$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8d0b7e6-9134-305a-be9d-e61521a42886.roa File: a8d0b7e6-9134-305a-be9d-e61521a42886.roa (raw, json) Hash identifier: tug0yp1MF2RnLL4p6KoZvsCs0J/ruki/2yba9YUOtYw= Subject key identifier: 44:16:8A:18:5F:CB:FB:F0:F6:D9:D7:30:B0:40:8E:D7:FB:75:94:ED Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A72C1423E7159CBECFC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8d0b7e6-9134-305a-be9d-e61521a42886.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 22394 IP address blocks: 174.41.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:72:c1:42:3e:71:59:cb:ec:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=e3ce7e2d-eb49-4757-b852-8543a2d8a15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:61:f4:63:7b:06:b9:42:68:28:c1:d2:91:b4: 71:6d:c4:e0:62:12:bc:76:d2:75:90:f5:d9:50:c9: f7:83:d9:5d:fb:b2:a0:c6:6d:56:5e:77:c5:c1:4a: 83:06:5f:d8:3e:8a:0b:71:2a:02:cc:4c:c1:48:09: 7e:cf:86:79:61:0f:fd:f3:a2:b4:f6:fb:d6:fe:e8: d4:23:e8:4f:d4:90:69:66:66:1c:52:2f:2a:5a:76: 5a:49:d7:ac:49:e9:d2:91:02:d2:f3:16:f2:dd:6a: 2e:fe:a3:80:6c:6c:68:dd:fa:b8:4b:57:01:2e:c0: 69:93:23:f7:5c:3d:75:d7:5a:70:6d:89:2a:0b:39: eb:b2:e6:0d:ae:1c:a2:a2:ae:66:87:c1:c1:5d:34: d9:88:b6:23:43:33:21:56:3f:68:82:58:3a:49:05: c4:2f:12:2e:1a:04:24:81:ab:55:b8:13:c8:e0:a0: f4:bd:3e:e5:13:c3:2b:bd:1e:f2:bc:06:b0:24:9d: 5f:da:39:88:40:e9:43:d2:21:54:52:bd:e1:ac:cf: 3a:29:81:b4:53:fc:e1:23:82:22:f7:9a:05:c8:ea: 00:09:19:5e:23:67:1f:08:2a:fa:25:0b:03:b2:2d: 9b:ab:d7:98:bf:92:97:95:9e:79:80:23:5a:05:da: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:16:8A:18:5F:CB:FB:F0:F6:D9:D7:30:B0:40:8E:D7:FB:75:94:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8d0b7e6-9134-305a-be9d-e61521a42886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:10:92:b1:c6:a4:4d:65:93:31:b3:88:37:89:50:1f:1f:a6: f5:a6:0c:c4:4e:59:00:a4:54:58:2f:cf:f4:d2:d3:68:67:33: cd:16:2c:67:16:41:03:50:6a:5f:d4:42:84:d0:4d:74:a6:32: eb:16:fd:b6:8b:a2:74:05:5b:7a:39:91:a9:10:c4:d7:54:16: d7:e7:79:19:cb:d3:e3:bf:1e:8b:06:fb:20:85:fe:fe:85:ea: 1b:97:ce:83:0d:9a:cb:1a:7e:9e:af:41:5b:d1:81:b6:69:3d: 1e:c6:ce:67:b4:bd:54:25:2a:61:96:cc:b2:82:d9:9e:2a:a0: 3b:db:a1:7d:db:64:c3:7a:9d:6f:ae:5c:78:86:6a:23:5c:27: 0d:9b:20:5a:28:07:8b:aa:ee:ec:4b:fa:e3:61:00:5d:f7:7c: 14:33:ab:ba:78:61:ae:1e:bf:13:36:6a:1f:80:2d:ad:fa:22: 24:65:c1:e4:ee:6b:c5:fc:4d:50:09:ec:9f:4d:37:51:fc:8e: 97:57:ba:a1:49:4c:24:d1:a4:a8:17:bb:46:d7:72:38:5c:8e: e5:92:de:53:5f:a7:19:ba:50:09:99:d8:0c:62:29:17:85:7f: 9f:ec:e4:8b:40:b1:a9:3c:20:95:5f:c5:a5:84:ad:f1:9d:c2: a3:80:25:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnLBQj5xWcvs/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZTNjZTdlMmQtZWI0OS00NzU3LWI4NTItODU0M2EyZDhhMTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGH0Y3sGuUJoKMHSkbRxbcTgYhK8dtJ1kPXZ UMn3g9ld+7Kgxm1WXnfFwUqDBl/YPooLcSoCzEzBSAl+z4Z5YQ/986K09vvW/ujU I+hP1JBpZmYcUi8qWnZaSdesSenSkQLS8xby3Wou/qOAbGxo3fq4S1cBLsBpkyP3 XD1111pwbYkqCznrsuYNrhyioq5mh8HBXTTZiLYjQzMhVj9oglg6SQXELxIuGgQk gatVuBPI4KD0vT7lE8MrvR7yvAawJJ1f2jmIQOlD0iFUUr3hrM86KYG0U/zhI4Ii 95oFyOoACRleI2cfCCr6JQsDsi2bq9eYv5KXlZ55gCNaBdpbTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQWihhfy/vw9tnXMLBAjtf7dZTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYThkMGI3ZTYtOTEzNC0z MDVhLWJlOWQtZTYxNTIxYTQyODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgQkrHGpE1lkzGziDeJUB8fpvWmDMROWQCkVFgvz/TS02hnM80WLGcW QQNQal/UQoTQTXSmMusW/baLonQFW3o5kakQxNdUFtfneRnL0+O/HosG+yCF/v6F 6huXzoMNmssafp6vQVvRgbZpPR7Gzme0vVQlKmGWzLKC2Z4qoDvboX3bZMN6nW+u XHiGaiNcJw2bIFooB4uq7uxL+uNhAF33fBQzq7p4Ya4evxM2ah+ALa36IiRlweTu a8X8TVAJ7J9NN1H8jpdXuqFJTCTRpKgXu0bXcjhcjuWS3lNfpxm6UAmZ2AxiKReF f5/s5ItAsak8IJVfxaWErfGdwqOAJUc= -----END CERTIFICATE-----Generated at Sun May 11 11:49:28 2025 by rpki-client