$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3069ee-748f-3c14-af4b-974f82e65317.roa File: ae3069ee-748f-3c14-af4b-974f82e65317.roa (raw, json) Hash identifier: aH9kUW9K2cZXRhusQOqImR8S/J1jYQ1ilq6uRHdGAUA= Subject key identifier: E1:28:A1:5D:D6:18:37:7D:0A:59:A4:DE:E3:7C:53:13:AE:89:05:A0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A7E0A1B0F93DDCCC89C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3069ee-748f-3c14-af4b-974f82e65317.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 22394 IP address blocks: 174.41.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:7e:0a:1b:0f:93:dd:cc:c8:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=292944a1-4370-4b2b-8b51-66afd3d889c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:81:f8:b5:52:cc:3e:9b:0e:35:99:fa:38: 48:1c:5d:c1:96:0e:ac:3a:e1:20:4d:51:e4:e0:b4: 1d:09:ea:a6:fd:09:74:d6:e3:17:1f:b0:90:4f:bf: 0e:90:5b:86:da:91:8b:e4:ef:01:95:1b:35:e0:4b: c9:4c:4f:13:3a:eb:63:f4:30:20:cb:a1:4d:e4:34: 38:2c:b0:8f:9c:54:62:dc:e1:28:0d:72:68:60:bb: 3d:2f:82:5c:60:63:84:07:fb:09:1c:e1:87:67:fb: 98:86:98:30:94:e2:a7:bc:7d:2a:33:0d:fa:0c:7a: 7f:91:6a:44:cd:ae:ca:e6:7c:60:29:aa:9d:0a:3b: 3a:80:78:9a:5c:78:3f:30:7b:70:0e:dd:87:d4:ac: cb:03:f6:46:d7:7c:27:d0:7b:33:ea:21:79:94:64: d0:16:8c:63:14:ae:7f:6c:86:c0:8f:a3:1e:56:5e: 30:3f:61:12:30:45:5f:d5:c9:1c:87:4b:73:4e:3e: 53:f6:b1:de:4b:76:5c:8f:05:75:46:b4:9a:5a:f3: 03:e1:8d:d5:8c:63:c9:0d:97:be:25:8b:91:ce:d3: f6:c2:b5:52:ee:e4:52:75:63:3c:01:b6:1e:5b:82: 75:27:6f:f5:39:44:28:f8:46:0b:b8:68:5c:e2:9d: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:28:A1:5D:D6:18:37:7D:0A:59:A4:DE:E3:7C:53:13:AE:89:05:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3069ee-748f-3c14-af4b-974f82e65317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e7:ac:ef:6a:9a:96:cd:68:9c:65:ab:85:02:af:0d:7f:77: a9:01:42:da:3f:46:69:7c:94:b2:bc:e5:be:b4:16:2a:86:e2: 7c:b4:ff:9d:37:ff:53:22:86:bc:b7:aa:9b:9b:c0:62:87:d6: 64:25:ef:29:3d:21:b1:d0:4e:c3:aa:17:1b:af:a6:27:7e:54: 7c:d9:8b:bd:1e:6c:54:04:21:c3:95:77:76:65:27:aa:04:05: c0:b5:1b:0f:54:fc:4a:1d:48:79:52:37:e3:79:de:05:d2:26: e8:40:20:0d:53:b6:50:e1:00:6c:57:f3:68:6c:eb:24:98:19: 6a:fe:02:49:49:c5:32:4a:0d:ec:7b:7e:84:cc:99:56:69:73: 3a:03:1c:75:69:3b:54:11:08:5a:c0:26:df:27:22:8d:7b:66: e3:89:ad:70:8b:be:9a:8e:d3:4c:71:7c:a0:4e:c2:b6:02:fb: 79:79:d3:1b:3b:25:41:84:b3:84:ef:38:75:eb:6c:d5:54:34: 31:5e:c1:39:5b:88:f0:50:fd:76:39:80:49:9a:6c:25:29:db: b6:56:04:b2:e4:ab:c1:ca:1c:e5:a9:c6:c7:63:a6:63:37:35: 4c:9d:17:f1:b1:d6:d1:ea:f4:09:9a:8b:11:5f:a6:cd:c4:0e: ce:3c:69:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmn4KGw+T3czInAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MjkyOTQ0YTEtNDM3MC00YjJiLThiNTEtNjZhZmQzZDg4OWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL6B+LVSzD6bDjWZ+jhIHF3Blg6sOuEgTVHk 4LQdCeqm/Ql01uMXH7CQT78OkFuG2pGL5O8BlRs14EvJTE8TOutj9DAgy6FN5DQ4 LLCPnFRi3OEoDXJoYLs9L4JcYGOEB/sJHOGHZ/uYhpgwlOKnvH0qMw36DHp/kWpE za7K5nxgKaqdCjs6gHiaXHg/MHtwDt2H1KzLA/ZG13wn0Hsz6iF5lGTQFoxjFK5/ bIbAj6MeVl4wP2ESMEVf1ckch0tzTj5T9rHeS3ZcjwV1RrSaWvMD4Y3VjGPJDZe+ JYuRztP2wrVS7uRSdWM8AbYeW4J1J2/1OUQo+EYLuGhc4p2PkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEooV3WGDd9Clmk3uN8UxOuiQWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWUzMDY5ZWUtNzQ4Zi0z YzE0LWFmNGItOTc0ZjgyZTY1MzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrinQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLnrO9qmpbNaJxlq4UCrw1/d6kBQto/Rml8lLK85b60FiqG4ny0/503 /1Mihry3qpubwGKH1mQl7yk9IbHQTsOqFxuvpid+VHzZi70ebFQEIcOVd3ZlJ6oE BcC1Gw9U/EodSHlSN+N53gXSJuhAIA1TtlDhAGxX82hs6ySYGWr+AklJxTJKDex7 foTMmVZpczoDHHVpO1QRCFrAJt8nIo17ZuOJrXCLvpqO00xxfKBOwrYC+3l50xs7 JUGEs4TvOHXrbNVUNDFewTlbiPBQ/XY5gEmabCUp27ZWBLLkq8HKHOWpxsdjpmM3 NUydF/Gx1tHq9AmaixFfps3EDs48aZE= -----END CERTIFICATE-----Generated at Sun May 11 14:52:26 2025 by rpki-client