7d:2e:cc:92: 7f:33:76:66:3e:a9:ea:d8:a7:98:05:54:a7:a5:cc: 60:33:7b:d0:ca:d8:a1:14:a8:7f:a8:dc:a8:fb:ff: 72:c5:7f:40:a9:6a:a9:a1:21:3b:69:a9:ac:06:bd: 1b:7c:e8:55:81:ab:e3:47:dc:37:73:1e:78:27:cf: d2:04:26:60:e4:02:49:ed:75:30:0f:7b:79:a1:3e: 09:88:c1:7f:98:ae:6b:3e:10:e9:a6:9f:05:a8:63: 77:7a:27:d5:bc:54:fc:25:26:a3:cf:d3:fd:4d:e3: 7b:1c:ea:51:23:a3:41:4b:12:01:f7:56:c9:e9:08: 9f:8a:b4:d0:8a:7c:27:b5:09:ee:88:f1:72:1f:b3: 06:3e:81:e5:8a:a1:44:eb:2c:9d:b6:1b:2e:a8:e1: 5c:be:a9:e4:46:e2:f3:c0:27:61:98:c5:6d:72:af: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CC:29:9E:D3:5A:73:52:E6:A3:5E:4F:F5:70:0B:B9:4C:7C:05:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.43.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c5:f1:f9:6d:3a:d3:3b:e9:1d:bc:75:67:73:03:34:13:a5: 0a:3b:08:01:c7:77:ca:f6:18:8e:20:d3:0f:9e:6e:d5:f9:8d: 73:2e:59:8a:ad:e5:59:e2:d1:d0:e3:7e:d6:3b:63:19:16:f3: 69:81:b8:3f:5e:b6:7b:97:10:e3:4f:12:18:f4:61:1e:97:1b: 0e:25:57:2c:1c:d9:cb:06:15:cc:8b:ff:c7:70:02:b7:a2:27: 27:63:28:ff:fe:58:dc:a9:99:d4:5f:a3:81:ef:b2:e9:fb:1e: b7:d1:4a:32:d2:fc:37:82:a3:a1:21:03:b9:4f:40:4e:1c:04: c7:6e:f9:e1:0c:38:d2:b5:0f:0c:0f:dc:29:34:ea:1a:8f:5b: 46:34:05:66:16:79:4f:e4:7b:5b:ea:26:be:b3:bd:e7:b9:45: 05:d1:0b:35:b6:d5:d7:9d:51:96:f5:50:c0:35:4b:70:0e:54: 56:87:84:20:59:c1:7a:a1:61:6e:bb:9a:d5:3d:74:1f:fc:57: cd:06:45:e0:67:02:f4:51:77:a0:ac:38:7a:9d:ec:60:90:7b: 30:56:2f:01:23:bb:0f:ad:c3:d8:05:30:94:de:a5:9d:c6:a4: 8d:45:a7:55:ca:7c:4a:ff:4c:01:c8:29:ec:c7:bd:07:95:a5: 6e:d9:44:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnSNdhZrBxG47LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk OTZkN2Y0YzMtNTAzNS00OGE4LWFmY2MtODcwMDYxYjZkMjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSMy2ubvu0i/yyZ3+EMrud8DfRQdeW0aCfw5 yedxh5DQCLCu8V8ZvxvLTyWnJug3bNSQXsmuKMW6+wYJUZvrTYfQxbtFkkNLqQyQ Kcdsag/ShAtfXH0uzJJ/M3ZmPqnq2KeYBVSnpcxgM3vQytihFKh/qNyo+/9yxX9A qWqpoSE7aamsBr0bfOhVgavjR9w3cx54J8/SBCZg5AJJ7XUwD3t5oT4JiMF/mK5r PhDppp8FqGN3eifVvFT8JSajz9P9TeN7HOpRI6NBSxIB91bJ6QifirTQinwntQnu iPFyH7MGPoHliqFE6yydthsuqOFcvqnkRuLzwCdhmMVtcq8wpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7MKZ7TWnNS5qNeT/VwC7lMfAVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2IzYjliM2UtMWJlMS0z YjA0LTkyZjQtOTBjNzY0ZGVjZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErisgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXF8fltOtM76R28dWdzAzQTpQo7CAHHd8r2GI4g0w+ebtX5jXMuWYqt 5Vni0dDjftY7YxkW82mBuD9etnuXEONPEhj0YR6XGw4lVywc2csGFcyL/8dwArei JydjKP/+WNypmdRfo4Hvsun7HrfRSjLS/DeCo6EhA7lPQE4cBMdu+eEMONK1DwwP 3Ck06hqPW0Y0BWYWeU/ke1vqJr6zvee5RQXRCzW21dedUZb1UMA1S3AOVFaHhCBZ wXqhYW67mtU9dB/8V80GReBnAvRRd6CsOHqd7GCQezBWLwEjuw+tw9gFMJTepZ3G pI1Fp1XKfEr/TAHIKezHvQeVpW7ZROs= -----END CERTIFICATE-----Generated at Mon Jun 30 13:35:25 2025 by rpki-client