$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1da2dc0-f022-3c72-9695-1b8f5641bce0.roa File: a1da2dc0-f022-3c72-9695-1b8f5641bce0.roa (raw, json) Hash identifier: F/+q14CIUU8BV79NVMVqr/UopH9pALXjgC7LXVdIdHs= Subject key identifier: B8:1D:9E:E7:30:DE:7F:2B:56:EA:06:8B:17:84:17:6E:40:EA:82:A0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A7EAC2E316FF0593C5DC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1da2dc0-f022-3c72-9695-1b8f5641bce0.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 6167 IP address blocks: 174.42.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:7e:ac:2e:31:6f:f0:59:3c:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=36bf22c5-cbf5-43bf-a984-83bee80f3cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2f:4f:3f:23:ff:b9:e2:1a:a3:c2:41:b2:44: 3e:70:1a:1c:8b:71:f5:09:99:5e:81:88:7c:fb:f4: b7:ed:5e:f5:d7:1c:7d:a3:ce:c2:c0:87:d2:d4:ca: 8d:0e:93:12:ba:69:a3:a1:94:ac:1a:2b:b5:90:6a: e6:44:e1:8c:e5:d3:f2:e7:de:14:9c:61:37:b9:cd: c1:d3:e2:6f:d3:05:37:12:9d:43:bd:10:c5:e9:06: c0:eb:7a:ee:77:85:34:a6:53:6d:1e:9b:79:01:87: 1a:fd:24:de:88:d6:c4:7a:d0:62:57:81:dd:d1:d2: 38:8c:49:02:0d:d0:ef:80:78:e9:72:15:71:ed:ae: 59:c7:a9:cd:7b:a3:c1:a4:50:7f:32:46:0b:14:7b: fb:3d:2c:cf:99:b4:5d:0b:61:c7:15:a1:35:8c:01: 0d:95:1e:c6:07:de:77:98:a6:43:35:79:43:f7:fc: c2:9b:0f:55:f7:28:73:c9:75:fa:51:47:ed:c4:96: a4:62:8a:25:a5:ae:23:45:13:16:b4:12:54:c0:58: da:26:19:ba:f2:ac:ab:6d:72:b1:48:ae:07:2a:e7: 26:c0:ad:ad:cd:25:3d:62:6b:eb:28:0d:19:df:35: 27:a2:35:a7:8b:6d:78:37:b7:9d:aa:f7:5b:98:40: b9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1D:9E:E7:30:DE:7F:2B:56:EA:06:8B:17:84:17:6E:40:EA:82:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1da2dc0-f022-3c72-9695-1b8f5641bce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:22:e6:07:19:92:11:d7:42:93:b7:4e:4b:b1:48:40:c1:27: 68:47:14:22:b2:5d:22:11:47:6f:d7:97:0a:0b:58:fe:00:21: ba:33:46:87:ed:68:9d:1a:50:b3:a0:45:3d:68:31:29:42:36: c7:d7:f1:b5:28:32:2d:f6:4b:75:da:b6:8d:12:d9:62:d2:ce: c6:5e:26:32:44:51:91:5b:23:d5:db:29:0d:15:d6:8f:be:f9: 4d:8e:cc:6e:3c:c4:40:7b:90:db:54:f9:24:11:2b:7e:7c:81: 2e:f7:d6:69:bc:0d:aa:52:6f:7f:73:8c:45:78:86:98:3c:de: eb:3a:f6:d3:8b:5d:47:b4:3a:38:d3:02:03:d5:73:a2:d8:70: 32:76:d7:15:04:37:50:a7:67:89:a4:3b:c1:59:d2:3e:70:36: fb:c8:eb:05:0a:f5:0b:b8:a5:88:3c:09:41:5f:3c:31:f0:0d: d3:20:cc:6a:26:55:4a:43:62:6e:fb:86:83:90:4c:be:02:2a: 31:98:d6:20:b7:01:56:11:18:3e:9f:bf:39:65:33:b1:22:0b: 6b:a0:eb:c9:89:20:a2:a4:5d:1f:99:33:f5:1b:43:c6:71:4c: 16:ec:11:7a:57:c5:60:ff:c3:d9:20:12:95:a2:95:e2:86:94: 4e:dd:36:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmn6sLjFv8Fk8XcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MzZiZjIyYzUtY2JmNS00M2JmLWE5ODQtODNiZWU4MGYzY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC9PPyP/ueIao8JBskQ+cBoci3H1CZlegYh8 +/S37V711xx9o87CwIfS1MqNDpMSummjoZSsGiu1kGrmROGM5dPy594UnGE3uc3B 0+Jv0wU3Ep1DvRDF6QbA63rud4U0plNtHpt5AYca/STeiNbEetBiV4Hd0dI4jEkC DdDvgHjpchVx7a5Zx6nNe6PBpFB/MkYLFHv7PSzPmbRdC2HHFaE1jAENlR7GB953 mKZDNXlD9/zCmw9V9yhzyXX6UUftxJakYoolpa4jRRMWtBJUwFjaJhm68qyrbXKx SK4HKucmwK2tzSU9YmvrKA0Z3zUnojWni214N7edqvdbmEC5vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgdnucw3n8rVuoGixeEF25A6oKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTFkYTJkYzAtZjAyMi0z YzcyLTk2OTUtMWI4ZjU2NDFiY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErirwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoi5gcZkhHXQpO3TkuxSEDBJ2hHFCKyXSIRR2/XlwoLWP4AIbozRoft aJ0aULOgRT1oMSlCNsfX8bUoMi32S3Xato0S2WLSzsZeJjJEUZFbI9XbKQ0V1o++ +U2OzG48xEB7kNtU+SQRK358gS731mm8DapSb39zjEV4hpg83us69tOLXUe0OjjT AgPVc6LYcDJ21xUEN1CnZ4mkO8FZ0j5wNvvI6wUK9Qu4pYg8CUFfPDHwDdMgzGom VUpDYm77hoOQTL4CKjGY1iC3AVYRGD6fvzllM7EiC2ug68mJIKKkXR+ZM/UbQ8Zx TBbsEXpXxWD/w9kgEpWileKGlE7dNj4= -----END CERTIFICATE-----Generated at Sun May 11 09:38:52 2025 by rpki-client