$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a31dd597-1ffc-36dc-974b-579a5bbf63e3.roa File: a31dd597-1ffc-36dc-974b-579a5bbf63e3.roa (raw, json) Hash identifier: SeMvtq7zQ4/AMxsAoTMua1XdAbk2k04HYco4jTG8Cvc= Subject key identifier: D1:DA:11:ED:83:E7:2C:DF:53:16:88:73:86:1F:D7:8B:6F:D1:19:F5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A023FC83B10BC897D6B0B1620 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a31dd597-1ffc-36dc-974b-579a5bbf63e3.roa Signing time: Thu 29 May 2025 01:00:50 +0000 ROA not before: Thu 29 May 2025 01:00:50 +0000 ROA not after: Wed 27 Aug 2025 01:00:50 +0000 asID: 6167 IP address blocks: 174.254.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:02:3f:c8:3b:10:bc:89:7d:6b:0b:16:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 29 01:00:50 2025 GMT Not After : Aug 27 01:00:50 2025 GMT Subject: CN=1a45d260-113b-4af7-880b-921f7e162140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:dc:93:33:e9:9b:32:3d:ff:ea:1b:af:b0: c3:42:e4:7f:95:85:24:00:ae:28:c0:ae:53:02:e0: da:a3:9e:5f:b0:4f:51:6c:1f:c2:b5:03:75:09:8c: b3:58:cc:37:20:a6:18:0f:89:60:a0:12:86:b6:b5: ff:c3:1c:fc:4a:bd:c2:58:da:0c:25:85:62:50:01: 89:b8:fd:44:60:87:a3:b3:fd:33:55:ff:03:c9:39: 19:fe:47:54:05:e2:d9:c0:d3:8f:8a:0f:68:5d:55: 57:a7:65:2d:ee:08:5f:7d:29:a6:3e:25:aa:2c:ba: 5c:bf:6c:e3:53:07:5f:9c:a2:3c:2b:e2:19:b7:89: 67:be:f1:56:a0:bf:27:f6:8e:86:57:23:2d:30:bc: c8:53:ff:60:d8:e1:84:6f:a7:d2:8a:dd:09:bc:c8: 39:41:e8:94:ee:26:6b:55:c2:20:ee:2e:4e:2d:77: 6b:42:36:85:a8:a0:5f:f4:08:65:e4:d7:b1:05:5b: 5e:d9:1b:f3:4a:1f:38:40:b5:50:97:35:4c:04:9b: bb:2b:a4:92:12:c1:91:d4:57:90:44:ec:76:06:fd: eb:8c:97:a3:d9:71:a8:d2:02:91:e9:c6:53:ed:19: 4f:8a:5d:43:54:3d:09:c9:28:39:46:6c:e9:3f:6e: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DA:11:ED:83:E7:2C:DF:53:16:88:73:86:1F:D7:8B:6F:D1:19:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a31dd597-1ffc-36dc-974b-579a5bbf63e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:07:3f:9c:b1:d2:11:58:ef:0b:e4:c6:ca:9e:69:40:24:c2: 96:4b:5e:23:08:30:c8:85:72:de:91:8a:e8:4f:48:bf:ac:5d: 4d:29:10:63:5f:5c:f0:7b:4a:03:e5:e1:f4:be:3f:64:58:d3: fc:30:07:2b:ee:fa:b7:6a:90:ca:f0:7e:de:7b:8f:29:e0:9c: a3:64:ec:e6:45:4b:56:ee:94:7b:d8:69:53:01:53:37:28:b3: de:59:a3:43:ba:0b:51:74:9e:17:6d:4e:01:d9:9f:fe:38:ba: 3b:82:80:41:a3:9b:7d:56:7b:81:58:88:99:0f:15:65:d4:b9: a6:1e:5f:d1:51:e4:98:2c:cc:40:01:9c:78:02:9b:ea:a5:d0: c7:55:e2:14:5f:1f:27:09:6d:d6:48:08:d5:7c:22:50:9b:99: 58:ef:a6:b7:63:73:05:5b:18:7e:52:77:e0:9e:d7:fd:95:9b: c5:ef:31:bc:8b:5e:83:8f:28:68:f4:dc:7e:2d:30:65:71:e4: e8:7a:9c:2a:96:36:1c:d6:be:c4:ba:97:49:df:47:0e:28:e1: eb:2b:27:dd:86:c9:47:d7:cf:9f:49:be:80:65:e0:b0:74:1d: 16:1f:dd:f2:06:b6:d0:db:38:3c:0a:e0:95:e7:6b:fe:41:ba: 31:7b:9b:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoCP8g7ELyJfWsLFiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyOTAxMDA1MFoXDTI1MDgyNzAxMDA1MFowLzEtMCsGA1UEAxMk MWE0NWQyNjAtMTEzYi00YWY3LTg4MGItOTIxZjdlMTYyMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm7ckzPpmzI9/+obr7DDQuR/lYUkAK4owK5T AuDao55fsE9RbB/CtQN1CYyzWMw3IKYYD4lgoBKGtrX/wxz8Sr3CWNoMJYViUAGJ uP1EYIejs/0zVf8DyTkZ/kdUBeLZwNOPig9oXVVXp2Ut7ghffSmmPiWqLLpcv2zj UwdfnKI8K+IZt4lnvvFWoL8n9o6GVyMtMLzIU/9g2OGEb6fSit0JvMg5QeiU7iZr VcIg7i5OLXdrQjaFqKBf9Ahl5NexBVte2RvzSh84QLVQlzVMBJu7K6SSEsGR1FeQ ROx2Bv3rjJej2XGo0gKR6cZT7RlPil1DVD0JySg5RmzpP24ErQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHaEe2D5yzfUxaIc4Yf14tv0Rn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTMxZGQ1OTctMWZmYy0z NmRjLTk3NGItNTc5YTViYmY2M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErv6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwHP5yx0hFY7wvkxsqeaUAkwpZLXiMIMMiFct6RiuhPSL+sXU0pEGNf XPB7SgPl4fS+P2RY0/wwByvu+rdqkMrwft57jyngnKNk7OZFS1bulHvYaVMBUzco s95Zo0O6C1F0nhdtTgHZn/44ujuCgEGjm31We4FYiJkPFWXUuaYeX9FR5JgszEAB nHgCm+ql0MdV4hRfHycJbdZICNV8IlCbmVjvprdjcwVbGH5Sd+Ce1/2Vm8XvMbyL XoOPKGj03H4tMGVx5Oh6nCqWNhzWvsS6l0nfRw4o4esrJ92GyUfXz59JvoBl4LB0 HRYf3fIGttDbODwK4JXna/5BujF7mxs= -----END CERTIFICATE-----Generated at Tue Jul 1 05:45:50 2025 by rpki-client