$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f022de3-d19d-32f7-b1fc-39562458ddc5.roa File: 3f022de3-d19d-32f7-b1fc-39562458ddc5.roa (raw, json) Hash identifier: KxVcIvbloEV/s3V3dhyEkfxE8Cj9xSFEb7pScVwSG7U= Subject key identifier: 67:CD:AC:43:EC:8B:30:3D:A9:53:C3:65:92:48:F2:DC:56:AD:C6:93 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A751FDC7ADA5E7EA2F680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f022de3-d19d-32f7-b1fc-39562458ddc5.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 22394 IP address blocks: 174.41.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:75:1f:dc:7a:da:5e:7e:a2:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=8ccb4cc4-1f54-4c76-84e6-c180643a71b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fc:9a:3f:db:32:ec:4f:ed:b9:a9:f2:53:8c: 48:11:37:5d:10:d3:0f:37:48:e5:16:b8:1b:ec:a9: 56:49:e6:88:41:ac:5a:65:c2:c8:b3:a2:68:87:66: c1:a2:3f:56:db:e3:22:0e:d0:3c:7b:08:96:67:f8: fd:c1:1b:94:5a:91:da:15:ea:6b:8b:3f:d3:04:7e: 18:0c:cc:1e:36:ee:8a:ba:1e:90:40:90:2a:62:c4: 59:0e:a6:a6:2a:b9:ce:b1:d8:88:39:d4:a4:7d:62: e0:7f:ca:20:93:5b:b6:a0:b9:82:b2:b0:2b:78:4f: 09:d2:ca:ea:d3:5d:51:51:f0:5a:dc:db:a2:52:85: 5e:a6:71:bc:b0:ae:84:c4:15:3b:e6:88:32:bc:ca: f2:4d:a4:61:30:81:6d:9b:bd:18:5e:bc:92:54:1d: 22:1f:c8:66:b0:59:f0:15:a4:2d:da:a0:79:b8:54: 4e:bf:9c:8f:a3:b1:f4:aa:74:53:5b:b9:86:87:07: 7c:e7:71:61:a7:8c:13:bc:e6:09:04:ec:a8:3d:10: e4:6a:d8:38:4f:f6:1a:49:69:c3:7b:e1:e0:77:35: 2b:ec:c7:08:db:2c:4f:dd:44:ff:75:2c:27:8f:5a: 7f:dc:60:f8:4c:44:ca:5b:0d:ff:4e:e3:52:aa:ca: 6c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CD:AC:43:EC:8B:30:3D:A9:53:C3:65:92:48:F2:DC:56:AD:C6:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f022de3-d19d-32f7-b1fc-39562458ddc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:51:64:39:e0:ac:09:0e:08:e2:cd:3b:89:97:3d:a3:93:25: e4:c4:4b:13:c3:fe:2b:c9:e9:b1:17:fd:d9:59:4c:5c:79:bf: 45:59:dd:6f:9f:1a:13:e8:09:ae:31:20:2b:49:9d:92:50:54: 50:20:49:30:4a:3a:da:a6:95:4d:26:01:d1:65:0d:e3:ac:c1: 7c:af:db:38:27:b8:23:16:81:1c:44:6c:88:71:61:7a:02:46: c1:80:a0:f0:e2:1c:6a:35:58:91:4c:9c:cb:9a:29:3d:1a:86: 1e:24:94:ee:5c:31:fa:b0:44:fb:15:1f:e9:2c:e2:cd:66:ef: 0c:19:08:86:e0:b8:04:02:ad:4b:4d:56:7b:d1:08:b3:1a:42: 19:81:9f:aa:60:56:e1:49:38:17:bd:67:10:c4:e6:d7:f1:94: 8e:f5:ac:9d:af:d1:7e:7c:ab:fb:41:a0:e6:81:dc:55:c3:d2: 29:5a:ae:57:ff:c0:27:b7:79:ce:c5:9a:1b:ba:df:90:7d:1b: a4:f7:71:ca:48:8c:bf:ac:1d:2e:e3:3a:09:94:c8:24:86:84: 73:e5:c5:6b:64:08:72:b8:ac:44:a6:1a:da:69:fa:1f:d2:51: 69:ae:43:72:4d:46:51:ea:a5:e9:1c:9a:87:5b:8f:7d:28:aa: 04:4b:6a:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnUf3HraXn6i9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk OGNjYjRjYzQtMWY1NC00Yzc2LTg0ZTYtYzE4MDY0M2E3MWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/yaP9sy7E/tuanyU4xIETddENMPN0jlFrgb 7KlWSeaIQaxaZcLIs6Joh2bBoj9W2+MiDtA8ewiWZ/j9wRuUWpHaFepriz/TBH4Y DMweNu6Kuh6QQJAqYsRZDqamKrnOsdiIOdSkfWLgf8ogk1u2oLmCsrAreE8J0srq 011RUfBa3NuiUoVepnG8sK6ExBU75ogyvMryTaRhMIFtm70YXrySVB0iH8hmsFnw FaQt2qB5uFROv5yPo7H0qnRTW7mGhwd853Fhp4wTvOYJBOyoPRDkatg4T/YaSWnD e+HgdzUr7McI2yxP3UT/dSwnj1p/3GD4TETKWw3/TuNSqsps3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfNrEPsizA9qVPDZZJI8txWrcaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2YwMjJkZTMtZDE5ZC0z MmY3LWIxZmMtMzk1NjI0NThkZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrikgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARRZDngrAkOCOLNO4mXPaOTJeTESxPD/ivJ6bEX/dlZTFx5v0VZ3W+f GhPoCa4xICtJnZJQVFAgSTBKOtqmlU0mAdFlDeOswXyv2zgnuCMWgRxEbIhxYXoC RsGAoPDiHGo1WJFMnMuaKT0ahh4klO5cMfqwRPsVH+ks4s1m7wwZCIbguAQCrUtN VnvRCLMaQhmBn6pgVuFJOBe9ZxDE5tfxlI71rJ2v0X58q/tBoOaB3FXD0ilarlf/ wCe3ec7Fmhu635B9G6T3ccpIjL+sHS7jOgmUyCSGhHPlxWtkCHK4rESmGtpp+h/S UWmuQ3JNRlHqpekcmodbj30oqgRLamk= -----END CERTIFICATE-----Generated at Sat May 10 20:53:49 2025 by rpki-client