$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a0b5109-d3a3-3225-9201-51db0328d9da.roa File: 6a0b5109-d3a3-3225-9201-51db0328d9da.roa (raw, json) Hash identifier: iFt8OqO5pSOjhZ1cP7PnOJkyVWxzRl5e8E1WkaVFIvY= Subject key identifier: AD:DD:7A:EB:A4:44:B4:97:12:F2:2C:D2:4F:08:FC:D5:5A:BD:26:5F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A74F50A4EC354A2E53D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a0b5109-d3a3-3225-9201-51db0328d9da.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 6167 IP address blocks: 174.42.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:74:f5:0a:4e:c3:54:a2:e5:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=00834900-f1be-46d5-b9e3-a6a4ac222807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ed:6f:d2:32:14:d9:31:88:cd:44:4e:db:3c: f8:06:ea:85:c1:4e:f4:d7:d7:1c:53:f0:67:21:90: 71:be:74:c4:21:27:84:b2:23:65:d2:25:5e:41:e7: 9d:a0:fe:58:01:e8:9b:5a:57:d9:82:26:17:22:af: 0e:b6:f4:c3:50:5d:57:2d:b0:e3:5f:d0:8f:e3:de: d2:4c:44:9e:13:56:75:97:77:6c:49:bf:f2:e0:27: 53:58:74:3b:d9:5c:51:a6:25:95:ea:cb:21:d4:af: 2b:6d:e3:95:be:2f:43:f3:8e:b0:f0:58:86:01:84: e7:25:8e:a2:10:a5:0e:83:2e:ee:a3:a1:2b:66:0d: 57:c9:8b:64:54:da:10:d4:2e:1e:59:f0:88:c4:ae: 9e:c3:93:6e:8d:24:4b:c3:1e:1e:da:53:63:1b:a0: c0:57:a3:54:31:6b:cf:6f:2a:1d:db:c7:ce:78:ed: 8a:9f:41:7e:a1:a8:df:e7:38:44:d7:c2:ab:18:68: 01:a3:58:01:79:44:85:b1:1b:09:1e:3c:06:4a:9f: 55:a3:69:fe:4c:c7:c3:48:b1:b7:0a:f7:18:2d:80: 4e:f3:78:35:9f:9b:3f:d8:d0:33:5d:43:d7:84:a5: 0c:4a:00:61:38:0d:53:60:a5:4b:29:94:52:5d:dc: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DD:7A:EB:A4:44:B4:97:12:F2:2C:D2:4F:08:FC:D5:5A:BD:26:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a0b5109-d3a3-3225-9201-51db0328d9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:2d:cb:bd:27:78:fd:0d:ef:b7:67:8e:54:ae:47:6b:bc:16: e2:9c:be:6e:6d:63:00:fd:e3:6a:1c:65:5f:f4:59:99:55:dc: 18:82:ed:db:4b:7a:20:11:da:fe:28:c1:51:f5:8e:db:b1:97: 81:b9:52:a7:ed:4d:8d:68:6c:0c:4a:70:05:02:1c:76:b4:41: 15:2d:9a:f1:bb:ce:5a:53:a6:ed:06:f1:16:8a:7b:4a:32:01: 8f:fb:28:38:8e:8f:b8:a7:54:f5:af:08:c3:13:d0:67:bc:6c: da:38:40:80:cd:5a:b5:c2:7f:40:24:be:83:1a:ed:cc:1b:09: 3e:11:55:3e:05:75:23:29:d7:6e:61:90:5d:fd:66:9a:dc:43: 34:8b:e7:55:57:67:30:b8:b2:5f:75:eb:2c:2d:09:ba:80:b1: d0:5b:63:06:57:ad:77:82:65:85:19:68:e3:96:8b:ac:6f:93: 55:8b:23:0f:db:4c:f7:18:3b:6c:35:17:28:31:0b:04:a0:83: 7d:c7:95:c7:54:ee:b5:07:a1:9c:23:62:c0:ff:9b:80:1d:8e: f8:60:fa:39:f2:70:65:a0:1b:2f:25:b1:af:d6:5f:ae:02:1e: 13:b9:d4:aa:19:82:6b:00:cf:10:43:a6:c0:ce:43:23:27:50: ff:24:7e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnT1Ck7DVKLlPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MDA4MzQ5MDAtZjFiZS00NmQ1LWI5ZTMtYTZhNGFjMjIyODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+1v0jIU2TGIzURO2zz4BuqFwU7019ccU/Bn IZBxvnTEISeEsiNl0iVeQeedoP5YAeibWlfZgiYXIq8OtvTDUF1XLbDjX9CP497S TESeE1Z1l3dsSb/y4CdTWHQ72VxRpiWV6ssh1K8rbeOVvi9D846w8FiGAYTnJY6i EKUOgy7uo6ErZg1XyYtkVNoQ1C4eWfCIxK6ew5NujSRLwx4e2lNjG6DAV6NUMWvP byod28fOeO2Kn0F+oajf5zhE18KrGGgBo1gBeUSFsRsJHjwGSp9Vo2n+TMfDSLG3 CvcYLYBO83g1n5s/2NAzXUPXhKUMSgBhOA1TYKVLKZRSXdyNkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3deuukRLSXEvIs0k8I/NVavSZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmEwYjUxMDktZDNhMy0z MjI1LTkyMDEtNTFkYjAzMjhkOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkty70neP0N77dnjlSuR2u8FuKcvm5tYwD942ocZV/0WZlV3BiC7dtL eiAR2v4owVH1jtuxl4G5UqftTY1obAxKcAUCHHa0QRUtmvG7zlpTpu0G8RaKe0oy AY/7KDiOj7inVPWvCMMT0Ge8bNo4QIDNWrXCf0AkvoMa7cwbCT4RVT4FdSMp125h kF39ZprcQzSL51VXZzC4sl916ywtCbqAsdBbYwZXrXeCZYUZaOOWi6xvk1WLIw/b TPcYO2w1FygxCwSgg33HlcdU7rUHoZwjYsD/m4Adjvhg+jnycGWgGy8lsa/WX64C HhO51KoZgmsAzxBDpsDOQyMnUP8kfkA= -----END CERTIFICATE-----Generated at Sun May 11 10:27:58 2025 by rpki-client