$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa File: 3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa (raw, json) Hash identifier: UvusirgxASKQ5juDX1zHwF0bxyj7Fk2IfZ2zvkZHtak= Subject key identifier: 67:32:12:12:20:3E:7D:2F:E0:76:99:68:0F:66:5F:C4:79:9C:EC:4E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A7E6F7841B17CF3B7AC00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 22394 IP address blocks: 174.41.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:7e:6f:78:41:b1:7c:f3:b7:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=0b0ee71c-b268-46f5-bb67-c724c0d6cb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:34:60:ff:21:a9:37:bc:15:3d:17:c6:b4: 8f:76:f3:9d:34:fa:c0:75:8a:31:f2:00:0b:7f:56: 0d:40:ca:5c:f6:93:f5:5d:60:e8:56:48:a6:8c:5d: ec:7b:b5:41:0d:bf:f0:02:24:75:c7:2a:f0:f4:11: 7c:25:4b:9d:dd:03:40:35:d7:c8:72:12:36:c2:a6: 64:4a:2f:e8:c0:68:4c:4d:bd:b4:12:3d:7e:57:36: c7:89:b8:1f:00:e7:ba:d9:eb:6d:31:81:4a:f9:78: 04:ec:ba:5b:c7:6c:54:5f:49:69:ce:c1:86:91:7f: 04:0c:96:b0:23:54:f0:a4:09:15:ad:94:1b:f3:bf: 14:68:0d:6a:9f:8d:2e:cf:b7:ba:15:d7:f0:9d:db: 0d:33:52:63:21:ef:90:87:41:a2:7d:51:b6:f8:5e: 16:3d:67:dc:92:a8:a2:b2:ce:fd:cd:aa:1e:22:7e: 09:c9:2c:1d:52:92:40:a5:47:d8:98:bd:b4:63:24: e7:a9:73:a9:42:e9:2d:f5:2d:1b:2b:c4:27:f6:8c: e9:0e:84:9a:f1:25:5d:cb:39:00:a2:70:bf:c8:62: f5:6a:df:19:93:30:36:aa:4a:ec:89:cb:8a:e1:79: 47:14:0b:db:ae:3c:b8:27:ca:bb:f1:d6:07:5c:96: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:32:12:12:20:3E:7D:2F:E0:76:99:68:0F:66:5F:C4:79:9C:EC:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:de:ed:2a:54:aa:6d:81:f2:e7:5e:06:c7:00:8c:f9:3b:69: bd:1c:e7:20:fe:fb:e9:d5:8d:c8:a9:f4:e6:e0:29:3b:0f:91: f5:2e:8e:ab:c6:70:af:78:99:92:f1:16:ba:13:9e:28:51:0a: 6b:fd:5e:52:68:4c:51:73:d9:20:81:d2:5b:67:eb:97:89:0e: 1a:41:dc:43:c5:e2:85:aa:d2:3f:02:2b:a2:b3:e5:82:6b:57: 9f:36:8c:bf:dc:c5:68:98:f4:d8:01:36:8a:a9:99:65:65:b8: d8:ac:bd:4f:0e:15:22:68:c2:1c:60:62:61:df:58:8d:f5:75: c9:25:a3:8a:85:8a:ba:ed:e5:03:be:07:6f:9d:82:71:97:10: c1:f6:cc:75:c5:bb:36:a5:87:cf:a3:4a:62:d7:10:a8:ce:06: 91:31:f8:06:a6:bc:9a:34:fd:75:7d:20:d8:78:c1:8d:51:2f: d6:da:f9:61:a3:67:7a:e7:93:0e:33:7a:60:54:73:d1:22:04: 33:cd:cc:ad:7d:6b:27:8d:a4:ff:74:e7:82:97:50:fd:24:b1: 9f:30:c4:12:b0:ae:59:cd:b9:f1:97:67:b7:0c:63:0c:e1:f9: ff:e5:2c:5b:6e:52:2f:c7:ad:97:8f:ee:ef:e3:cd:ab:64:78: d3:5c:c8:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmn5veEGxfPO3rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MGIwZWU3MWMtYjI2OC00NmY1LWJiNjctYzcyNGMwZDZjYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzds0YP8hqTe8FT0XxrSPdvOdNPrAdYox8gAL f1YNQMpc9pP1XWDoVkimjF3se7VBDb/wAiR1xyrw9BF8JUud3QNANdfIchI2wqZk Si/owGhMTb20Ej1+VzbHibgfAOe62ettMYFK+XgE7Lpbx2xUX0lpzsGGkX8EDJaw I1TwpAkVrZQb878UaA1qn40uz7e6FdfwndsNM1JjIe+Qh0GifVG2+F4WPWfckqii ss79zaoeIn4JySwdUpJApUfYmL20YyTnqXOpQukt9S0bK8Qn9ozpDoSa8SVdyzkA onC/yGL1at8ZkzA2qkrsicuK4XlHFAvbrjy4J8q78dYHXJa9fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcyEhIgPn0v4HaZaA9mX8R5nOxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2U5YmEwNjEtZWQ5NC0z NDczLWFiZmEtMGZhNzdkYTZkMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACve7SpUqm2B8udeBscAjPk7ab0c5yD+++nVjcip9ObgKTsPkfUujqvG cK94mZLxFroTnihRCmv9XlJoTFFz2SCB0ltn65eJDhpB3EPF4oWq0j8CK6Kz5YJr V582jL/cxWiY9NgBNoqpmWVluNisvU8OFSJowhxgYmHfWI31dcklo4qFirrt5QO+ B2+dgnGXEMH2zHXFuzalh8+jSmLXEKjOBpEx+AamvJo0/XV9INh4wY1RL9ba+WGj Z3rnkw4zemBUc9EiBDPNzK19ayeNpP9054KXUP0ksZ8wxBKwrlnNufGXZ7cMYwzh +f/lLFtuUi/HrZeP7u/jzatkeNNcyEg= -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:32 2025 by rpki-client