$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa File: 884000e2-fd1c-3bcf-8abc-d10f045ba796.roa (raw, json) Hash identifier: N7dEZkID1nK0lBw3UjqrIjQjCl/Fw53i+iJyLlms14w= Subject key identifier: 3E:F4:4E:91:B7:50:F4:5A:8D:C8:46:C8:95:D3:52:6A:D9:D1:A4:EF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A7540641412A9F7283380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 22394 IP address blocks: 174.41.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:75:40:64:14:12:a9:f7:28:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=3d7340ff-727c-4f47-8de5-063d38bbb90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:5e:77:59:2c:81:c5:79:8d:80:e4:02:96: f7:61:a9:05:25:a9:8a:37:2d:bf:d8:cf:f3:6b:03: 43:01:d8:b0:7f:ce:66:42:f3:00:3b:b4:a6:18:24: 8f:e2:a1:ba:24:db:c8:0b:8d:3e:57:86:b1:34:25: d5:95:80:d7:5e:41:2b:4f:90:50:e3:b9:48:44:f5: d5:d6:4c:85:3f:23:72:9d:3c:b8:34:a3:d0:26:e8: f4:20:bb:13:c1:b6:13:7b:5b:ce:15:36:f6:0b:b7: 1f:a7:4b:32:d1:6f:fd:bf:4e:7e:9f:bd:eb:92:8e: 5b:61:38:7f:63:e4:77:6d:4f:c7:ae:34:fc:48:67: cb:ad:61:52:b9:e6:a7:f5:bc:65:f1:67:ef:0f:cb: 24:eb:39:a1:a6:13:cb:fb:93:ec:40:6a:41:d2:86: 0c:3d:fe:fd:5c:84:96:f4:7b:12:01:ed:d3:0c:c5: c7:f1:0c:d2:e6:0c:c3:4a:9f:a3:96:e3:5f:75:da: 6d:82:72:53:21:ce:10:9a:ab:2d:79:ff:cb:4c:f7: ef:90:b0:dc:99:45:d4:57:a6:9b:0e:a3:65:7c:d3: 2c:60:9b:0e:06:37:eb:8b:a0:16:9b:49:b5:90:f6: c1:cd:cd:c3:83:fb:c3:7a:b8:a7:db:8d:ea:61:e7: c5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F4:4E:91:B7:50:F4:5A:8D:C8:46:C8:95:D3:52:6A:D9:D1:A4:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:bd:0b:89:77:92:52:61:ad:69:b6:71:d5:33:38:ea:47:53: 47:ba:35:39:3d:ed:ec:2e:e5:5c:61:19:05:1b:5e:ac:d7:b8: ee:e8:8c:6f:5e:4d:31:64:c4:1b:8e:e2:9b:45:69:83:7c:ce: bf:b3:71:1a:1a:81:c9:55:67:04:a3:25:1f:bf:5e:17:ee:84: 4e:69:55:02:84:b6:70:9a:4f:04:23:df:cf:76:34:dd:f5:3e: 09:0a:38:9f:b1:41:21:b0:0a:63:ee:3a:33:78:02:2d:4b:cb: bb:25:b1:78:05:74:12:1d:08:1c:f7:6d:5b:73:d9:7e:e1:ea: ea:4c:0e:65:e8:dd:aa:9a:5e:d7:93:af:f7:37:42:79:71:63: d2:be:4a:7b:0f:e0:a6:6d:ff:1a:c5:79:38:76:32:17:e6:1c: 19:78:2b:4a:39:00:19:16:b6:eb:63:60:22:40:ef:0c:6e:bd: 3f:40:c0:e1:57:e0:fe:25:f5:9c:1b:8f:b4:67:62:f0:d2:2c: fd:c4:bb:5c:ce:4c:57:82:1f:8b:09:a5:1e:6f:8b:26:05:9c: 84:e5:ac:29:a7:04:fc:f7:8a:88:bc:22:b2:ab:6b:d5:cd:e8: 7a:27:48:97:f3:8b:03:7e:62:30:be:6a:43:84:b5:99:08:a1: a2:98:81:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnVAZBQSqfcoM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk M2Q3MzQwZmYtNzI3Yy00ZjQ3LThkZTUtMDYzZDM4YmJiOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCxed1ksgcV5jYDkApb3YakFJamKNy2/2M/z awNDAdiwf85mQvMAO7SmGCSP4qG6JNvIC40+V4axNCXVlYDXXkErT5BQ47lIRPXV 1kyFPyNynTy4NKPQJuj0ILsTwbYTe1vOFTb2C7cfp0sy0W/9v05+n73rko5bYTh/ Y+R3bU/HrjT8SGfLrWFSuean9bxl8WfvD8sk6zmhphPL+5PsQGpB0oYMPf79XISW 9HsSAe3TDMXH8QzS5gzDSp+jluNfddptgnJTIc4Qmqstef/LTPfvkLDcmUXUV6ab DqNlfNMsYJsOBjfri6AWm0m1kPbBzc3Dg/vDerin243qYefFtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD70TpG3UPRajchGyJXTUmrZ0aTvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODg0MDAwZTItZmQxYy0z YmNmLThhYmMtZDEwZjA0NWJhNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ69C4l3klJhrWm2cdUzOOpHU0e6NTk97ewu5VxhGQUbXqzXuO7ojG9e TTFkxBuO4ptFaYN8zr+zcRoagclVZwSjJR+/XhfuhE5pVQKEtnCaTwQj3892NN31 PgkKOJ+xQSGwCmPuOjN4Ai1Ly7slsXgFdBIdCBz3bVtz2X7h6upMDmXo3aqaXteT r/c3QnlxY9K+SnsP4KZt/xrFeTh2MhfmHBl4K0o5ABkWtutjYCJA7wxuvT9AwOFX 4P4l9Zwbj7RnYvDSLP3Eu1zOTFeCH4sJpR5viyYFnITlrCmnBPz3ioi8IrKra9XN 6HonSJfziwN+YjC+akOEtZkIoaKYgRc= -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:21 2025 by rpki-client