$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f288e7-5795-3db3-9395-9c6c0cd1d5c3.roa File: 98f288e7-5795-3db3-9395-9c6c0cd1d5c3.roa (raw, json) Hash identifier: KuCUsv/oqEJ1gofvdNKruEmT8w65cL3VYm7O9RTWhw0= Subject key identifier: 04:B2:67:AF:D1:2D:86:A9:54:53:8D:66:D9:46:CA:FD:4C:6F:57:82 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849C79F7BDEF55E103E122C4C40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f288e7-5795-3db3-9395-9c6c0cd1d5c3.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.246.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:7b:de:f5:5e:10:3e:12:2c:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=bf3b4e6e-cd86-419a-b6c7-d715a66a9f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e6:15:22:9e:c5:38:a4:0f:b2:5a:c7:d4:fa: 0f:3f:86:5a:24:ee:5b:58:11:8e:3b:71:c4:34:1c: 7d:2a:50:27:e2:44:cf:1d:9e:23:bb:e5:b3:97:89: a5:4d:0d:9f:2e:9c:ce:74:c7:06:07:3f:d0:42:6b: 0c:4a:f5:d3:94:1d:a4:37:a9:53:28:8e:df:3a:7d: e7:7c:2c:3f:4a:80:e6:8c:eb:08:73:38:67:51:d1: e5:08:e2:68:2f:5a:18:4b:62:22:17:f9:2e:0e:75: df:f4:db:cc:60:0f:a8:4f:26:62:1f:35:1f:49:88: fc:c9:25:21:14:0a:2f:90:26:a6:90:86:ae:b5:81: 7c:76:93:9d:00:c3:95:b3:02:de:48:51:2a:2c:2a: ae:0c:8c:c2:ac:bf:67:c0:79:35:08:30:94:cd:dc: 65:d6:95:3c:31:2e:42:6d:d4:62:2f:6e:bb:ff:97: c5:ce:05:9f:ca:17:62:6f:e9:a0:b0:67:9a:4b:8c: 49:61:45:5a:fe:c8:62:57:aa:70:5e:de:67:45:8d: 46:4e:ec:8c:0d:19:57:f2:ee:fb:fe:2f:d9:e3:d8: 3e:bd:3a:73:9c:52:e0:ab:e4:73:c3:53:87:1b:34: fd:67:68:f3:9c:9a:c8:f7:0b:29:2a:60:d9:b7:58: 28:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B2:67:AF:D1:2D:86:A9:54:53:8D:66:D9:46:CA:FD:4C:6F:57:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f288e7-5795-3db3-9395-9c6c0cd1d5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.246.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:91:55:32:92:20:85:a5:77:cd:bb:bf:e5:f1:71:d5:e7:6d: 8a:e6:8a:fb:90:e9:80:ba:25:79:4b:3b:3e:87:39:cd:64:f1: 70:42:cc:cd:8d:2e:c0:1d:0b:9f:0c:38:e6:5e:1c:1a:3e:27: 7e:05:cf:64:bb:d8:5a:d7:c3:dd:03:78:e1:14:d2:b2:33:9c: 92:a6:e1:2a:32:d6:ed:94:65:a5:50:bd:cd:54:45:6f:ef:f3: 02:30:41:80:73:95:43:ab:ac:71:64:5d:61:a3:e1:65:4a:b6: 67:32:2b:d0:13:9b:63:31:e4:6a:c3:84:ca:ec:f0:5a:b6:90: 89:57:d5:6c:72:da:49:19:d8:a2:a0:ee:57:d6:1a:95:93:60: c9:1d:56:36:65:7d:ed:87:d8:1d:15:bb:17:6d:97:0e:10:84: 48:3c:1e:94:4f:17:e7:d7:b2:aa:5c:33:62:d8:44:bc:8d:50: d5:5a:b7:8e:20:42:b1:30:ed:3e:72:c7:d0:ab:c4:19:f5:10: 0a:e3:cb:2d:1b:da:64:f0:53:b3:fd:d9:a1:c0:2c:9c:a8:07: 55:19:d8:89:05:db:e4:5e:1e:5c:d9:83:26:a8:41:cb:4e:e0: 0e:89:e9:dc:99:d6:f2:6c:36:5a:0e:03:59:d8:48:ba:21:80: c0:36:d9:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3ve9V4QPhIsTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk YmYzYjRlNmUtY2Q4Ni00MTlhLWI2YzctZDcxNWE2NmE5ZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuYVIp7FOKQPslrH1PoPP4ZaJO5bWBGOO3HE NBx9KlAn4kTPHZ4ju+Wzl4mlTQ2fLpzOdMcGBz/QQmsMSvXTlB2kN6lTKI7fOn3n fCw/SoDmjOsIczhnUdHlCOJoL1oYS2IiF/kuDnXf9NvMYA+oTyZiHzUfSYj8ySUh FAovkCamkIautYF8dpOdAMOVswLeSFEqLCquDIzCrL9nwHk1CDCUzdxl1pU8MS5C bdRiL267/5fFzgWfyhdib+mgsGeaS4xJYUVa/shiV6pwXt5nRY1GTuyMDRlX8u77 /i/Z49g+vTpznFLgq+Rzw1OHGzT9Z2jznJrI9wspKmDZt1goIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASyZ6/RLYapVFONZtlGyv1Mb1eCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOThmMjg4ZTctNTc5NS0z ZGIzLTkzOTUtOWM2YzBjZDFkNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKRVTKSIIWld827v+XxcdXnbYrmivuQ6YC6JXlLOz6HOc1k8XBCzM2N LsAdC58MOOZeHBo+J34Fz2S72FrXw90DeOEU0rIznJKm4Soy1u2UZaVQvc1URW/v 8wIwQYBzlUOrrHFkXWGj4WVKtmcyK9ATm2Mx5GrDhMrs8Fq2kIlX1Wxy2kkZ2KKg 7lfWGpWTYMkdVjZlfe2H2B0Vuxdtlw4QhEg8HpRPF+fXsqpcM2LYRLyNUNVat44g QrEw7T5yx9CrxBn1EArjyy0b2mTwU7P92aHALJyoB1UZ2IkF2+ReHlzZgyaoQctO 4A6J6dyZ1vJsNloOA1nYSLohgMA22fQ= -----END CERTIFICATE-----Generated at Sun May 11 17:08:28 2025 by rpki-client