$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa File: aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa (raw, json) Hash identifier: iAaphEk09JNM79r0ybM8Doo4jUZng47o95c1LjAusyQ= Subject key identifier: 8F:2A:39:E7:AD:C0:FC:13:DE:1D:29:E6:CE:8C:82:2A:9B:D7:47:20 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A74996545174042974F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 6167 IP address blocks: 174.42.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:74:99:65:45:17:40:42:97:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=9009a0f9-c6f6-48d9-9e9d-8569b317ea2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:fe:7b:c5:a0:69:75:76:48:3a:c8:e1:d0: d2:42:24:fd:9c:21:8e:bf:ef:95:e0:fa:b0:64:e9: 41:39:09:29:34:7f:7b:0c:89:ab:a5:3b:a6:09:55: a9:01:72:17:1d:8c:23:f0:52:9c:71:0a:d9:66:1a: 82:bd:97:fc:51:06:90:f9:1e:24:fc:90:87:ed:57: 73:3b:3c:8e:f5:96:00:94:38:27:c6:54:88:40:f1: 17:ae:f7:ff:c1:0b:a2:09:1e:d4:7e:95:06:88:0a: 3f:b3:13:4c:fb:c3:e3:35:37:a6:d7:20:0b:18:71: cf:39:5d:77:8d:bb:cd:0d:ba:11:ee:44:e7:86:72: 45:48:12:80:f0:fa:14:0f:d4:4d:44:89:a0:69:03: 5b:15:19:51:66:24:97:4a:34:1a:46:4f:88:f3:2b: 20:eb:f2:9a:35:c5:a4:b9:6d:7f:24:d1:c6:3e:bd: 50:ae:f9:4b:4f:d4:77:f3:29:dd:4c:e3:cd:1e:4e: 6a:d2:e1:56:64:8e:83:13:0a:19:72:19:1a:a5:6d: e9:bc:2f:f3:56:c6:0e:88:9a:a2:66:91:de:ec:d5: 1d:51:bf:38:99:c5:42:8f:57:39:4a:5a:a1:71:b2: a1:ea:01:81:68:43:aa:a1:69:a9:ce:bc:49:3f:37: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2A:39:E7:AD:C0:FC:13:DE:1D:29:E6:CE:8C:82:2A:9B:D7:47:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:bc:80:90:18:61:0b:47:ee:c2:1e:cf:8b:2c:f7:54:ef:ff: 31:67:1c:fc:30:99:37:3c:3e:56:f7:4b:91:14:75:59:cb:5d: e8:6d:9e:30:55:de:c5:dd:c6:7f:91:03:47:88:16:f7:2f:ec: 1b:35:60:8b:83:cb:8a:91:ec:7a:7c:b1:e9:21:9c:b7:46:31: fe:d6:ce:ff:70:b2:c7:29:c5:57:b4:be:cd:e8:70:27:b2:ac: d9:e2:03:05:ce:45:01:95:04:8b:5f:ea:42:97:ac:2f:a6:ab: 57:14:ab:31:4c:20:6b:34:7d:0b:e6:18:5e:22:69:d8:53:ad: 78:0f:6f:dd:00:b7:3e:58:34:7a:06:45:59:87:9f:32:82:c7: cf:67:e7:60:64:cf:39:19:5c:e5:13:fb:44:ca:b2:95:a9:a7: 3b:b5:34:7c:b3:9a:f8:31:7a:df:e8:9f:f9:3d:18:15:60:76: de:7b:11:da:56:78:c9:97:2b:74:c7:f6:4f:1d:3c:9e:99:4d: fc:27:f7:95:e1:44:2a:35:b5:96:32:00:f4:76:56:aa:5f:3b: bb:c6:f1:7e:84:59:e9:c2:c6:82:7e:42:c6:d0:b8:5a:8d:d8: 8b:72:78:43:77:41:df:2f:f0:7d:0a:a7:98:85:43:d1:de:dc: 64:81:b4:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnSZZUUXQEKXT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk OTAwOWEwZjktYzZmNi00OGQ5LTllOWQtODU2OWIzMTdlYTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkH+e8WgaXV2SDrI4dDSQiT9nCGOv++V4Pqw ZOlBOQkpNH97DImrpTumCVWpAXIXHYwj8FKccQrZZhqCvZf8UQaQ+R4k/JCH7Vdz OzyO9ZYAlDgnxlSIQPEXrvf/wQuiCR7UfpUGiAo/sxNM+8PjNTem1yALGHHPOV13 jbvNDboR7kTnhnJFSBKA8PoUD9RNRImgaQNbFRlRZiSXSjQaRk+I8ysg6/KaNcWk uW1/JNHGPr1QrvlLT9R38yndTOPNHk5q0uFWZI6DEwoZchkapW3pvC/zVsYOiJqi ZpHe7NUdUb84mcVCj1c5SlqhcbKh6gGBaEOqoWmpzrxJPzf+IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8qOeetwPwT3h0p5s6Mgiqb10cgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWE0YTIyOTktZjNlMC0z YTY4LWI2OTItNzY4OTk3MGYxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFa8gJAYYQtH7sIez4ss91Tv/zFnHPwwmTc8Plb3S5EUdVnLXehtnjBV 3sXdxn+RA0eIFvcv7Bs1YIuDy4qR7Hp8sekhnLdGMf7Wzv9wsscpxVe0vs3ocCey rNniAwXORQGVBItf6kKXrC+mq1cUqzFMIGs0fQvmGF4iadhTrXgPb90Atz5YNHoG RVmHnzKCx89n52BkzzkZXOUT+0TKspWppzu1NHyzmvgxet/on/k9GBVgdt57EdpW eMmXK3TH9k8dPJ6ZTfwn95XhRCo1tZYyAPR2VqpfO7vG8X6EWenCxoJ+QsbQuFqN 2ItyeEN3Qd8v8H0Kp5iFQ9He3GSBtKI= -----END CERTIFICATE-----Generated at Sun May 11 15:24:38 2025 by rpki-client